Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/1-ctCBWTM9YEJSb9HauIUKPqVwas.roa
File:                     1-ctCBWTM9YEJSb9HauIUKPqVwas.roa (raw, json)
Hash identifier:          F+Ql00NFkP6u64/1DSJGoJFeSPLMPLBWzAqmumx63J4=
Subject key identifier:   F9:CB:42:05:64:CC:F5:81:09:49:BF:47:6A:E2:14:28:FA:95:C1:AB
Certificate issuer:       /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial:       01942369A83B9FC4066091B0075692660B6C
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/1-ctCBWTM9YEJSb9HauIUKPqVwas.roa
Signing time:             Wed 01 Jan 2025 19:48:34 +0000
ROA not before:           Wed 01 Jan 2025 19:48:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39050
IP address blocks:        185.224.214.0/24 maxlen: 24
                          2a10:9880::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:a8:3b:9f:c4:06:60:91:b0:07:56:92:66:0b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
        Validity
            Not Before: Jan  1 19:48:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f9cb420564ccf5810949bf476ae21428fa95c1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:79:ba:9e:f8:5f:eb:03:a4:6b:34:03:23:
                    3a:d5:8c:1e:e3:c0:a4:c2:3a:68:9d:e6:85:ca:90:
                    b6:aa:76:ff:48:7b:96:a0:df:bf:d4:17:44:d9:1a:
                    c3:24:a6:4c:ad:e7:20:5f:69:ff:65:8b:22:37:fb:
                    08:94:82:25:c2:d6:6d:d3:1c:dd:ab:3e:c3:7a:3d:
                    61:53:fc:3f:37:d3:56:a8:5d:af:0d:d0:8a:ee:30:
                    78:03:3a:c9:e3:c3:d7:e0:79:9d:c4:8f:cb:f8:d2:
                    8c:a6:45:21:c3:5c:82:da:b9:d8:bc:6c:4c:14:ce:
                    5f:8d:9b:8a:1e:cb:87:21:48:ff:7c:4d:eb:50:2f:
                    6c:21:d9:f7:d1:33:c5:cf:9d:d2:bc:29:33:f2:ba:
                    b0:6e:e5:ee:e2:a7:08:8c:06:5c:34:90:c5:6d:1f:
                    b2:56:11:ec:51:74:00:33:bc:8b:1b:41:20:b9:73:
                    0b:b9:13:53:30:84:55:49:a8:58:b7:c1:ad:13:a7:
                    e1:7a:31:98:f3:c8:2a:13:8c:77:03:e9:45:1c:66:
                    7e:3d:d7:b5:2a:5a:6d:2c:bb:24:68:86:e1:7d:1f:
                    85:6d:ce:38:cd:87:c6:a7:56:b7:20:4f:78:66:27:
                    5f:18:f0:4e:b1:a4:75:9e:e2:5b:19:91:9c:c4:f9:
                    af:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CB:42:05:64:CC:F5:81:09:49:BF:47:6A:E2:14:28:FA:95:C1:AB
            X509v3 Authority Key Identifier:
                keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/1-ctCBWTM9YEJSb9HauIUKPqVwas.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.224.214.0/24
                IPv6:
                  2a10:9880::/29

    Signature Algorithm: sha256WithRSAEncryption
         56:ee:f1:75:19:86:9e:39:0e:e9:28:92:4c:19:9f:3b:f2:e4:
         40:25:7f:ba:a2:d1:08:28:fe:ec:0d:17:7b:a1:34:76:f9:46:
         60:23:bf:8f:a0:5f:9b:a2:e0:aa:2d:94:74:c4:94:00:4a:35:
         5c:c3:da:12:a5:84:3e:13:59:96:8e:59:4b:48:16:29:9f:33:
         42:2e:fb:ab:a5:7d:73:ee:ee:03:7e:8b:89:0a:c8:13:ca:f5:
         f4:e0:35:9d:9c:6e:49:5e:e9:d9:32:fe:eb:2f:96:53:a9:07:
         00:d2:9a:af:47:7c:58:e5:2c:e7:3f:db:fd:2c:66:e0:05:9a:
         c1:16:42:db:7f:79:37:74:8b:38:a8:0e:80:b7:b4:b0:e0:65:
         50:a6:a4:c9:30:9c:9d:3d:f5:15:98:fc:86:8e:5d:ec:06:58:
         35:88:29:b5:ff:6e:96:8c:21:04:1c:7a:cf:da:f6:1f:fc:a9:
         a4:23:aa:2c:34:a1:9f:48:d5:9c:ea:e7:07:bf:86:27:ec:5d:
         5a:84:ac:7e:db:65:18:e0:8c:97:b9:95:f0:41:e7:df:c6:b1:
         6b:a2:4b:55:e4:83:c2:14:af:35:78:2b:13:22:02:23:e3:8e:
         9e:f7:9a:6c:e6:08:e5:20:eb:bd:89:8c:e2:59:82:67:fa:e9:
         04:3e:e8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----