Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/E21NAhDVeJIjhOGEeA7dZ6TV82c.roa
File:                     E21NAhDVeJIjhOGEeA7dZ6TV82c.roa (raw, json)
Hash identifier:          2Eo54WpqIcZduXMVnpn6V9sW+3m4FmzZ4Mra+/DmCe4=
Subject key identifier:   13:6D:4D:02:10:D5:78:92:23:84:E1:84:78:0E:DD:67:A4:D5:F3:67
Certificate issuer:       /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Certificate serial:       0194228E42C2755F83233187E30FCE8E267A
Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/E21NAhDVeJIjhOGEeA7dZ6TV82c.roa
Signing time:             Wed 01 Jan 2025 15:48:55 +0000
ROA not before:           Wed 01 Jan 2025 15:48:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49130
IP address blocks:        185.56.106.0/24 maxlen: 24
                          2a00:7fc0:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:42:c2:75:5f:83:23:31:87:e3:0f:ce:8e:26:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
        Validity
            Not Before: Jan  1 15:48:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=136d4d0210d578922384e184780edd67a4d5f367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0e:70:be:24:ed:aa:34:f2:e6:10:ed:48:64:
                    29:b0:09:ca:68:fc:ff:62:5a:cd:22:06:2e:a1:94:
                    b3:75:d3:9a:a3:10:d3:18:a6:79:25:57:fb:07:89:
                    49:ba:4b:28:87:87:ad:78:8a:99:a9:78:42:52:a0:
                    46:8a:e2:47:d8:b6:8a:72:ea:00:ca:af:03:2c:a3:
                    ff:64:ba:d2:10:e2:6e:90:cf:cc:6a:36:b6:8e:21:
                    b8:7f:42:39:48:f3:09:9a:05:07:80:f7:e2:e6:a6:
                    8d:fe:a1:a8:2c:78:21:0f:9d:6c:ec:85:38:61:6f:
                    6b:34:14:f7:87:ea:4c:2c:df:f3:28:7e:81:8f:bd:
                    e8:35:4e:9c:58:b6:ba:b3:58:27:fa:5c:9f:c6:a1:
                    90:55:33:b9:42:ad:6f:56:03:ed:e5:2c:c2:c3:0c:
                    b0:b7:62:b0:64:66:c6:70:c3:60:b4:e5:5f:cd:6e:
                    da:96:59:79:68:cd:d9:3b:e1:06:6c:7a:aa:2c:39:
                    59:df:1a:64:1b:f4:db:21:e8:22:9b:a5:94:91:13:
                    74:76:c3:45:72:42:bd:ba:ca:4a:7e:e9:57:a3:90:
                    4a:d2:b3:c6:50:ae:a7:3d:65:b3:a0:a0:8c:40:50:
                    75:6c:d2:6e:0c:c3:92:d2:0c:91:89:54:67:8e:57:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6D:4D:02:10:D5:78:92:23:84:E1:84:78:0E:DD:67:A4:D5:F3:67
            X509v3 Authority Key Identifier:
                keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/E21NAhDVeJIjhOGEeA7dZ6TV82c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.56.106.0/24
                IPv6:
                  2a00:7fc0:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:6b:78:9e:73:84:f2:47:e3:9f:67:cc:eb:67:55:30:b1:a8:
         66:42:ba:96:38:f3:b1:41:ec:39:ec:a4:e7:5f:69:68:07:a6:
         85:80:2a:2b:5d:eb:92:8d:73:43:cb:6e:eb:55:4e:ed:10:ad:
         03:fa:23:b4:5e:5d:1a:33:39:1f:dd:5c:b5:d3:68:05:b5:5b:
         71:85:72:f2:0d:d2:bd:41:e9:40:4b:ea:28:79:0d:0c:5e:39:
         c4:c8:ef:10:a9:07:09:be:da:e1:c5:bb:f6:25:52:ba:8d:41:
         03:06:21:69:99:ff:1b:83:c4:6f:5f:24:3a:b0:d7:41:76:00:
         61:c2:6d:9f:9f:75:e7:1c:53:46:6a:ba:63:e0:aa:c2:15:4b:
         b7:a0:df:e2:2e:4f:b7:d6:0d:3e:ae:be:bd:d2:9b:f4:a9:51:
         82:0a:77:9c:1a:d5:25:d0:7d:5c:f8:5a:98:db:87:cd:54:24:
         8f:21:12:03:86:88:30:5c:9e:00:10:fe:d8:81:9a:4c:12:61:
         26:49:dd:fd:4a:bc:4a:04:46:c2:01:4a:dd:87:08:0e:4a:a1:
         3e:c6:94:6d:8b:b4:37:dd:04:9e:09:c4:16:0e:1b:59:c4:75:
         72:e4:33:f7:1f:8c:1e:31:cc:5c:93:14:dc:3a:12:c7:91:ab:
         f7:28:e5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----