Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/qMr-LBReCBqYRhVBoJttXFZAERs.roa
File:                     qMr-LBReCBqYRhVBoJttXFZAERs.roa (raw, json)
Hash identifier:          +wcj7meQsd/DFjEen1Pm4EtbrLhEFNBjzasK/qwIzFY=
Subject key identifier:   A8:CA:FE:2C:14:5E:08:1A:98:46:15:41:A0:9B:6D:5C:56:40:11:1B
Certificate issuer:       /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial:       01942748568A5B2BC881F33523B98AAC5B4F
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/qMr-LBReCBqYRhVBoJttXFZAERs.roa
Signing time:             Thu 02 Jan 2025 13:50:39 +0000
ROA not before:           Thu 02 Jan 2025 13:50:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39200
IP address blocks:        193.189.123.0/24 maxlen: 24
                          2001:678:b0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:56:8a:5b:2b:c8:81:f3:35:23:b9:8a:ac:5b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
        Validity
            Not Before: Jan  2 13:50:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a8cafe2c145e081a98461541a09b6d5c5640111b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7b:b9:b7:06:67:6e:15:d3:be:80:88:2c:34:
                    66:28:1e:69:af:c2:99:55:83:9e:09:36:c3:e6:a4:
                    c8:c6:01:79:40:c1:fa:7a:40:fc:b1:30:fe:23:39:
                    33:eb:cb:c6:83:6d:bb:5f:dd:50:41:e7:3f:a2:85:
                    aa:cb:c5:ff:53:3d:3d:b2:a9:17:e0:0a:d1:1f:ff:
                    cb:0d:4f:00:f5:96:aa:da:ba:92:16:8d:0e:5c:3e:
                    b8:92:4c:3a:0e:79:e0:1a:a3:74:92:6a:c0:65:9a:
                    09:59:2d:53:52:b9:0c:c7:38:bb:c0:1e:2c:28:26:
                    ba:4c:be:a9:97:f1:7c:28:3c:97:92:f0:bb:bd:a2:
                    3b:0f:69:80:5c:42:8f:31:78:dc:7d:1f:ff:59:96:
                    c4:b5:91:81:ff:49:15:ab:cb:b4:95:66:f6:63:c9:
                    af:90:5f:7d:a3:c6:ad:6b:03:b0:9c:22:19:1d:89:
                    3e:da:ff:49:3c:12:bf:43:ed:e2:1d:90:67:f0:fc:
                    df:55:59:07:9e:d9:21:b7:2b:c0:b0:cb:3c:a2:b9:
                    3f:a1:e7:e4:dc:63:a1:4a:cf:ae:37:b2:7b:40:51:
                    5b:c8:e6:6f:1f:66:a5:d9:47:e3:02:11:d0:af:0a:
                    48:cb:94:cf:a2:d8:74:88:e7:38:9c:75:02:08:4b:
                    f1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CA:FE:2C:14:5E:08:1A:98:46:15:41:A0:9B:6D:5C:56:40:11:1B
            X509v3 Authority Key Identifier:
                keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/qMr-LBReCBqYRhVBoJttXFZAERs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.189.123.0/24
                IPv6:
                  2001:678:b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:d8:8a:c4:09:93:cb:64:78:db:94:34:66:94:b1:d3:bf:a9:
         ad:0a:22:c1:f4:80:e2:d5:5c:1e:b5:3e:c6:e2:b4:6d:b6:b6:
         fd:bb:4a:a0:39:85:0f:73:12:58:5d:8b:44:9b:38:80:b8:0d:
         47:79:78:4c:97:db:29:ed:28:94:e9:f1:b9:9a:ef:32:09:97:
         ac:07:82:28:73:f3:ef:a4:91:79:84:99:c3:f8:ed:bf:11:82:
         3d:74:d3:7e:f2:db:65:7a:8d:5e:84:66:d0:13:3f:80:5f:64:
         73:15:bb:6b:9b:5f:28:81:52:ea:51:9c:b3:97:30:b9:f3:72:
         d2:42:30:b6:77:d7:88:c9:bb:f5:ea:61:a4:f4:24:7e:37:39:
         69:bb:e4:b7:d1:0f:89:66:b9:5a:0f:c2:1c:2c:27:dc:0f:0e:
         58:14:0a:91:a8:5d:39:a7:d6:79:1e:10:1f:7a:ef:d7:09:dd:
         45:22:73:15:29:94:95:aa:09:00:9f:11:e5:ff:eb:6f:9d:40:
         2a:af:0e:79:dd:1f:56:f6:a8:a6:41:c6:78:4d:5c:fd:d7:7e:
         65:69:f7:7c:ed:11:d6:fa:95:6e:40:86:3a:77:59:12:e2:6c:
         01:61:30:99:83:2f:2d:09:cf:a1:8d:0a:6a:69:15:60:d0:dd:
         22:3f:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----