Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/OndnqfcW1n6pD1T5a6LoRWo_jNw.roa
File:                     OndnqfcW1n6pD1T5a6LoRWo_jNw.roa (raw, json)
Hash identifier:          9J0R/nuhr3A5Wjvj6bt2AnpnUs0xsoD9y+MaQSSQO5o=
Subject key identifier:   3A:77:67:A9:F7:16:D6:7E:A9:0F:54:F9:6B:A2:E8:45:6A:3F:8C:DC
Certificate issuer:       /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial:       01942067E475F13C57F4F72D279C97CD2FC1
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/OndnqfcW1n6pD1T5a6LoRWo_jNw.roa
Signing time:             Wed 01 Jan 2025 05:47:47 +0000
ROA not before:           Wed 01 Jan 2025 05:47:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     47943
IP address blocks:        193.19.204.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:e4:75:f1:3c:57:f4:f7:2d:27:9c:97:cd:2f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
        Validity
            Not Before: Jan  1 05:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3a7767a9f716d67ea90f54f96ba2e8456a3f8cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:c5:c6:ab:26:c7:95:ca:7b:bf:a6:e5:33:
                    1f:dd:f6:0c:21:f5:fe:52:08:68:d7:46:06:1c:7b:
                    85:84:62:3a:b2:c4:92:a4:e2:9d:3e:20:68:5d:e1:
                    31:a8:df:96:3e:64:a6:ed:fa:1d:f4:1d:e7:a9:3f:
                    ae:34:d9:59:8d:e4:e0:07:ab:f1:7f:3d:87:a0:69:
                    74:6a:5b:2c:47:c1:f8:d7:8c:d2:98:6f:ba:b0:aa:
                    96:bc:9c:da:9f:c6:05:32:02:e1:62:c8:2f:56:2f:
                    e7:eb:a0:0c:25:72:cb:a5:e3:8d:f2:15:44:cf:02:
                    76:7a:1d:a0:ec:07:4f:30:7c:fc:c8:a0:cf:9b:aa:
                    36:72:7f:97:78:0a:7a:bc:08:21:36:17:db:57:27:
                    65:df:52:8f:8f:a5:98:1f:7c:b1:09:a3:e1:de:8e:
                    0a:03:2b:6c:1b:95:0e:63:5e:47:77:4a:93:d0:e8:
                    a0:6a:b3:19:0e:cd:3c:4b:b8:1a:5c:2d:a4:64:33:
                    9d:0f:6f:55:a8:f6:f1:e0:bc:c5:9c:da:a7:cb:1b:
                    5d:a0:66:19:86:ec:15:6a:c7:8d:e6:4f:3c:c0:74:
                    28:dd:85:ee:54:07:40:b2:4e:a0:65:f2:f3:77:b5:
                    5a:4a:f7:a6:31:59:43:01:34:6d:59:62:8e:d0:27:
                    7c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:77:67:A9:F7:16:D6:7E:A9:0F:54:F9:6B:A2:E8:45:6A:3F:8C:DC
            X509v3 Authority Key Identifier:
                keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/OndnqfcW1n6pD1T5a6LoRWo_jNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.19.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:60:8e:d0:24:02:a2:c3:54:40:95:26:cb:e3:24:4f:fe:74:
         53:61:e3:b0:5e:13:2a:95:53:ca:07:42:7e:39:81:62:0a:9b:
         93:09:7d:b1:5b:ed:72:1f:30:6b:2e:df:06:f0:c8:6d:26:5c:
         a7:d5:fd:35:f7:bd:d8:85:61:b9:61:ec:83:0d:33:0a:33:6d:
         6d:f8:d5:cf:50:af:06:11:8e:ea:d7:f9:f5:8c:3d:52:e2:54:
         33:6e:a2:e5:1b:ac:7b:64:00:93:b4:4e:b9:36:46:50:0e:f8:
         0f:64:ab:7e:28:5d:df:c1:55:db:cf:2f:94:63:9d:e3:7f:68:
         8a:13:1c:22:b0:0e:b3:67:86:8f:71:d8:50:44:f6:5b:b8:fb:
         79:3c:fb:0d:45:f0:64:ba:ff:d2:29:ee:c3:16:c9:7d:f2:27:
         d1:9a:32:3a:97:31:73:b2:48:62:81:9b:5d:c9:7a:e1:7e:3a:
         e7:10:f4:38:30:e9:65:18:45:8e:30:cb:94:5d:2c:9e:5c:71:
         87:71:ea:8f:5f:68:8a:cc:03:9e:62:e3:d3:0b:eb:02:2b:17:
         ee:f9:14:11:25:78:2c:2a:63:3c:79:ac:2d:11:ad:2a:d0:77:
         01:85:29:a7:d3:48:ae:c9:ff:a5:8e:6e:81:99:89:a3:6a:5b:
         6e:aa:f4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----