Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/c5rAqPU3OE2FKIkvJ4wjskmbrNg.roa
File:                     c5rAqPU3OE2FKIkvJ4wjskmbrNg.roa (raw, json)
Hash identifier:          JmuCUlo1CMWiEzTSEz4Q+Y4P55Z2DQoMPJ07S5iefiU=
Subject key identifier:   73:9A:C0:A8:F5:37:38:4D:85:28:89:2F:27:8C:23:B2:49:9B:AC:D8
Certificate issuer:       /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial:       0190BACCFE0372E8BB6E6E8871A98448D435
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/c5rAqPU3OE2FKIkvJ4wjskmbrNg.roa
Signing time:             Tue 16 Jul 2024 09:08:34 +0000
ROA not before:           Tue 16 Jul 2024 09:08:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34136
IP address blocks:        212.110.138.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:ba:cc:fe:03:72:e8:bb:6e:6e:88:71:a9:84:48:d4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
        Validity
            Not Before: Jul 16 09:08:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=739ac0a8f537384d8528892f278c23b2499bacd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fb:57:d1:f3:da:79:e2:13:f8:d9:73:e2:fc:
                    c6:b4:11:f9:b8:b4:c7:d1:f6:4e:32:99:de:67:62:
                    4e:62:b6:d8:03:e2:35:bf:d3:c9:10:f2:5f:d9:52:
                    7a:e9:1e:82:b3:47:56:7e:98:25:ba:35:5a:31:82:
                    d6:7a:8d:12:a2:8d:db:3e:2c:a9:b5:93:60:ba:40:
                    02:74:2b:b1:7f:df:91:1a:4e:ad:3e:f4:13:ff:c7:
                    3d:dd:3a:50:12:de:4f:d1:1d:b7:df:c7:48:0e:77:
                    64:c7:81:dd:97:ed:d9:f0:b3:c6:55:86:21:72:37:
                    d2:54:b5:df:6b:3b:85:3b:4b:0c:5d:a0:97:c4:de:
                    d9:ac:d1:79:6a:1a:81:29:f5:c2:b8:df:56:a5:49:
                    c8:de:42:33:1b:6d:b1:02:9c:23:9f:31:d6:29:30:
                    24:47:55:19:0e:6a:b2:65:43:69:8a:ce:64:1e:6c:
                    28:da:56:c0:87:aa:44:5c:ef:cd:0e:55:ed:a7:d1:
                    13:c7:e7:10:86:b0:f7:33:98:d2:2b:b1:7e:34:6b:
                    97:a1:06:c1:89:e3:3c:1a:6d:04:e4:03:3a:8f:d7:
                    c9:25:98:ba:ac:ec:37:27:2c:6d:b3:02:63:c3:c2:
                    6e:ff:ec:31:e2:90:17:ac:bc:9f:eb:a9:7b:44:7a:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9A:C0:A8:F5:37:38:4D:85:28:89:2F:27:8C:23:B2:49:9B:AC:D8
            X509v3 Authority Key Identifier:
                keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/c5rAqPU3OE2FKIkvJ4wjskmbrNg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.110.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:27:ca:6f:1f:fa:ef:e1:3e:17:f9:f2:38:2a:32:45:0a:eb:
         a1:04:e5:ff:97:39:e5:3f:cc:c1:cf:fe:95:12:96:55:74:73:
         e7:1c:73:a9:e3:be:d0:ea:eb:fc:41:82:6b:d8:e9:f3:41:3f:
         ac:2c:18:49:7a:50:93:e2:94:99:4c:cb:63:03:15:79:54:18:
         91:e6:c8:13:b4:4f:1d:4d:ac:ae:fa:6a:43:76:05:0e:f7:a4:
         a3:b0:1b:16:fc:e3:7f:1d:c2:37:11:fa:46:0e:12:b0:ee:55:
         c8:83:72:8b:2f:2c:9d:08:28:33:6c:9c:68:20:02:7f:d5:e0:
         49:ba:0f:6e:af:0c:1d:b2:5e:cd:a0:73:59:60:e9:a9:25:96:
         aa:78:2d:61:ee:35:b8:13:99:ad:3c:e0:60:8a:93:a8:a5:04:
         f7:9c:ae:c6:34:d8:65:5b:53:8c:f3:73:b0:72:47:21:07:f5:
         0c:4e:0b:ce:ec:be:df:33:bb:14:a2:a3:1d:47:45:3b:53:c9:
         e2:c7:31:e0:8d:db:5e:b3:d0:47:c1:d9:84:8c:68:1e:e2:b5:
         e3:64:4b:9a:9b:1e:b1:39:a1:e7:9e:b0:ea:72:0e:09:35:4a:
         92:ae:a9:7a:bf:4b:88:4b:1c:f1:de:01:45:27:31:25:5b:13:
         5d:78:79:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----