Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/ywH8wQjufiysHP5OXijDjTOBrH4.roa
File:                     ywH8wQjufiysHP5OXijDjTOBrH4.roa (raw, json)
Hash identifier:          Kuw4rCVLsz9XQ+KOtke/DWSrK02REb1j13WO/v4sxqI=
Subject key identifier:   CB:01:FC:C1:08:EE:7E:2C:AC:1C:FE:4E:5E:28:C3:8D:33:81:AC:7E
Certificate issuer:       /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial:       019423D73EB5D989648D8D3C79512944150E
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/ywH8wQjufiysHP5OXijDjTOBrH4.roa
Signing time:             Wed 01 Jan 2025 21:48:16 +0000
ROA not before:           Wed 01 Jan 2025 21:48:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     35132
IP address blocks:        185.165.196.0/22 maxlen: 22
                          2a0a:2200::/29 maxlen: 29
                          2a0a:2200::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:3e:b5:d9:89:64:8d:8d:3c:79:51:29:44:15:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
        Validity
            Not Before: Jan  1 21:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cb01fcc108ee7e2cac1cfe4e5e28c38d3381ac7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:35:35:75:58:c4:62:cc:6b:51:d3:57:0e:cb:
                    86:4c:24:b7:6d:63:83:95:72:ab:08:af:44:37:c2:
                    09:a3:99:81:79:71:5f:2f:34:0d:c6:2c:38:ce:99:
                    48:3f:da:25:7c:9a:89:72:d2:73:49:e8:24:55:91:
                    09:88:46:4a:06:88:cd:28:1c:ec:a6:76:93:6f:25:
                    83:bb:ea:35:d2:bd:7c:ce:43:07:26:64:9b:13:b4:
                    a9:bb:9a:ea:23:b3:bb:29:1b:06:ec:6b:57:d4:26:
                    d7:a5:e6:5d:06:6e:ea:b3:42:a2:c7:d0:87:2b:84:
                    b5:33:28:d8:e1:3d:b3:85:78:99:f9:22:89:af:7c:
                    cd:f0:0d:a7:9e:ee:10:b0:bb:cc:72:b6:8d:cc:9d:
                    75:f8:c6:53:95:be:93:72:19:92:37:a8:1e:69:4f:
                    e7:79:70:04:47:cf:e1:a1:06:3b:c6:63:d9:6b:48:
                    76:da:cf:e9:72:fb:a1:7f:98:00:89:93:70:ac:17:
                    40:5d:1c:4f:10:8c:b2:00:6c:9e:e0:46:7f:56:81:
                    a0:fe:19:7d:a6:07:45:a3:41:d9:a9:94:6a:a6:6a:
                    6f:8c:18:22:c3:bf:2c:97:cc:a6:82:78:d0:fb:e9:
                    fa:88:f2:9a:28:e1:23:2d:af:74:af:bc:9c:78:59:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:01:FC:C1:08:EE:7E:2C:AC:1C:FE:4E:5E:28:C3:8D:33:81:AC:7E
            X509v3 Authority Key Identifier:
                keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/ywH8wQjufiysHP5OXijDjTOBrH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.165.196.0/22
                IPv6:
                  2a0a:2200::/29

    Signature Algorithm: sha256WithRSAEncryption
         76:95:60:41:1a:57:a4:f6:99:13:2a:c6:b3:b5:ff:fb:f0:7b:
         5d:84:55:7f:09:af:37:2b:2f:52:78:aa:6a:4c:0c:72:3d:a0:
         cb:54:a7:2b:e0:bb:3a:ca:ef:5e:4a:1a:21:52:c1:10:06:be:
         04:2b:b6:4e:0e:5e:a4:0e:9e:58:1d:21:82:26:bd:25:52:2e:
         91:19:2b:74:a5:dd:fd:bf:09:49:54:fd:0c:f6:f3:1d:57:3b:
         58:a7:e8:32:d0:e7:8e:8d:d0:03:48:24:3c:5e:b9:db:20:a2:
         b8:46:48:73:bc:69:9d:e2:ed:2b:67:e1:43:6b:f7:ec:de:81:
         3f:3f:72:6a:0c:d6:f1:08:2d:c1:ed:38:a9:83:f6:d6:ad:e6:
         d8:88:e9:9b:79:47:23:4f:73:79:3a:81:74:fc:c2:90:01:b2:
         3f:4b:24:6e:8a:9c:89:6f:a5:2f:d1:73:ce:23:cc:e9:af:69:
         d4:25:ba:90:1f:44:6a:4c:9d:31:b7:88:85:28:99:a4:2f:d1:
         50:73:a6:0c:d2:f7:86:6f:90:71:c5:13:87:06:a5:ae:80:6e:
         aa:45:9b:3e:0c:87:95:6d:5b:5c:ee:01:43:32:b0:c4:d4:46:
         64:45:c6:eb:51:5b:9b:2b:44:bc:e7:c1:ac:3e:05:20:09:a4:
         1e:03:6a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----