Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/Uw2HhLlb12QdlcnO10bcifYvljg.roa
File:                     Uw2HhLlb12QdlcnO10bcifYvljg.roa (raw, json)
Hash identifier:          EG7NygDJOn+EsjphNy2/UMJJcrFk3icM7+6Z8Bfo4BQ=
Subject key identifier:   53:0D:87:84:B9:5B:D7:64:1D:95:C9:CE:D7:46:DC:89:F6:2F:96:38
Certificate issuer:       /CN=e9f4510444a17add7327146152943495ababb968
Certificate serial:       019420680351F9221D5592FFBDA1DF40A79C
Authority key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/Uw2HhLlb12QdlcnO10bcifYvljg.roa
Signing time:             Wed 01 Jan 2025 05:47:55 +0000
ROA not before:           Wed 01 Jan 2025 05:47:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8758
IP address blocks:        185.168.143.0/24 maxlen: 24
                          2a0d:ec00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:03:51:f9:22:1d:55:92:ff:bd:a1:df:40:a7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9f4510444a17add7327146152943495ababb968
        Validity
            Not Before: Jan  1 05:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=530d8784b95bd7641d95c9ced746dc89f62f9638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:39:fd:b4:7b:8b:03:11:a4:fc:cc:82:28:59:
                    3d:d7:7d:7a:a8:fb:79:c0:9d:35:c6:03:0f:04:10:
                    9b:14:16:b6:42:e8:87:eb:11:38:b3:fc:ad:c8:cf:
                    23:84:0d:30:48:2d:25:71:c4:c1:20:ca:a9:e1:0b:
                    0d:91:5b:5e:7a:09:51:cb:19:97:58:3f:e5:ce:3b:
                    08:46:40:00:e5:f8:f1:e8:61:a4:00:21:c5:6d:20:
                    83:26:6a:86:4d:24:67:b7:f5:02:cb:f6:3b:c5:9a:
                    bd:01:5a:9f:ac:23:a6:e7:e2:eb:90:35:12:ff:ba:
                    cc:af:a9:f6:ab:5e:2e:e8:43:8a:15:dd:d7:58:97:
                    13:c7:f5:b9:a7:bb:e9:54:20:84:7c:92:e3:4a:69:
                    64:63:63:72:8d:73:97:06:55:36:1a:0f:47:ca:f9:
                    0a:47:83:2c:27:63:f9:14:f3:46:26:bc:68:86:ce:
                    e4:54:d3:c5:d1:37:1d:05:c5:44:7c:b9:0c:8d:10:
                    dc:82:23:4d:cf:95:b6:7c:7a:de:6d:0b:32:d6:10:
                    4f:e2:cb:1b:db:0c:39:48:b7:9b:a6:e4:d6:fe:75:
                    e2:c6:e2:84:6c:41:cf:a4:f4:da:31:8d:11:3f:2f:
                    c9:63:c2:8a:1c:32:43:58:db:17:c5:8e:f9:16:07:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0D:87:84:B9:5B:D7:64:1D:95:C9:CE:D7:46:DC:89:F6:2F:96:38
            X509v3 Authority Key Identifier:
                keyid:E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/Uw2HhLlb12QdlcnO10bcifYvljg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.168.143.0/24
                IPv6:
                  2a0d:ec00::/29

    Signature Algorithm: sha256WithRSAEncryption
         39:1c:96:fd:4f:ae:e4:59:6c:be:7a:3c:3f:2d:8a:59:2a:32:
         3a:e6:c2:eb:c1:f5:1b:9f:d7:2c:e9:0f:cc:5c:34:a7:c8:7e:
         08:2f:e6:0b:96:c9:4e:90:2d:53:d1:3d:b2:6c:9d:e2:d0:28:
         cd:25:b4:f3:32:10:df:ec:cd:1e:71:7d:a3:52:c3:a5:c3:25:
         42:6f:59:a3:82:cd:5f:60:fb:a9:3a:0d:ec:b8:fc:02:aa:8f:
         00:70:e4:b1:d9:74:7a:eb:e7:5e:4b:67:2f:8c:ed:e9:3e:66:
         21:f9:0e:c9:8c:0f:ff:13:ab:79:4c:00:7b:4e:c2:75:cb:a0:
         0d:47:e1:13:2d:64:ea:20:15:31:5d:a0:19:e8:5e:1e:95:f5:
         64:c7:f5:88:b1:14:2f:fc:98:92:bd:7b:c9:33:48:b8:c2:30:
         bc:65:e3:86:a2:95:bc:15:db:af:7d:37:ad:56:56:fe:92:db:
         f1:5b:50:88:d2:77:b6:59:77:b5:8d:8a:de:a4:aa:8c:a9:b1:
         87:9d:b3:d0:30:97:e0:c1:97:b4:5a:93:fa:a6:8a:3d:1a:ce:
         52:3e:6c:eb:6b:0c:b9:86:7c:07:d0:cc:57:5a:da:47:01:70:
         e7:34:7e:bc:f4:5b:23:a5:92:51:25:24:17:3c:80:66:ee:76:
         5e:49:94:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----