Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/OFZ7OM7STvn819zwpp9pHzVUjwk.roa
File:                     OFZ7OM7STvn819zwpp9pHzVUjwk.roa (raw, json)
Hash identifier:          Eidn50fbH6MVmQqAx/ZT1g48QZZQpQ8iS/V1m51/Eao=
Subject key identifier:   38:56:7B:38:CE:D2:4E:F9:FC:D7:DC:F0:A6:9F:69:1F:35:54:8F:09
Certificate issuer:       /CN=c0979e20ffed9f89d07cea58c4c4106819ce662d
Certificate serial:       0194214444377F5CE40FA2D5001820830A4F
Authority key identifier: C0:97:9E:20:FF:ED:9F:89:D0:7C:EA:58:C4:C4:10:68:19:CE:66:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/OFZ7OM7STvn819zwpp9pHzVUjwk.roa
Signing time:             Wed 01 Jan 2025 09:48:29 +0000
ROA not before:           Wed 01 Jan 2025 09:48:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6779
IP address blocks:        185.13.48.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:44:37:7f:5c:e4:0f:a2:d5:00:18:20:83:0a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0979e20ffed9f89d07cea58c4c4106819ce662d
        Validity
            Not Before: Jan  1 09:48:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=38567b38ced24ef9fcd7dcf0a69f691f35548f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ad:bd:df:f8:5c:e5:71:50:96:c8:f7:4b:49:
                    76:06:b8:a6:bc:87:1f:ef:49:02:57:b7:c5:74:2e:
                    1a:5b:72:7e:dc:a0:63:cd:61:3b:38:43:ae:c6:9c:
                    e5:55:ae:da:5c:11:a3:00:02:a1:c0:ba:a7:af:e2:
                    35:30:ca:da:58:2b:a9:77:06:9a:10:18:6a:3a:8d:
                    35:5b:7a:65:a2:fc:86:26:2d:13:68:3d:ff:a4:5d:
                    e8:0d:94:62:ae:2b:36:6d:c5:db:e2:1e:15:de:e8:
                    b2:20:90:ba:07:9c:32:44:eb:7e:2f:1f:1e:b3:1d:
                    c3:26:17:bd:5d:46:e8:b7:fd:1d:32:b2:10:7d:00:
                    de:02:70:64:f9:71:56:2d:ed:a2:44:df:98:2a:cc:
                    11:90:5e:61:76:83:3e:49:75:8e:6d:25:8b:fb:fa:
                    9d:5a:fe:59:e6:1f:9b:30:6d:53:07:c8:af:51:e7:
                    dc:5a:4f:fa:23:48:7f:15:38:a5:c3:67:2a:86:2b:
                    d1:83:ea:b7:de:dd:e6:47:11:a6:55:21:08:d0:2f:
                    3d:8e:fa:30:7d:f6:3d:64:3e:45:70:e9:a4:23:24:
                    b7:62:4a:13:5c:28:e9:2e:44:66:c2:f8:47:bb:0e:
                    42:44:f4:a2:43:f1:9c:0e:de:e5:ec:1c:66:9a:cb:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:56:7B:38:CE:D2:4E:F9:FC:D7:DC:F0:A6:9F:69:1F:35:54:8F:09
            X509v3 Authority Key Identifier:
                keyid:C0:97:9E:20:FF:ED:9F:89:D0:7C:EA:58:C4:C4:10:68:19:CE:66:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/OFZ7OM7STvn819zwpp9pHzVUjwk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.13.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:a3:29:a4:8d:12:79:25:15:b4:64:88:3c:f1:f2:26:cc:d1:
         b1:00:bb:54:cc:5f:92:41:4f:f0:98:51:4a:7c:a9:87:7a:08:
         5a:07:78:db:cf:4c:34:cc:19:e1:a3:f9:7f:4e:0f:ff:67:d0:
         b8:71:34:8f:8c:91:d3:77:83:9f:b8:3e:cc:73:ba:a4:ae:70:
         cd:26:1c:24:7e:6d:eb:99:4b:cc:6b:34:0e:f3:1b:12:4f:be:
         d4:69:df:18:b9:6e:a6:4a:91:e4:33:8c:be:62:7f:5d:e5:c7:
         26:61:ab:78:df:ef:07:b5:51:c6:67:0f:77:ec:b7:6d:32:cd:
         58:17:56:53:c6:b8:ab:ac:3d:83:81:61:00:b8:5f:d7:65:c6:
         b7:15:5f:70:ef:c9:29:35:1a:ad:ec:27:21:2e:d9:9e:3e:ff:
         89:82:70:a0:5d:8f:19:e5:17:fb:12:95:9f:a3:a3:3e:b5:a5:
         9e:16:a8:7f:a2:e9:b3:d4:62:e1:36:37:ef:5b:51:0d:72:41:
         99:b4:b6:a1:61:97:b6:bf:f5:53:11:fd:98:44:5c:f9:f1:61:
         49:02:6c:64:dc:fe:48:c8:45:1a:ef:86:05:46:bf:1d:34:98:
         43:8c:94:03:35:ef:6d:b8:28:82:c3:de:0c:6f:73:54:6d:ed:
         50:38:59:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----