Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/v5mMLWDyDi7CQki8wtNGLvZaSFo.roa
File:                     v5mMLWDyDi7CQki8wtNGLvZaSFo.roa (raw, json)
Hash identifier:          QY/aaNbMvjreUlmsWUFxIkBwGJaecYw8AUp+m4XK/7w=
Subject key identifier:   BF:99:8C:2D:60:F2:0E:2E:C2:42:48:BC:C2:D3:46:2E:F6:5A:48:5A
Certificate issuer:       /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial:       019427486A7C336F36FD0B4204D6E8B7A36B
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/v5mMLWDyDi7CQki8wtNGLvZaSFo.roa
Signing time:             Thu 02 Jan 2025 13:50:44 +0000
ROA not before:           Thu 02 Jan 2025 13:50:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207435
IP address blocks:        82.115.212.0/24 maxlen: 24
                          2a10:3a00::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:6a:7c:33:6f:36:fd:0b:42:04:d6:e8:b7:a3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
        Validity
            Not Before: Jan  2 13:50:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bf998c2d60f20e2ec24248bcc2d3462ef65a485a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:b6:31:54:7b:81:46:f5:e0:89:ac:0b:58:
                    4c:04:d7:e5:66:ec:e0:ec:78:6d:bd:e4:20:52:7c:
                    64:7a:3c:15:ea:de:92:f8:40:ea:60:a6:52:76:4a:
                    de:f9:d4:f0:07:bd:65:2e:c9:65:59:4c:e9:06:7e:
                    22:6c:c4:7d:9f:84:b9:74:f4:9c:00:d8:38:4f:63:
                    a4:2e:42:35:fa:f4:90:a1:c2:14:f2:4e:f2:7c:3b:
                    ca:3a:b0:95:67:48:13:e0:58:70:d5:57:29:4e:40:
                    58:ba:06:5d:9e:72:89:46:7f:34:d8:0e:cf:76:62:
                    17:89:a0:e7:fc:cd:68:af:4b:76:c1:11:17:b4:5c:
                    76:40:d1:76:bb:f8:de:20:e4:a7:35:9d:9b:1a:e6:
                    8e:c3:38:63:57:dc:76:eb:c4:f6:d1:d6:45:5b:75:
                    18:87:42:e4:03:54:9e:3c:ce:43:b0:e4:e3:da:a4:
                    13:00:c0:bd:64:54:fa:8a:79:42:5c:52:70:f0:e2:
                    5a:b1:95:ca:59:3a:53:46:d9:30:07:97:25:68:c2:
                    61:0e:ab:b4:b2:ab:36:56:8e:af:88:44:b5:ef:e9:
                    74:61:de:d4:96:af:45:54:f2:0f:48:7d:6b:79:d2:
                    41:4b:62:81:2d:89:02:f1:c8:65:75:5d:2e:50:b5:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:99:8C:2D:60:F2:0E:2E:C2:42:48:BC:C2:D3:46:2E:F6:5A:48:5A
            X509v3 Authority Key Identifier:
                keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/v5mMLWDyDi7CQki8wtNGLvZaSFo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.115.212.0/24
                IPv6:
                  2a10:3a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         55:87:ad:91:0c:45:ef:88:b3:d4:3b:87:f1:1e:5f:9c:25:7a:
         47:5b:e1:36:e7:fb:26:08:83:48:19:7e:25:46:98:34:4d:f3:
         e4:e7:76:4c:a4:d3:51:c2:50:cf:40:31:b5:32:df:ac:23:c3:
         75:ef:0e:7d:9e:f0:03:44:bc:2a:63:4b:c3:e6:ea:74:95:8b:
         91:12:fb:6e:dc:ea:ef:cc:00:83:eb:f2:a8:11:e8:ab:44:4f:
         34:d0:bd:11:54:c7:c0:a9:da:50:88:24:10:47:7f:9d:41:ff:
         e0:8a:ac:d0:65:6a:43:73:52:b7:50:7b:d1:fd:04:d0:9f:23:
         a4:08:32:f6:c0:ac:7c:1f:15:65:91:ed:48:8e:01:5f:35:df:
         f2:c1:3e:10:a5:a8:36:30:9c:02:eb:e8:0c:1e:58:76:de:7b:
         a2:7e:10:1c:10:15:c2:54:c8:99:ca:84:df:b7:e3:7e:1d:dd:
         44:25:8f:13:6e:59:63:41:a5:5a:e1:ea:90:90:96:f3:61:26:
         b9:dd:24:73:7a:34:85:45:f4:b0:06:9d:13:a5:6b:87:09:28:
         56:5e:37:e7:76:c9:1b:80:56:c8:f0:62:05:c6:15:e1:c5:69:
         1c:b5:5b:b4:7e:c6:61:df:ec:45:ff:44:1b:98:47:44:77:a4:
         0d:a4:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----