Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/787WsGeG_PtOH4NifJLvSRcdjKE.roa
File:                     787WsGeG_PtOH4NifJLvSRcdjKE.roa (raw, json)
Hash identifier:          LXK7T54I67xPwZvLYoiPIC1z9h7T9ebkz0cAqwvP0HU=
Subject key identifier:   EF:CE:D6:B0:67:86:FC:FB:4E:1F:83:62:7C:92:EF:49:17:1D:8C:A1
Certificate issuer:       /CN=dabb1d01602f15211132ed48185a99b36225117f
Certificate serial:       019425FC9DBCD5E38B3E015BB3F7270CA569
Authority key identifier: DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/787WsGeG_PtOH4NifJLvSRcdjKE.roa
Signing time:             Thu 02 Jan 2025 07:48:19 +0000
ROA not before:           Thu 02 Jan 2025 07:48:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210646
IP address blocks:        62.233.37.0/24 maxlen: 24
                          2a11:9d40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:9d:bc:d5:e3:8b:3e:01:5b:b3:f7:27:0c:a5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dabb1d01602f15211132ed48185a99b36225117f
        Validity
            Not Before: Jan  2 07:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=efced6b06786fcfb4e1f83627c92ef49171d8ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f8:e1:61:e4:32:af:f7:46:f4:58:9f:a6:0a:
                    f1:5d:85:fc:9d:cd:fb:2a:5c:c5:dd:fe:19:f1:6f:
                    d1:5c:20:8c:88:28:5a:8d:c8:e8:f3:07:f9:03:42:
                    75:ac:74:d1:e9:f3:7f:83:87:75:53:86:69:40:0b:
                    7b:da:a9:14:eb:f0:1d:5b:1c:75:2c:b5:83:8b:c4:
                    82:8d:d6:07:e0:db:0a:64:6d:90:b8:0c:a4:a2:2e:
                    76:e5:b3:44:65:e8:95:38:34:b6:ed:d4:cd:05:29:
                    8d:06:b8:34:d7:e8:c7:39:8c:6d:4c:e0:19:b8:cf:
                    3e:44:10:06:11:6d:b8:b2:f4:13:b2:bb:2c:52:07:
                    3c:02:a2:0a:ae:87:32:26:4b:4e:9b:72:6b:6f:8b:
                    12:ef:ff:22:d3:49:a6:43:80:3e:43:68:2a:7e:07:
                    85:d2:6b:03:cc:df:36:ce:4e:33:37:fa:04:14:6b:
                    9d:ab:6c:9f:85:f8:ff:4d:64:27:15:13:f6:ef:01:
                    bf:f2:0a:6d:c2:9d:92:4e:ae:e8:18:28:57:20:65:
                    7c:fd:f0:26:14:9a:4c:69:19:65:48:db:7d:25:8e:
                    c7:fa:17:93:dc:dc:40:2a:23:7a:30:a3:c7:c9:78:
                    34:ff:a4:4a:94:60:a1:a9:26:c7:af:e1:4d:1b:fa:
                    4d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CE:D6:B0:67:86:FC:FB:4E:1F:83:62:7C:92:EF:49:17:1D:8C:A1
            X509v3 Authority Key Identifier:
                keyid:DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/787WsGeG_PtOH4NifJLvSRcdjKE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.37.0/24
                IPv6:
                  2a11:9d40::/29

    Signature Algorithm: sha256WithRSAEncryption
         98:22:35:97:1b:cb:71:2c:9b:5c:7d:ad:68:a2:c3:67:ed:49:
         e3:66:78:91:58:e9:a7:82:bb:f2:33:b6:5d:a0:53:59:a5:66:
         79:f7:fa:f6:fa:97:c1:76:81:ab:bf:21:2b:0a:e4:1b:68:10:
         84:05:9b:bf:9e:4e:6b:88:cb:07:bf:21:d2:8e:21:bb:ba:57:
         a7:d6:b4:2c:05:ab:fd:b4:e0:5d:9f:8d:68:eb:bf:c8:9f:9d:
         2b:a3:8a:2f:6f:33:52:77:19:5f:3b:f7:53:16:a3:d3:43:b6:
         b3:bc:50:b4:fc:a8:09:a8:00:e4:77:dc:fd:d4:8e:98:c1:b9:
         01:87:68:79:3b:da:ec:d4:d8:52:9a:f1:1c:27:10:da:05:ad:
         ea:14:0d:92:9a:9e:27:29:68:d8:dc:b6:5f:ef:73:07:df:bb:
         ba:78:29:c0:10:a6:db:06:7b:74:eb:6f:b8:d9:91:8a:d2:a9:
         74:e2:2d:07:8b:7c:24:d8:fa:5e:ed:d2:b8:99:e4:7c:7a:f4:
         77:af:db:d6:f6:de:12:e6:05:e4:f2:11:3b:7c:07:a4:a6:ac:
         a5:6e:7e:05:b2:4c:5e:8b:2e:2b:dc:0d:21:26:e6:e1:59:87:
         29:50:b8:52:d1:f6:c9:f0:88:e3:37:e5:f3:db:17:e0:1b:d7:
         ff:31:5a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----