Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/7C0Ptfd131vRO631WH816-TiLmM.roa
File:                     7C0Ptfd131vRO631WH816-TiLmM.roa (raw, json)
Hash identifier:          vVG6CyuAsSWdSPh0xSG091fPSEug6kwYq/eGfl7DFQA=
Subject key identifier:   EC:2D:0F:B5:F7:75:DF:5B:D1:3B:AD:F5:58:7F:35:EB:E4:E2:2E:63
Certificate issuer:       /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial:       019425FDA10248F69DF5BFC0028CB088F7AC
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/7C0Ptfd131vRO631WH816-TiLmM.roa
Signing time:             Thu 02 Jan 2025 07:49:26 +0000
ROA not before:           Thu 02 Jan 2025 07:49:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     5488
IP address blocks:        185.2.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:a1:02:48:f6:9d:f5:bf:c0:02:8c:b0:88:f7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
        Validity
            Not Before: Jan  2 07:49:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ec2d0fb5f775df5bd13badf5587f35ebe4e22e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:b3:f3:90:87:7a:08:16:c0:2b:d3:1d:21:
                    43:d8:50:91:3d:7e:d8:da:82:14:71:1e:57:3e:d5:
                    16:d2:49:23:6a:5f:0d:21:85:ac:07:e8:3f:2f:c3:
                    b8:78:95:3c:ff:d9:4b:50:31:9c:b9:e1:d0:8e:b6:
                    2e:c1:58:1c:de:e0:68:0e:50:41:cc:98:ed:bf:51:
                    49:c7:8a:63:07:98:68:a6:c7:c3:71:70:6e:22:21:
                    7f:09:17:b7:9f:b9:27:4e:f1:50:dc:ba:1b:cf:89:
                    43:cd:1b:f4:3e:af:c3:ac:7a:a9:f5:53:6c:63:83:
                    72:42:d4:db:28:35:d1:53:ba:15:a6:0a:c6:be:c0:
                    ed:73:97:01:cd:98:ae:f8:62:72:07:2e:ed:be:d7:
                    28:6b:9b:83:84:52:ff:7d:b9:bf:53:1f:ce:78:9d:
                    88:fc:1e:4f:05:fd:28:0c:45:72:43:3b:69:98:72:
                    40:45:ae:80:c8:c5:d4:c8:c6:aa:85:f7:73:43:56:
                    ce:d3:d5:ee:59:3d:d1:18:74:c3:c3:e3:81:29:94:
                    30:08:a5:58:cb:b3:8e:10:92:fc:af:57:ad:81:f8:
                    dc:95:4e:3a:1e:46:a1:61:d3:55:0c:54:0e:1b:53:
                    d4:5f:5e:4a:74:58:d6:da:77:c3:78:f4:bf:69:e8:
                    a2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2D:0F:B5:F7:75:DF:5B:D1:3B:AD:F5:58:7F:35:EB:E4:E2:2E:63
            X509v3 Authority Key Identifier:
                keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/7C0Ptfd131vRO631WH816-TiLmM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.2.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:b2:ae:77:f7:5a:d3:c4:98:fb:50:3c:f9:c6:6f:f4:26:6a:
         3d:a7:1b:09:35:c6:aa:3d:7a:b5:38:14:52:be:75:dd:6e:d8:
         ed:8e:b1:8f:20:de:28:1f:40:1f:ed:c2:66:10:bb:f2:08:cd:
         3b:60:f8:16:1d:de:34:0c:8f:7c:82:2b:6b:53:f5:0c:3d:d2:
         17:ca:c9:25:56:9c:da:a4:23:27:39:4a:58:6e:50:78:7b:6f:
         e2:80:23:0b:d4:41:e3:c1:a2:8f:1c:17:d0:c0:ed:11:86:ab:
         9f:ec:a6:ea:3c:3e:85:b6:da:d9:d6:c8:b2:b6:8f:b9:f8:39:
         e4:18:bc:dc:43:e4:f6:e5:5c:4f:c6:ed:29:8e:a8:b7:06:30:
         39:28:d7:b6:06:0a:68:64:0e:e1:6c:87:dd:2c:21:c3:bf:6b:
         23:59:25:0f:c3:80:e8:cf:4f:91:d0:7c:e8:b0:b4:bd:d9:8c:
         3e:38:9f:e6:ef:55:40:c3:44:e7:33:a4:50:f0:f9:b5:7c:73:
         06:6d:13:a5:e9:f7:5d:e8:9c:28:4a:20:f6:2c:0f:37:15:02:
         50:1e:c8:51:36:e2:b6:7b:ae:15:5e:2a:f2:ea:ed:21:57:c0:
         34:85:48:b8:83:11:62:49:43:77:51:d8:91:64:28:90:09:fc:
         3b:75:0b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----