Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/LrxwZvPINeksQvETDOEipmKUBtE.roa
File:                     LrxwZvPINeksQvETDOEipmKUBtE.roa (raw, json)
Hash identifier:          mTC/swC0iM7xlEfSlqCGI1ogIVmyM2L2H3WafcUtAOE=
Subject key identifier:   2E:BC:70:66:F3:C8:35:E9:2C:42:F1:13:0C:E1:22:A6:62:94:06:D1
Certificate issuer:       /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial:       019423D6B9EC30E929E78161454AB6E9D289
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/LrxwZvPINeksQvETDOEipmKUBtE.roa
Signing time:             Wed 01 Jan 2025 21:47:42 +0000
ROA not before:           Wed 01 Jan 2025 21:47:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     64404
IP address blocks:        94.45.224.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:b9:ec:30:e9:29:e7:81:61:45:4a:b6:e9:d2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
        Validity
            Not Before: Jan  1 21:47:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2ebc7066f3c835e92c42f1130ce122a6629406d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:26:60:19:1a:a4:f7:09:a4:ab:f3:dd:67:ff:
                    ae:87:cf:86:b6:c0:02:9c:fb:4c:e6:86:bc:c0:27:
                    19:8f:1f:26:17:7b:b7:a8:95:89:bd:d3:82:3d:b5:
                    67:c3:5e:ac:9b:78:f4:b5:53:5c:dc:bc:2b:c1:91:
                    6b:5b:3a:80:41:a1:19:9e:94:e7:66:e7:6d:41:af:
                    d9:62:75:07:a5:9d:ae:2c:96:92:6a:d1:94:9e:42:
                    95:d6:bb:19:2b:cd:0c:2c:7d:61:58:dc:20:cd:ec:
                    f8:28:6e:43:ec:cd:85:ef:58:a2:3b:96:cf:78:59:
                    88:a5:9e:ce:f0:cc:5e:af:9f:06:e0:3b:e6:3b:4f:
                    95:14:aa:cb:64:b5:60:e7:91:c5:07:f5:24:e9:8f:
                    71:b6:69:ad:99:87:00:f5:89:3e:d1:ce:c0:00:cf:
                    f3:37:9d:f0:b1:a1:19:e1:29:47:13:31:79:9d:57:
                    92:18:6e:32:88:c0:61:0d:91:a9:52:a0:72:fb:a9:
                    f8:56:cf:b6:11:e5:7d:90:a7:72:63:11:c0:b8:81:
                    f9:e5:03:4a:60:19:09:c2:57:86:58:b0:15:0a:3c:
                    91:15:3f:9a:23:61:ce:9c:14:8f:95:48:10:60:c4:
                    e1:49:63:ee:23:71:c6:59:5f:24:c4:3c:89:59:8a:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BC:70:66:F3:C8:35:E9:2C:42:F1:13:0C:E1:22:A6:62:94:06:D1
            X509v3 Authority Key Identifier:
                keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/LrxwZvPINeksQvETDOEipmKUBtE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.45.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:f4:b5:10:b2:68:be:58:20:56:be:8c:98:95:79:10:51:e9:
         ff:a0:ef:77:ee:c9:47:85:ff:ac:59:e9:d0:1d:38:b1:12:dc:
         16:b2:d8:eb:43:50:35:6a:6d:64:fe:b8:71:62:4b:b4:32:59:
         82:79:fe:d8:89:3f:36:c3:64:81:4c:2d:28:dd:02:ef:f2:f6:
         fa:12:85:86:91:12:8e:59:24:56:e7:34:05:1b:ce:a3:6f:92:
         4b:f4:3a:77:48:38:e0:d3:d1:bf:3f:5b:27:c5:de:c1:3e:62:
         ce:87:dc:76:42:05:26:5d:24:b4:cb:40:d1:1f:5a:a7:a5:84:
         a4:e9:7a:39:8d:67:19:ca:58:91:30:2b:b2:75:62:54:88:21:
         1a:b7:c0:b0:1a:5f:5f:17:d3:b7:44:3d:ab:09:14:39:88:b7:
         fa:b6:07:61:d0:a6:15:8b:25:a8:a5:1e:2d:3d:fc:c4:ee:ab:
         7a:90:9f:ec:ad:a3:e3:ab:e7:63:71:fa:70:b0:32:6a:c0:78:
         40:aa:8f:f7:6c:ee:4a:e7:59:95:27:86:04:5a:56:a9:13:03:
         af:4d:be:6a:11:5a:ca:9d:64:ce:bc:87:c2:e1:a7:d7:79:4d:
         5b:8b:1f:df:11:2a:12:60:f2:b3:b4:8e:02:10:3a:14:46:ef:
         b6:36:e5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----