Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/uweYkDCu-qqfi3ug1YgUgTCGT6M.roa
File:                     uweYkDCu-qqfi3ug1YgUgTCGT6M.roa (raw, json)
Hash identifier:          /KpNT+Dkmz13bWhCJTvJ8D+AbxL/YrXSoux1HxprkcQ=
Subject key identifier:   BB:07:98:90:30:AE:FA:AA:9F:8B:7B:A0:D5:88:14:81:30:86:4F:A3
Certificate issuer:       /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial:       0194258F556757C4BAF5E88AB0C98B5E892A
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/uweYkDCu-qqfi3ug1YgUgTCGT6M.roa
Signing time:             Thu 02 Jan 2025 05:48:57 +0000
ROA not before:           Thu 02 Jan 2025 05:48:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44056
IP address blocks:        195.88.58.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:55:67:57:c4:ba:f5:e8:8a:b0:c9:8b:5e:89:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
        Validity
            Not Before: Jan  2 05:48:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bb07989030aefaaa9f8b7ba0d588148130864fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:b5:10:72:9f:3c:99:d6:0a:c8:cf:e9:c9:
                    ff:73:15:2a:0a:4f:c4:6b:c2:88:cc:34:04:75:fe:
                    99:9d:b5:9d:95:1b:55:9f:62:cf:33:69:fc:fe:52:
                    77:28:42:55:48:c1:5e:a6:62:cf:3e:69:15:2e:4d:
                    be:71:67:27:1b:a6:17:36:ee:f0:29:d6:ef:ba:f5:
                    24:de:b7:8f:a8:f9:7d:bf:04:db:70:56:42:06:fb:
                    97:95:2b:3b:94:ab:a5:9a:18:95:a5:cc:1b:5a:21:
                    62:eb:71:78:bf:eb:8f:8b:3b:3e:7c:97:f5:2a:cf:
                    72:4c:5d:ab:e9:d8:03:39:cf:88:43:6e:df:b2:21:
                    8b:29:22:c4:ce:22:82:6c:3c:6e:a9:cc:3c:b5:a8:
                    ff:1d:a9:88:9c:09:b2:c6:af:d4:27:8d:0f:bd:a6:
                    7d:ee:2c:25:08:58:da:17:9c:18:05:88:4a:3e:8d:
                    78:1a:e7:6a:71:d0:91:4a:be:05:74:66:d5:0c:64:
                    f3:62:7c:3b:bf:fb:01:b0:ad:62:fa:75:d8:33:07:
                    bf:ca:b3:32:5d:ed:4e:6c:bb:f2:93:a0:01:f9:0b:
                    93:bd:3f:47:cb:2e:0e:34:ce:a4:05:85:4c:bf:69:
                    df:6c:95:22:0c:fc:80:f3:d9:03:7c:33:58:fc:d4:
                    09:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:07:98:90:30:AE:FA:AA:9F:8B:7B:A0:D5:88:14:81:30:86:4F:A3
            X509v3 Authority Key Identifier:
                keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/uweYkDCu-qqfi3ug1YgUgTCGT6M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:e3:c4:9c:8f:bc:a6:f0:8f:26:bd:1e:30:db:d5:a8:2f:84:
         e9:f5:6f:b2:18:a4:6b:aa:1b:8c:66:ef:c9:db:7a:62:0e:cf:
         5b:8d:bf:5e:62:ca:45:8d:82:1c:66:da:f9:7a:dd:36:a1:65:
         7e:1a:37:99:88:7d:78:2a:cb:73:fe:02:2c:61:f8:e8:eb:1a:
         91:af:fc:a6:97:82:47:20:3d:9a:74:a9:9c:9e:fa:d7:63:94:
         e1:ff:52:f8:cd:0a:db:3e:2c:59:76:4a:0f:4b:4e:a7:bc:ca:
         b3:2d:8a:d7:0c:14:09:95:a2:fd:16:be:98:a3:4c:fe:39:07:
         df:22:a4:44:06:f5:0c:51:5b:23:d5:89:1e:e1:84:3f:71:85:
         9d:43:3e:34:6e:d1:20:3b:23:06:60:cb:77:37:49:95:f0:eb:
         58:d2:03:0e:0b:37:9d:cd:12:ed:bd:5c:0d:0b:b5:49:d8:2b:
         ce:c5:90:6a:88:86:c3:8b:63:1a:5b:fa:75:a2:67:9f:7e:d0:
         32:61:80:58:7d:22:b8:cc:78:77:c3:cd:c0:be:14:17:d9:09:
         1e:03:b0:0c:90:c3:4c:46:20:39:2f:d3:ff:cd:f0:13:50:9e:
         99:3d:df:9b:82:97:f1:d9:94:0a:77:93:a0:11:2e:f8:f6:1a:
         5d:0d:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----