Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/o74rBkwgi-OLyw8qLeq0VZnWs9M.roa
File:                     o74rBkwgi-OLyw8qLeq0VZnWs9M.roa (raw, json)
Hash identifier:          XmOmIlqK0EcHoxKDnpHB1Iv3cjgrTtgXMu4pU/uNCvA=
Subject key identifier:   A3:BE:2B:06:4C:20:8B:E3:8B:CB:0F:2A:2D:EA:B4:55:99:D6:B3:D3
Certificate issuer:       /CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Certificate serial:       0194266B96396EA8696785CF306C9BBC7018
Authority key identifier: 7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/o74rBkwgi-OLyw8qLeq0VZnWs9M.roa
Signing time:             Thu 02 Jan 2025 09:49:32 +0000
ROA not before:           Thu 02 Jan 2025 09:49:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     30742
IP address blocks:        80.245.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:96:39:6e:a8:69:67:85:cf:30:6c:9b:bc:70:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
        Validity
            Not Before: Jan  2 09:49:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a3be2b064c208be38bcb0f2a2deab45599d6b3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f0:fd:b8:84:87:cf:16:df:3f:d5:3b:93:e0:
                    33:4d:01:71:2a:c1:57:a1:27:7e:cd:cd:a5:4a:8d:
                    2d:dd:69:9d:a5:4f:c4:f0:d3:22:61:ca:98:e6:9e:
                    47:45:dc:03:fd:50:d5:48:07:89:c4:a7:9b:13:d5:
                    61:41:06:af:de:fe:54:c8:01:9f:43:61:c6:62:f2:
                    e5:b9:d7:d9:3d:35:ba:75:c8:39:e3:af:80:37:f4:
                    62:fd:25:64:65:c8:b5:6a:d7:da:56:f3:f8:d9:cf:
                    73:93:5c:e3:63:34:cc:fc:7f:b3:09:bc:aa:65:ae:
                    fb:a2:5d:1c:82:79:2c:65:b7:28:3f:60:6f:0f:40:
                    1b:86:ee:59:dc:56:74:d1:fd:27:9f:7a:c4:81:f8:
                    db:bc:0a:b9:d3:24:e9:d4:c4:98:a8:2d:53:05:d6:
                    ba:d7:45:00:98:2f:98:2f:79:e8:5f:6d:4e:a8:5f:
                    37:13:e0:f5:ee:e7:c0:6e:24:2b:50:69:97:91:bb:
                    44:fa:0c:4f:ee:71:c3:bf:e6:3c:b9:d8:a7:a5:71:
                    be:1f:37:d5:55:c7:ac:55:fb:fe:0b:97:6d:35:52:
                    cf:c3:72:ab:52:10:e0:f4:72:7b:4e:32:7f:d8:61:
                    af:48:f2:e7:25:1f:fc:6f:7f:77:3d:7f:22:b4:f8:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BE:2B:06:4C:20:8B:E3:8B:CB:0F:2A:2D:EA:B4:55:99:D6:B3:D3
            X509v3 Authority Key Identifier:
                keyid:7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/o74rBkwgi-OLyw8qLeq0VZnWs9M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.245.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:89:ba:52:7e:28:23:f4:ec:7e:cb:c6:40:69:3b:ae:d4:7b:
         21:b5:56:bc:d1:69:df:55:0d:05:2a:d0:9e:ed:24:24:f1:d1:
         30:3c:5b:03:d0:3a:cc:8f:61:24:75:13:05:21:e1:c0:e4:58:
         ed:e1:ec:32:76:2c:91:dd:43:48:1c:07:d1:5c:a7:56:bf:ab:
         99:88:cd:50:2f:f5:39:18:ee:3b:99:5a:51:ae:dd:bf:7b:86:
         9e:02:01:dd:e3:41:08:f1:7f:52:7e:ef:04:53:97:a1:75:d5:
         66:5d:e4:9f:21:00:3a:b8:7f:7f:c4:63:63:39:03:62:ad:12:
         00:03:db:ba:99:a4:00:57:43:9d:48:4f:76:d5:14:c3:03:d1:
         ef:74:b8:bc:83:86:b3:e7:e0:5e:88:2e:eb:18:fa:52:54:7e:
         9a:76:eb:c2:dc:8c:ca:af:da:09:38:b7:ae:0c:b1:9e:20:d9:
         f3:5a:38:d5:4a:73:2e:ca:77:48:31:f2:03:c4:63:0e:dc:b7:
         ae:8a:ca:fc:a3:fa:69:7b:a5:1a:fb:3b:d0:b3:92:24:68:e5:
         b4:a1:5a:7e:01:a4:42:b1:d1:d1:0a:5d:f6:be:05:e9:6f:02:
         20:3d:d6:7d:e7:70:12:3e:5b:c1:e7:dc:90:f5:02:2e:79:e2:
         54:e6:8f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----