Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/LqqgWlluL1jyuXsBRZw9RUpy_xU.roa
File:                     LqqgWlluL1jyuXsBRZw9RUpy_xU.roa (raw, json)
Hash identifier:          QQZFs0dWDvcdU2w068AQi10DYXURIlBm26Llbc6SIDU=
Subject key identifier:   2E:AA:A0:5A:59:6E:2F:58:F2:B9:7B:01:45:9C:3D:45:4A:72:FF:15
Certificate issuer:       /CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Certificate serial:       01941F8C4A7AB4695F2E6144D8CE9ED17CDA
Authority key identifier: B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/LqqgWlluL1jyuXsBRZw9RUpy_xU.roa
Signing time:             Wed 01 Jan 2025 01:47:55 +0000
ROA not before:           Wed 01 Jan 2025 01:47:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205358
IP address blocks:        185.131.205.0/24 maxlen: 24
                          2a12:da40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:4a:7a:b4:69:5f:2e:61:44:d8:ce:9e:d1:7c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
        Validity
            Not Before: Jan  1 01:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2eaaa05a596e2f58f2b97b01459c3d454a72ff15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:e4:fc:b6:5a:58:a7:f5:99:39:4d:9a:be:
                    6f:a3:d0:05:4b:ca:05:62:3c:95:6e:76:a9:c4:5f:
                    2b:fc:7f:2a:86:ea:8e:0f:f4:11:20:66:b6:a4:b0:
                    91:a2:0d:65:d0:c1:38:1d:e9:fa:cc:42:94:cf:1f:
                    1c:9b:43:62:86:f0:55:fd:76:3f:b8:a5:f2:9e:69:
                    31:35:7c:60:60:6c:d6:d2:86:07:cb:6d:3b:a2:5e:
                    b9:2e:61:07:09:3d:96:9b:b6:c0:1b:ba:09:85:b0:
                    6d:b5:44:0f:3e:11:69:a3:f9:28:de:dd:df:8f:e4:
                    94:3a:0f:ca:84:72:31:ee:a4:a2:8b:2c:aa:8f:30:
                    45:c5:8f:59:95:02:53:d1:78:90:63:2c:c2:23:e9:
                    7d:cd:53:e4:dd:ce:2f:02:c1:33:31:06:d6:12:2b:
                    fa:2d:bd:9e:a9:14:15:7c:f3:01:5b:14:0f:db:84:
                    33:4c:c8:ee:59:b3:1b:dc:15:62:aa:3f:1e:e0:69:
                    e4:ae:b8:c5:11:3f:5b:ee:26:e3:e1:18:af:20:f2:
                    16:d5:bb:19:aa:41:2a:0a:51:1d:de:94:06:64:16:
                    85:a9:69:7f:e4:a6:64:37:f5:6d:09:08:aa:ad:f0:
                    ec:55:73:0d:81:0d:6d:d4:e4:a8:6c:d4:fc:e4:03:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AA:A0:5A:59:6E:2F:58:F2:B9:7B:01:45:9C:3D:45:4A:72:FF:15
            X509v3 Authority Key Identifier:
                keyid:B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/LqqgWlluL1jyuXsBRZw9RUpy_xU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.131.205.0/24
                IPv6:
                  2a12:da40::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:03:7c:37:22:15:bb:77:98:10:29:2a:c8:4b:e1:a5:2c:1d:
         d3:7e:9d:d3:fc:25:c3:ea:11:b6:66:4e:ff:be:09:1e:96:48:
         3a:68:6d:21:2a:2b:2f:27:b4:a4:73:38:6f:19:17:85:c2:66:
         2a:bf:a7:66:93:7f:b0:7e:07:c2:08:49:06:0e:d1:2d:8f:29:
         43:33:ae:05:d9:91:49:de:77:57:6c:e3:66:a7:c2:b6:90:7e:
         7e:44:53:2d:ee:00:15:8a:2e:93:19:71:8c:7f:a7:e6:42:e6:
         cc:c2:fa:20:ca:e1:3d:6e:8b:c8:b4:a1:ff:57:5a:fe:1b:2c:
         2c:ba:5c:57:fa:ef:be:c0:08:2b:b8:85:2c:b9:09:93:bc:17:
         e0:df:9d:53:fe:33:a1:39:12:d7:6e:10:a3:5c:e7:a3:ed:3c:
         00:73:df:ec:15:db:56:78:57:1f:5a:bd:a5:a2:40:7e:dd:38:
         06:d9:24:f0:56:89:d6:c5:38:24:ac:ef:13:0f:d2:50:ee:26:
         d9:f6:98:16:32:26:55:1f:b0:1a:93:dc:4f:33:1d:8f:cb:b2:
         07:46:4a:34:8e:3f:24:aa:0f:11:a3:fe:b8:6b:54:7c:ac:38:
         87:d8:81:68:76:3d:f6:85:a9:e8:94:38:7a:09:28:1a:9d:51:
         b2:f2:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----