Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/GKayJjEpupDXezS7bWkDTRh1Jmw.roa
File:                     GKayJjEpupDXezS7bWkDTRh1Jmw.roa (raw, json)
Hash identifier:          eS8ptq1DKXKa+SvWnQjPvtWlOO+ME6pmCZKUb+C3VCo=
Subject key identifier:   18:A6:B2:26:31:29:BA:90:D7:7B:34:BB:6D:69:03:4D:18:75:26:6C
Certificate issuer:       /CN=a57089c45c55088fe90eb61002f07f0f95862672
Certificate serial:       01941F8C6994CCF68FB82922B4DE808B9002
Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/GKayJjEpupDXezS7bWkDTRh1Jmw.roa
Signing time:             Wed 01 Jan 2025 01:48:03 +0000
ROA not before:           Wed 01 Jan 2025 01:48:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59987
IP address blocks:        176.119.196.0/24 maxlen: 24
                          2a06:6840::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:69:94:cc:f6:8f:b8:29:22:b4:de:80:8b:90:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672
        Validity
            Not Before: Jan  1 01:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=18a6b2263129ba90d77b34bb6d69034d1875266c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:e4:c4:4c:8a:ac:1d:22:53:59:ce:70:ff:
                    3d:23:e5:b0:c0:98:fa:a5:e9:6e:bf:c4:92:b8:bd:
                    1c:4f:60:56:87:ff:06:6c:6f:31:ab:b0:ab:25:29:
                    98:f2:20:6b:7b:85:16:2d:4a:f6:51:06:24:b3:9d:
                    96:59:6d:9b:59:ea:c6:e7:b0:f4:32:2a:86:b5:ab:
                    e1:02:76:43:3f:9e:0d:a7:82:7b:ed:24:a8:c0:7e:
                    d3:e2:c0:ab:2b:a7:b7:0e:10:2e:34:dc:59:10:3f:
                    43:b4:7e:92:d4:5c:c9:f6:71:18:96:fd:02:fc:bb:
                    f9:7e:95:7a:3d:99:25:fd:cb:cb:88:b7:92:c1:96:
                    da:a2:41:38:9d:6b:58:bb:a4:08:4b:75:64:5a:38:
                    f6:82:1c:20:64:ed:a5:2b:27:b8:36:6b:c9:ad:3f:
                    b0:c4:a7:63:c5:08:63:d2:07:d2:fd:95:78:c0:a3:
                    6d:4d:c5:f9:9e:26:70:19:80:f6:24:09:55:8b:cb:
                    f1:6c:07:dc:82:c7:e6:ed:41:9f:69:73:e8:a0:37:
                    38:e8:17:d6:0b:f9:85:04:99:d6:4d:05:ac:3d:b4:
                    df:e4:07:7f:3e:02:d4:70:5c:cf:32:d6:45:36:e6:
                    17:7d:de:32:3a:dd:e3:a8:55:d8:58:d2:73:61:1c:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A6:B2:26:31:29:BA:90:D7:7B:34:BB:6D:69:03:4D:18:75:26:6C
            X509v3 Authority Key Identifier:
                keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/GKayJjEpupDXezS7bWkDTRh1Jmw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.119.196.0/24
                IPv6:
                  2a06:6840::/29

    Signature Algorithm: sha256WithRSAEncryption
         02:52:d1:1b:c5:4e:d8:84:1e:eb:fb:41:a1:cc:d8:a1:70:f0:
         d6:cc:e7:34:1b:4f:78:b8:fd:d7:25:fe:8e:fc:a8:16:da:81:
         ec:3f:78:86:c5:df:67:e8:cc:8b:19:b2:c0:58:ba:41:f4:71:
         8a:4c:d6:92:8d:20:4e:09:77:64:ee:fb:64:6f:3d:57:13:7d:
         8a:3f:b3:25:92:0c:12:43:af:ec:f9:58:94:cb:27:71:94:37:
         3f:4f:08:47:b5:a4:17:a5:d3:05:5d:d4:42:b6:04:70:e1:4d:
         40:2b:88:8f:e3:eb:53:bd:ba:93:28:ce:f8:93:f3:58:67:db:
         2a:a5:32:f1:8f:cf:f6:fe:ec:58:6b:cc:4d:c4:b1:4d:9f:c6:
         5b:e3:e8:56:e1:9a:fa:13:a8:58:fe:65:9f:bc:d6:77:fc:73:
         88:19:10:98:84:9e:ed:6b:42:88:2b:e2:8f:32:04:f0:af:da:
         d4:7d:90:9b:5b:70:00:c9:ab:03:52:47:b6:ff:23:65:81:9b:
         1a:02:cb:7e:af:8f:9b:70:0a:ee:c9:aa:2c:57:85:a1:fb:a5:
         54:c0:75:33:a2:87:eb:1d:eb:a9:a4:25:2a:07:78:d5:d9:99:
         37:04:34:a1:ba:58:36:bd:a9:f1:67:13:84:31:92:73:29:1d:
         3e:a5:1d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----