Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/Iu2chtpqWcHWj5ICMYSAAIfiajQ.roa
File:                     Iu2chtpqWcHWj5ICMYSAAIfiajQ.roa (raw, json)
Hash identifier:          V17YrAyWPucLnXshp6FV+qrXZ0uT+XGK95n0G3fUe08=
Subject key identifier:   22:ED:9C:86:DA:6A:59:C1:D6:8F:92:02:31:84:80:00:87:E2:6A:34
Certificate issuer:       /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial:       019473B96A103F1A276D49A6910630DAC423
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/Iu2chtpqWcHWj5ICMYSAAIfiajQ.roa
Signing time:             Fri 17 Jan 2025 10:05:18 +0000
ROA not before:           Fri 17 Jan 2025 10:05:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214345
IP address blocks:        212.6.49.0/24 maxlen: 24
                          2001:3a80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:73:b9:6a:10:3f:1a:27:6d:49:a6:91:06:30:da:c4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38049be801a136e387abc14498e486044d96278
        Validity
            Not Before: Jan 17 10:05:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=22ed9c86da6a59c1d68f92023184800087e26a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:72:83:b8:d0:71:4d:9d:34:e3:58:b7:30:
                    7f:9e:d8:f0:d6:2c:6f:58:3b:62:05:34:3f:87:7c:
                    71:6b:23:4a:d3:3f:8e:2a:50:fb:8f:f4:d8:fe:2a:
                    b4:d4:76:32:4a:4a:bc:92:88:aa:23:ff:2b:8b:cf:
                    ea:70:6e:91:4b:cc:52:a5:aa:b6:8f:01:3c:9b:e3:
                    3c:4f:70:bb:2a:ef:d3:a2:f5:7b:c7:64:c4:bf:41:
                    45:a9:23:03:d9:87:bd:a7:85:40:31:c5:18:09:b0:
                    d9:f8:e5:b2:d2:0b:59:49:58:0c:b0:3d:eb:66:29:
                    05:1a:75:10:59:72:d6:2e:bf:48:0d:45:d6:f4:90:
                    5f:bc:22:0e:95:f7:51:f9:ef:00:76:c5:b2:4a:dc:
                    3c:a7:d5:8d:43:ae:e4:c6:d7:06:48:32:47:38:f2:
                    74:6a:5d:cb:29:02:85:4a:6b:8c:99:69:c8:cc:d4:
                    9a:fb:04:19:01:46:f1:10:a6:c6:ae:4e:2f:1d:54:
                    2e:c0:c3:a5:48:e2:4c:dd:4e:e0:7a:d9:4a:27:a9:
                    d4:93:fc:e1:c5:c3:99:ae:b1:bd:2e:04:37:b3:08:
                    f7:c8:ef:0e:55:ca:c6:d1:a8:ad:8a:da:27:80:67:
                    f5:af:a8:c7:5d:af:4f:3f:09:17:93:26:b8:08:74:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:ED:9C:86:DA:6A:59:C1:D6:8F:92:02:31:84:80:00:87:E2:6A:34
            X509v3 Authority Key Identifier:
                keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/Iu2chtpqWcHWj5ICMYSAAIfiajQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.49.0/24
                IPv6:
                  2001:3a80::/29

    Signature Algorithm: sha256WithRSAEncryption
         48:b2:0a:ad:27:6f:53:89:89:f8:28:d2:81:84:92:78:4c:59:
         d1:6e:ac:ea:44:a9:cb:1d:06:26:fd:a3:ef:d5:9d:d5:20:99:
         16:2b:70:7a:bf:b6:63:2f:41:91:61:5e:84:d4:70:fb:a3:1c:
         c2:c0:dc:09:11:5c:71:21:cd:b4:5a:71:10:9c:db:1f:5c:dd:
         e8:ce:9b:93:80:25:a4:15:55:0d:38:e8:57:48:a4:c3:73:c6:
         62:14:e6:2c:ae:25:fb:86:1d:aa:c9:6f:a0:2e:e5:1f:09:b4:
         aa:31:fb:00:8d:e5:0c:ad:0c:86:4c:80:f2:6b:00:a1:4d:a3:
         d5:27:a8:4b:7a:69:4d:8b:7c:c1:41:0f:3a:f1:cb:d6:b2:f9:
         86:53:b7:43:9f:ab:ac:c0:c6:0c:73:eb:7f:79:75:a0:20:8f:
         61:ea:d3:05:5f:a1:7c:b7:e2:bf:a0:09:86:be:89:a6:8a:fd:
         94:67:fc:bd:0f:71:85:04:43:74:87:d9:07:01:c9:94:79:19:
         65:c2:eb:e1:a1:54:76:0b:2b:69:25:b2:75:90:e7:4d:6c:b6:
         e3:7d:5b:3a:f6:a7:d9:63:5b:89:8d:62:04:06:ed:3a:12:cc:
         ec:63:84:a5:02:12:f3:1d:e6:d0:8d:54:53:53:e0:39:22:d0:
         04:a1:96:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----