Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/WlRuTCJYddDH_ysVV5GnnWoYfEE.roa
File:                     WlRuTCJYddDH_ysVV5GnnWoYfEE.roa (raw, json)
Hash identifier:          jZDPo73pyYZ9ohlhaHX22v8gbqxDIovMw2lLztIeSfo=
Subject key identifier:   5A:54:6E:4C:22:58:75:D0:C7:FF:2B:15:57:91:A7:9D:6A:18:7C:41
Certificate issuer:       /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Certificate serial:       0194228E41FD9C69756296B155841B08C661
Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/WlRuTCJYddDH_ysVV5GnnWoYfEE.roa
Signing time:             Wed 01 Jan 2025 15:48:55 +0000
ROA not before:           Wed 01 Jan 2025 15:48:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     43902
IP address blocks:        185.56.107.0/24 maxlen: 24
                          2a00:7fc0:8001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:41:fd:9c:69:75:62:96:b1:55:84:1b:08:c6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
        Validity
            Not Before: Jan  1 15:48:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5a546e4c225875d0c7ff2b155791a79d6a187c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:91:31:d6:d4:bb:76:59:40:9b:28:4c:8d:
                    e5:80:72:32:a3:1e:af:9b:68:39:b8:e0:95:4c:e0:
                    95:e5:6a:76:e7:e8:d5:c6:ba:1c:c0:aa:df:0a:08:
                    48:9b:eb:1c:85:c3:39:2b:fd:42:80:01:fe:5d:3c:
                    73:11:9b:86:57:70:a7:03:a0:a5:90:3a:53:4e:0f:
                    7c:a1:ca:91:63:7f:23:cd:33:65:ac:54:e0:e3:5e:
                    31:4d:52:d7:83:25:77:0f:1b:3e:44:97:c9:59:a0:
                    33:75:75:0d:25:c4:ea:26:50:09:06:86:f5:ce:27:
                    75:97:a3:67:f2:f1:63:d4:93:52:bd:73:59:f4:2a:
                    ea:a3:04:2a:16:89:2f:5a:f1:f5:f4:5c:7b:ca:09:
                    62:4b:4b:af:29:bf:19:f0:ce:6f:0b:d5:7b:0d:03:
                    ac:00:24:58:29:8c:4a:a8:cd:c8:0f:e1:23:bb:ec:
                    9b:a1:9d:d2:7b:29:d5:b3:06:aa:00:c1:56:0c:40:
                    d5:2f:8c:f7:8c:f6:7a:73:42:ce:26:08:70:52:4b:
                    29:6a:5e:5e:44:de:9a:48:e1:3c:3d:a8:01:a4:2d:
                    cd:27:92:de:92:22:f1:e2:b7:4a:d3:36:71:f3:4b:
                    f2:0b:a6:59:44:94:bd:80:2e:52:19:6a:50:1e:75:
                    7f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:54:6E:4C:22:58:75:D0:C7:FF:2B:15:57:91:A7:9D:6A:18:7C:41
            X509v3 Authority Key Identifier:
                keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/WlRuTCJYddDH_ysVV5GnnWoYfEE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.56.107.0/24
                IPv6:
                  2a00:7fc0:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:17:b2:82:17:c5:fa:ce:a4:46:41:31:6a:13:fd:85:99:18:
         19:2d:b1:a2:c3:bb:82:f8:69:fb:65:69:50:9d:57:ae:49:35:
         e9:cb:57:98:d7:43:00:79:e5:a9:33:0a:9f:84:38:ab:7f:d5:
         17:fe:f8:6c:f7:e3:f5:54:80:62:62:2f:30:96:15:53:f2:ab:
         48:bb:1c:85:d7:4b:86:35:ae:ec:e4:78:e3:eb:d8:11:3c:56:
         1b:dd:90:5c:81:f9:15:a6:bd:97:f5:be:21:d6:30:a5:94:3a:
         bf:de:e2:5a:49:2d:38:54:9f:ef:0c:a2:21:c5:da:1d:62:9b:
         ca:20:b2:e0:4c:ef:1f:27:43:34:4d:67:13:26:c8:16:4d:17:
         4d:3c:25:1b:06:3a:60:42:79:fc:70:4a:4a:10:78:5a:29:35:
         1e:01:0c:e1:db:93:1b:7d:23:70:b6:fe:d3:ee:4a:01:6b:32:
         70:33:95:38:d7:9c:04:dd:5f:a9:48:f9:3e:91:a7:04:77:c9:
         d1:c0:e8:ea:30:b5:93:4f:1d:50:56:fe:05:61:33:63:56:c3:
         94:33:52:0a:0d:d7:50:d7:52:39:68:20:19:49:d9:0e:c6:13:
         93:9d:44:14:a9:0a:10:a9:cc:b7:e5:40:83:45:3d:2f:ab:1c:
         74:5a:40:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----