Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa
File:                     Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa (raw, json)
Hash identifier:          gVw1MMRDs2rY597vN0xWVEhdeHW2cAUodm7HsTOIyc8=
Subject key identifier:   29:CE:15:E6:DC:DD:8B:8C:61:99:67:89:A3:25:D9:96:66:40:0F:A5
Certificate issuer:       /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial:       019420D5EB4B000665039A0396ED3B7E4CE5
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa
Signing time:             Wed 01 Jan 2025 07:47:57 +0000
ROA not before:           Wed 01 Jan 2025 07:47:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     41289
IP address blocks:        141.17.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:eb:4b:00:06:65:03:9a:03:96:ed:3b:7e:4c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
        Validity
            Not Before: Jan  1 07:47:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=29ce15e6dcdd8b8c61996789a325d99666400fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:86:f5:86:96:1c:0c:c9:15:af:48:e3:1f:
                    54:d2:3a:f1:03:99:c2:3c:ac:0f:00:e7:0e:ce:c5:
                    93:4e:ae:b9:7a:36:24:82:02:64:f4:4b:f9:e5:a3:
                    01:df:21:c6:f5:f8:fc:f2:3c:40:f7:b8:b5:54:a5:
                    4f:5d:f5:39:6e:d7:14:98:cc:5b:f3:cc:01:94:8a:
                    5a:b3:cf:32:09:5a:d0:d5:de:2d:9b:85:27:da:85:
                    6a:27:c4:82:7c:84:ab:20:2e:fc:ec:63:4d:a8:3c:
                    28:34:92:ef:20:46:ef:10:b8:eb:48:54:40:5a:30:
                    b9:1e:82:b8:7f:6d:9a:68:df:e9:51:26:2e:35:e6:
                    20:af:cf:a7:25:d8:85:53:73:4b:52:85:03:c6:df:
                    20:7d:b4:6b:e9:5f:1c:ec:d5:cf:cc:df:1c:64:9d:
                    0e:fe:17:8c:b1:f5:87:32:2d:09:5d:d7:b0:a3:c4:
                    af:5a:ab:b8:2d:2e:e2:e9:4d:86:9f:15:d5:c7:80:
                    2e:d5:ec:8d:e8:f9:69:d5:d5:2a:64:ec:8b:8b:ad:
                    28:cc:9d:98:48:ab:30:e3:5c:88:78:a2:c5:86:f4:
                    79:26:56:0d:3b:15:3c:55:2e:69:32:ed:be:4d:1e:
                    d6:d9:fc:e4:81:07:30:72:c3:30:bd:93:58:d7:07:
                    04:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CE:15:E6:DC:DD:8B:8C:61:99:67:89:A3:25:D9:96:66:40:0F:A5
            X509v3 Authority Key Identifier:
                keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:59:0b:68:02:b1:49:ae:b4:07:5f:45:d8:c4:e6:f5:a0:67:
         73:e8:04:ba:a2:92:0d:a7:62:37:2f:50:0e:a0:bd:dd:e1:49:
         1b:8a:5a:d9:8d:d5:7c:c2:46:9c:33:13:3e:8f:62:6d:a0:0b:
         90:e1:ec:6e:64:e9:33:1c:7c:9b:5d:32:1d:d7:f8:7b:d4:02:
         38:af:c8:92:72:c3:7f:3e:ce:5d:a6:25:f6:2c:f6:8b:50:89:
         86:28:6f:3d:e2:cd:19:47:19:35:6e:cf:8a:d3:06:7f:54:6e:
         61:99:07:1c:11:5d:75:74:e4:3a:a9:6e:6b:9c:09:c9:c0:1a:
         27:21:93:aa:3a:14:92:65:a4:18:70:5d:7d:d1:aa:9e:72:2c:
         c0:94:7b:dc:6e:e8:b1:5c:65:44:f0:5a:af:19:5e:89:33:99:
         db:46:07:63:19:df:69:87:4b:6a:76:b6:e2:08:c3:c5:fa:2f:
         32:22:b3:39:81:2c:de:95:73:70:51:2c:f7:64:df:ef:a3:bf:
         29:51:5a:8c:7d:e1:bf:22:4b:e6:02:37:aa:b9:97:1c:9d:f1:
         7d:55:7d:ee:f9:6d:52:cc:24:25:2d:23:ca:58:ab:67:09:2f:
         0b:fc:0b:78:c8:ac:c7:d7:01:2f:eb:13:b9:d8:49:d6:a9:26:
         cd:50:9e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----