Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/NZJmAPdUybW9a6GCkRN10zMQnT8.roa
File:                     NZJmAPdUybW9a6GCkRN10zMQnT8.roa (raw, json)
Hash identifier:          5AtqasIBza/WYv2XwA17m4uOOH1l0GzoEt/jXqY/ECY=
Subject key identifier:   35:92:66:00:F7:54:C9:B5:BD:6B:A1:82:91:13:75:D3:33:10:9D:3F
Certificate issuer:       /CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Certificate serial:       018CC649D41C7C3A432C3393730E574B93C5
Authority key identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/NZJmAPdUybW9a6GCkRN10zMQnT8.roa
Signing time:             Mon 01 Jan 2024 18:29:36 +0000
ROA not before:           Mon 01 Jan 2024 18:29:36 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204572
IP address blocks:        185.246.144.0/22 maxlen: 22
                          2a0d:8580::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:49:d4:1c:7c:3a:43:2c:33:93:73:0e:57:4b:93:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
        Validity
            Not Before: Jan  1 18:29:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=35926600f754c9b5bd6ba182911375d333109d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1d:19:f2:f5:1c:9e:bf:57:b1:1f:75:47:cd:
                    f9:72:b9:59:47:12:1f:fe:c1:33:9b:ff:49:b8:ee:
                    a6:e5:81:1b:c2:bb:a9:6c:8f:8d:cd:4e:60:29:06:
                    b9:11:c1:b5:58:cc:58:dd:c5:f9:f5:87:7d:79:4c:
                    5a:b1:69:e5:1e:71:8f:86:1f:99:28:de:d0:f3:25:
                    cf:2a:ff:9c:be:68:f8:85:d8:d1:27:87:cf:85:5c:
                    ea:52:53:94:e2:e4:9b:42:e8:07:f2:db:e6:ce:26:
                    2f:e2:1b:47:ad:17:6f:1a:32:81:16:43:5f:05:be:
                    d6:b0:67:41:89:e7:11:ef:4f:6f:66:d3:3a:7b:c7:
                    4e:79:fa:74:62:a1:e4:2d:51:bb:9b:a1:4a:61:52:
                    2c:69:2e:f2:ba:a8:76:e3:15:96:ae:c0:ed:07:34:
                    54:49:2a:0a:1f:90:57:fb:66:0c:72:1a:dd:57:4a:
                    05:47:8d:e4:9e:3d:87:f4:55:22:d8:0b:5c:ea:a3:
                    ff:5c:5b:c5:21:59:c3:b6:61:d2:60:32:21:25:b0:
                    9d:2f:34:08:b1:6b:d1:42:19:1c:5e:96:36:d9:07:
                    57:61:82:26:8f:44:cb:10:8b:99:fc:ba:40:28:bc:
                    d1:fd:ef:ce:22:dd:e0:48:a5:df:e1:c8:e6:da:73:
                    0c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:92:66:00:F7:54:C9:B5:BD:6B:A1:82:91:13:75:D3:33:10:9D:3F
            X509v3 Authority Key Identifier:
                keyid:C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/NZJmAPdUybW9a6GCkRN10zMQnT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.144.0/22
                IPv6:
                  2a0d:8580::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:fd:9a:5a:db:1d:cb:65:fb:a6:42:aa:1c:fc:42:14:e2:81:
         98:fd:67:f9:90:50:a6:fe:ec:70:27:06:3d:03:ac:48:93:a9:
         a0:c1:f2:8c:4c:c7:20:ef:e6:c1:64:6c:ee:0c:b0:d7:a9:58:
         73:4a:22:cd:c4:3c:9b:8e:cb:23:ce:af:a2:12:d4:52:6e:83:
         fe:0a:3c:94:4a:08:2b:20:d5:b1:c0:65:6d:55:48:ae:f1:69:
         2c:8e:30:7e:cc:3f:b3:04:e3:fb:7e:b8:8e:ea:13:59:c6:1a:
         10:b9:e2:f4:08:c8:fd:8d:00:a5:d7:7a:09:36:c1:72:89:3f:
         34:49:63:4e:25:ba:79:e5:cd:a1:9e:e7:d6:71:3a:9b:bc:fe:
         e2:f6:ea:ce:b2:4e:71:9c:fc:58:30:2e:84:20:12:4b:79:83:
         c5:d8:bf:df:d2:c2:55:28:ca:f9:d6:0d:21:68:ac:30:fa:8c:
         0f:60:28:81:9b:ce:da:a2:ea:98:83:be:1b:d8:49:fc:82:5f:
         03:a3:0e:94:c9:c5:14:fb:b1:f8:b6:00:22:3f:7e:dd:5c:ab:
         ad:12:62:4b:7f:d9:da:9f:fe:2d:bf:3d:bf:68:46:37:a7:49:
         f9:d9:b2:b4:7e:c7:72:ce:65:fb:03:ee:f0:1a:5e:0f:18:2d:
         8c:a7:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----