Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/jteACDbaYC2GMTFvAHtj6JRaDvo.roa
File:                     jteACDbaYC2GMTFvAHtj6JRaDvo.roa (raw, json)
Hash identifier:          FyyB216euYUAYG4P0lTXHk9/k4BDveAtrAV0IpAsB3U=
Subject key identifier:   8E:D7:80:08:36:DA:60:2D:86:31:31:6F:00:7B:63:E8:94:5A:0E:FA
Certificate issuer:       /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial:       01942143870FC0146D63D397E89559057247
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/jteACDbaYC2GMTFvAHtj6JRaDvo.roa
Signing time:             Wed 01 Jan 2025 09:47:41 +0000
ROA not before:           Wed 01 Jan 2025 09:47:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209350
IP address blocks:        78.24.207.0/24 maxlen: 24
                          2a09:5e00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:87:0f:c0:14:6d:63:d3:97:e8:95:59:05:72:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
        Validity
            Not Before: Jan  1 09:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8ed7800836da602d8631316f007b63e8945a0efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:fb:d6:55:01:74:16:bd:23:54:7a:96:5e:
                    4a:04:f5:18:fc:dd:d5:a1:25:ea:02:92:c9:71:6a:
                    7a:dd:03:c8:66:47:74:b3:81:6f:6b:35:c9:ed:1b:
                    02:e8:fd:7e:d6:d1:3b:32:88:d3:c7:3e:cc:d2:42:
                    b6:5e:5c:1a:99:9c:8e:59:9f:bb:5f:eb:56:f1:e0:
                    b1:b2:c6:5b:13:3e:17:2c:06:0f:b1:f6:0d:8d:cb:
                    c9:58:87:69:ff:00:8f:fa:96:38:c3:1d:db:4e:d9:
                    6f:51:fe:02:40:d0:77:2d:b1:dc:8c:e3:72:e9:2d:
                    12:08:6c:e2:dd:de:3c:e0:43:70:8c:92:3d:d1:6a:
                    d3:20:2f:cf:38:75:51:b7:76:3f:ab:ec:8d:c3:b0:
                    9d:b1:71:7f:c9:81:ed:5b:f6:5b:34:61:e0:b6:06:
                    98:b4:3e:7b:f4:88:42:89:2e:0e:30:42:a9:be:cb:
                    a4:05:a3:18:f9:1b:ad:53:08:99:94:db:04:61:62:
                    f8:ed:e4:49:c3:b6:d7:59:fa:52:85:fa:3c:c8:c4:
                    8e:ef:ac:46:6e:e0:a0:6e:df:ff:92:63:b8:1b:2f:
                    c9:77:ec:9a:30:f3:da:21:6f:67:50:04:eb:3f:67:
                    c9:0f:b2:98:8d:eb:53:2b:5e:3b:3a:10:2f:cb:6f:
                    a7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D7:80:08:36:DA:60:2D:86:31:31:6F:00:7B:63:E8:94:5A:0E:FA
            X509v3 Authority Key Identifier:
                keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/jteACDbaYC2GMTFvAHtj6JRaDvo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.24.207.0/24
                IPv6:
                  2a09:5e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         b1:30:58:9a:f4:c6:7e:f5:28:d7:f5:91:0f:ae:38:c0:0a:5c:
         8f:86:c6:54:2c:64:7e:45:4c:a2:59:d9:dc:d8:86:4a:7d:f2:
         7d:73:25:32:1a:91:7a:c7:5b:3f:18:08:53:85:e3:ab:27:a6:
         fa:59:94:2b:15:14:32:79:c7:08:66:cd:ce:aa:4c:e2:4d:06:
         a5:9b:17:ff:8e:09:12:90:72:79:2e:49:f3:f9:6f:c6:49:e8:
         81:ce:06:73:7b:e1:15:68:0e:c7:b9:99:f4:46:b8:f4:86:41:
         85:9a:0a:1c:05:48:56:99:3d:d6:76:d5:fe:b6:9c:57:3b:e9:
         85:d5:fe:95:bb:27:60:b9:2c:82:91:54:75:0b:19:51:f4:8d:
         51:ab:28:a4:bf:a3:fd:d0:21:55:6a:61:b4:66:99:b4:73:0c:
         c8:31:53:2f:61:57:ad:91:61:29:36:56:f9:87:59:b5:94:ce:
         57:8e:68:b9:90:78:ce:8c:7e:b0:b6:8a:2c:8c:cc:75:0a:0b:
         bc:b4:6e:f7:b2:74:04:04:2f:23:d2:99:7f:c4:ac:25:43:34:
         f2:c2:98:db:34:68:18:ae:9a:c6:85:a5:34:06:0f:45:60:c4:
         d1:3f:d9:fc:d2:db:1e:5f:15:8e:ae:f4:a2:03:ff:cf:ac:26:
         cf:8b:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----