Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/zC5cnzJZXWJ15DovFhNZnjAYlx8.roa
File:                     zC5cnzJZXWJ15DovFhNZnjAYlx8.roa (raw, json)
Hash identifier:          PmHbi3CbXx+RGitt7dLTRvI+Gkto3U25bJJVc6K8JOk=
Subject key identifier:   CC:2E:5C:9F:32:59:5D:62:75:E4:3A:2F:16:13:59:9E:30:18:97:1F
Certificate issuer:       /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial:       018CC56E248B565B3239F1FE58B6B5FA9B1F
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/zC5cnzJZXWJ15DovFhNZnjAYlx8.roa
Signing time:             Mon 01 Jan 2024 14:29:38 +0000
ROA not before:           Mon 01 Jan 2024 14:29:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201303
IP address blocks:        212.18.249.0/24 maxlen: 24
                          2a04:2b00:13ff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:24:8b:56:5b:32:39:f1:fe:58:b6:b5:fa:9b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
        Validity
            Not Before: Jan  1 14:29:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cc2e5c9f32595d6275e43a2f1613599e3018971f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ad:e4:8d:78:56:b0:60:5a:d4:f3:14:e3:48:
                    7a:3d:f5:95:12:9f:7c:9a:af:e4:d5:af:d5:ab:bc:
                    e6:42:d5:d3:59:ca:e1:8d:57:0c:7e:0b:47:fa:a2:
                    90:5a:98:fc:54:7a:f6:8b:4e:a2:25:d7:7c:0f:c1:
                    90:38:91:3d:23:4f:d3:bf:a0:e3:e2:48:c7:17:b2:
                    69:9c:bb:af:a8:8f:37:d2:b7:de:74:77:a9:5f:6b:
                    77:c7:a4:40:b6:13:ff:63:01:47:f2:1a:a6:02:1d:
                    e2:dd:76:db:be:b6:7c:42:6b:3b:83:33:01:25:c1:
                    d1:02:61:67:f2:12:90:b1:2c:78:a3:b6:2f:54:84:
                    31:2d:02:15:c0:4b:69:f4:eb:58:0f:86:31:7f:1d:
                    de:43:0a:39:98:44:48:fd:db:d1:86:48:59:34:da:
                    72:1b:5e:ee:d0:9d:fd:d7:08:43:29:90:bc:9f:ab:
                    67:e1:64:47:06:7d:4a:ab:14:ce:40:a6:32:a0:50:
                    96:fd:8a:55:8c:b0:cc:4b:cc:6b:c4:b1:d0:1b:ba:
                    77:5a:49:90:62:a8:e1:56:46:99:46:c1:68:3c:e2:
                    92:52:62:a3:d0:47:49:3b:1b:24:fc:7e:2b:01:2f:
                    b7:d5:26:f0:10:70:d2:8a:46:77:75:6f:95:45:5b:
                    c5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2E:5C:9F:32:59:5D:62:75:E4:3A:2F:16:13:59:9E:30:18:97:1F
            X509v3 Authority Key Identifier:
                keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/zC5cnzJZXWJ15DovFhNZnjAYlx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.249.0/24
                IPv6:
                  2a04:2b00:13ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:b7:e5:2d:51:df:bd:2f:60:fe:32:4c:51:f9:b7:19:40:0c:
         b0:da:c4:fc:ba:b7:c6:a7:35:ad:56:cb:e3:d1:fd:77:c6:c6:
         9f:f4:a1:58:82:be:15:c6:43:3f:4c:d5:44:c1:6d:5b:61:73:
         03:9f:87:ad:68:45:45:da:10:43:1b:e0:36:e9:04:a4:7d:27:
         d9:5e:b8:01:ed:48:14:a9:10:03:88:3b:2e:ab:df:5d:4a:f8:
         63:a8:b4:3d:3c:84:9b:b0:bf:de:3b:80:68:03:97:49:bd:0f:
         80:80:cc:88:a9:87:bf:b5:11:44:1a:95:f9:93:50:1c:06:90:
         83:df:50:49:3f:9a:56:2b:c8:a7:f3:c3:9b:31:06:2c:fa:eb:
         06:a2:55:51:99:79:f9:b7:ae:aa:18:8c:a7:3b:e1:03:da:d7:
         1e:88:21:33:69:0e:3b:87:9a:2f:de:d5:c3:4f:6f:6c:bd:a7:
         2f:a3:3b:a7:bb:bc:bf:07:d2:b4:1a:5b:4d:d8:5a:a3:1c:2e:
         a2:31:29:3e:06:a5:0c:b5:c7:50:f9:a0:42:de:b6:26:f8:75:
         eb:ee:96:5f:49:e7:0b:d9:39:16:e5:85:64:8c:01:a4:95:fd:
         38:65:5f:77:af:5b:01:fe:37:8d:d6:19:28:f9:a6:64:80:d6:
         16:06:ae:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----