Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/iILx66WjpYUgPCUGW7gFW4pElrE.roa
File:                     iILx66WjpYUgPCUGW7gFW4pElrE.roa (raw, json)
Hash identifier:          /nUMQeTQSkR06OXhsFg2vFNGSagbv2NLHUTG2Al/wSk=
Subject key identifier:   88:82:F1:EB:A5:A3:A5:85:20:3C:25:06:5B:B8:05:5B:8A:44:96:B1
Certificate issuer:       /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial:       018CCA99188497FE8B0B53CAD92F751B07EA
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/iILx66WjpYUgPCUGW7gFW4pElrE.roa
Signing time:             Tue 02 Jan 2024 14:34:40 +0000
ROA not before:           Tue 02 Jan 2024 14:34:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57951
IP address blocks:        37.188.88.0/21 maxlen: 21
                          2a00:c340::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:99:18:84:97:fe:8b:0b:53:ca:d9:2f:75:1b:07:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
        Validity
            Not Before: Jan  2 14:34:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8882f1eba5a3a585203c25065bb8055b8a4496b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:72:86:9d:3e:95:72:88:ed:af:a7:43:7e:1a:
                    5f:f3:af:57:d7:b4:dd:24:04:8f:24:69:f4:6c:c1:
                    a3:90:2a:9a:89:34:8a:07:6a:ff:e0:b6:77:62:45:
                    5a:65:a8:e6:96:f4:83:dc:9c:78:57:1f:aa:41:0d:
                    b3:9e:4c:ab:21:45:ea:9c:a9:f7:93:92:af:a2:62:
                    bd:8f:97:aa:31:3a:62:48:85:00:37:3d:d5:01:d4:
                    34:2d:57:fc:7c:e2:f1:cd:eb:71:e7:8f:f7:43:fd:
                    dc:4e:a1:e7:90:77:b5:66:97:df:eb:20:49:dc:f9:
                    e1:6c:a4:0a:66:2d:9b:a1:93:56:da:00:90:7f:4f:
                    eb:52:14:c5:80:b6:50:50:4e:f2:c6:4c:3c:dd:18:
                    3e:65:7a:3d:6a:80:a1:c2:1b:b4:99:fa:14:d9:7f:
                    0e:a2:83:01:5f:80:73:33:f3:b7:56:0b:ba:da:35:
                    5c:53:34:c9:60:0f:9d:9b:0f:30:fb:2e:86:ff:47:
                    7f:d0:e7:59:e3:9b:36:45:01:7d:3b:5b:e5:1d:82:
                    27:e4:74:38:4d:a2:32:c4:69:d3:7e:54:3d:99:df:
                    21:7a:c4:da:27:fc:1a:3b:01:90:14:cd:b4:23:c2:
                    76:b1:df:a3:ed:cd:c3:be:4b:22:c3:65:8b:8c:32:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:82:F1:EB:A5:A3:A5:85:20:3C:25:06:5B:B8:05:5B:8A:44:96:B1
            X509v3 Authority Key Identifier:
                keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/iILx66WjpYUgPCUGW7gFW4pElrE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.188.88.0/21
                IPv6:
                  2a00:c340::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:95:38:13:10:d9:c4:9b:06:21:f9:15:e3:cb:c8:36:95:3c:
         8e:16:1b:f3:f5:cb:d1:39:44:dc:f2:9d:6e:10:7c:02:fc:e8:
         28:49:f2:ce:20:83:93:2e:48:80:67:21:f5:2f:f2:cf:b6:32:
         7c:fd:ca:57:54:c3:63:a8:3a:04:84:80:e7:49:2c:a8:61:66:
         5c:32:ab:fa:7d:88:8d:81:92:df:8e:1a:4b:70:e9:86:f6:9c:
         82:ca:b6:3a:26:c3:e5:60:3d:5d:13:2a:5a:37:59:66:e6:28:
         c1:94:0c:48:4a:bf:f2:12:79:d7:9c:08:15:44:9c:6e:42:a8:
         f4:7a:c1:ce:ec:2f:1b:30:39:b7:0d:fa:d5:fc:5d:84:60:55:
         ae:dc:08:71:42:e0:b6:10:14:6d:3c:b2:08:fa:47:28:c6:56:
         d1:e1:db:3a:7e:32:9c:54:26:84:a5:f6:77:03:93:2d:eb:03:
         84:ae:18:f7:22:03:d3:10:3a:7d:6d:35:cb:89:3e:87:d3:50:
         a8:8c:35:7d:b7:64:23:37:96:56:2c:ae:bc:d6:17:45:83:52:
         f3:6d:13:83:95:5f:c4:1e:1b:11:6e:13:37:8a:d8:46:5f:78:
         ae:ef:76:49:cb:96:04:f4:5f:4c:1f:32:88:14:9a:2d:e9:7f:
         33:4e:7e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----