Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/NfRATxtwxdk8t5k10NmnaIEBcI8.roa
File:                     NfRATxtwxdk8t5k10NmnaIEBcI8.roa (raw, json)
Hash identifier:          48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=
Subject key identifier:   35:F4:40:4F:1B:70:C5:D9:3C:B7:99:35:D0:D9:A7:68:81:01:70:8F
Certificate issuer:       /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial:       01942669D809B74DD944447F29F7C530088B
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/NfRATxtwxdk8t5k10NmnaIEBcI8.roa
Signing time:             Thu 02 Jan 2025 09:47:38 +0000
ROA not before:           Thu 02 Jan 2025 09:47:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34953
IP address blocks:        185.166.4.0/22 maxlen: 22
                          2a13:700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:69:d8:09:b7:4d:d9:44:44:7f:29:f7:c5:30:08:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
        Validity
            Not Before: Jan  2 09:47:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=35f4404f1b70c5d93cb79935d0d9a7688101708f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:70:1b:f8:30:71:3e:ae:10:42:9b:a8:44:
                    89:d8:e9:0c:49:47:6b:7d:40:78:02:a7:b8:0d:c1:
                    61:6e:ff:b6:c7:98:96:9e:0c:51:af:b1:f0:06:67:
                    33:83:41:1b:7c:a9:e1:df:2f:a8:be:a7:e1:8b:7d:
                    81:b7:c3:8f:c8:91:99:74:82:27:58:6a:ed:0e:22:
                    22:1d:f4:75:23:2e:4a:48:cc:b8:2e:2b:3d:5c:e9:
                    61:7e:83:65:1b:3e:e9:d3:66:11:a2:b6:3a:8e:29:
                    05:b6:58:fe:52:e0:00:c4:ca:1a:28:b9:25:d6:8d:
                    79:ff:d9:b2:8d:4b:09:cb:3f:a0:0c:d5:e6:fd:08:
                    9d:98:94:f6:6b:fe:12:82:5f:d3:24:98:27:81:4a:
                    1d:6a:63:7a:77:28:0e:7c:79:2a:f7:5d:5d:6d:86:
                    85:3a:0a:73:e1:1c:e7:d0:a5:e7:f9:ea:c1:68:86:
                    bb:f5:e1:58:64:c0:c0:3b:fc:59:60:9f:3c:9e:14:
                    90:4e:b7:8d:62:0c:8e:62:8e:a5:72:a2:dc:b7:c5:
                    8e:d6:61:34:8d:cd:33:53:f8:c9:9b:58:77:e7:09:
                    39:ce:ce:83:ea:40:e8:5b:76:28:9f:ec:85:ab:ab:
                    d7:73:64:5c:ee:d2:f9:7c:d4:23:21:c8:06:6d:56:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F4:40:4F:1B:70:C5:D9:3C:B7:99:35:D0:D9:A7:68:81:01:70:8F
            X509v3 Authority Key Identifier:
                keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/NfRATxtwxdk8t5k10NmnaIEBcI8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.166.4.0/22
                IPv6:
                  2a13:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:b8:22:17:05:24:23:40:0e:d1:cd:69:f8:d1:39:cb:8f:38:
         9c:df:45:e6:91:33:75:7c:06:6c:54:54:a7:d2:c3:0a:26:f6:
         80:c8:cb:4e:2c:86:46:f0:40:dc:86:54:61:27:4e:53:0a:15:
         53:9a:e9:a6:b5:8e:f3:71:cf:dd:24:27:85:da:f8:bc:0a:8d:
         f4:41:cb:c6:3b:80:2c:ce:6d:83:ff:df:05:e6:a4:12:b3:c6:
         7a:0f:e2:4f:89:b1:57:0b:98:4f:ff:3c:e7:cb:ad:26:97:17:
         b0:01:c4:ec:bd:6a:6f:95:08:a5:07:4d:a4:c7:82:99:6d:4e:
         5a:72:ca:8a:2b:85:62:b8:a9:55:bf:3c:3b:3b:92:e3:a8:b8:
         23:c1:99:e1:7b:32:30:48:e6:31:e0:47:2f:e6:7a:9c:4d:af:
         28:ff:32:7e:78:e5:0e:64:50:c2:31:40:b5:3d:25:6b:a9:bb:
         06:03:6d:24:b9:34:c5:4c:3f:04:85:1c:29:64:d3:92:68:8b:
         69:c2:9b:e6:b5:0b:c2:3b:95:eb:f6:12:2a:3e:b2:86:d8:d5:
         4c:79:e8:93:e6:ff:63:b3:53:84:1c:27:ac:e2:b4:3b:f1:b4:
         ed:c3:48:be:f7:e5:fc:4c:73:72:7b:3f:32:ee:ac:8f:89:9d:
         59:9e:3f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----