Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/1714kp0cfca_poPK5-VjFlBE8Bk.roa
File:                     1714kp0cfca_poPK5-VjFlBE8Bk.roa (raw, json)
Hash identifier:          j4eVSfOj5HVSdHjC10lxDRGeLnqFO2C+nkquqN7eUhM=
Subject key identifier:   D7:BD:78:92:9D:1C:7D:C6:BF:A6:83:CA:E7:E5:63:16:50:44:F0:19
Certificate issuer:       /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial:       01945EBA3E3A148A8DF06E260F5182CA86B1
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/1714kp0cfca_poPK5-VjFlBE8Bk.roa
Signing time:             Mon 13 Jan 2025 08:14:11 +0000
ROA not before:           Mon 13 Jan 2025 08:14:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197937
IP address blocks:        185.7.172.0/24 maxlen: 24
                          2a13:83c0::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:5e:ba:3e:3a:14:8a:8d:f0:6e:26:0f:51:82:ca:86:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
        Validity
            Not Before: Jan 13 08:14:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d7bd78929d1c7dc6bfa683cae7e563165044f019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:e6:26:6f:78:28:54:79:c8:5d:aa:5d:52:
                    a9:9c:16:51:cd:6f:b6:70:79:4b:34:34:4f:00:ea:
                    45:7f:8c:5c:8f:be:46:5e:f2:52:33:34:7f:ab:47:
                    3e:fa:0e:1b:65:b5:2f:dc:da:9c:eb:e6:14:79:28:
                    ca:9e:d6:31:02:10:d5:f8:98:a8:d2:7b:20:e3:9f:
                    f3:ea:44:6c:e5:2a:a3:4f:26:41:27:13:63:18:88:
                    24:51:a1:96:7b:c5:5d:3c:cb:ff:46:d7:c1:f7:fe:
                    43:63:b2:0c:0d:36:a0:9f:f4:0f:b1:ca:4c:3c:e9:
                    6c:14:31:f0:8d:35:09:8b:1a:7c:29:39:df:b3:b1:
                    cb:73:1a:91:66:1d:52:68:e0:89:e4:dd:44:05:02:
                    e1:a0:41:6f:b1:4c:d9:d5:69:a8:20:6d:9b:c6:fd:
                    70:34:75:37:c5:bb:0a:2d:2f:1d:24:c3:76:0b:78:
                    e2:b9:b7:9d:db:2b:33:c3:be:02:87:fd:7c:50:69:
                    26:e6:9c:b6:82:45:ad:c5:32:e3:fa:7b:2d:62:38:
                    4b:ea:53:35:70:a2:f8:ee:88:19:30:6f:55:56:2d:
                    85:72:ed:8a:48:51:11:61:5f:0c:4c:e0:b8:00:4e:
                    a4:70:87:e1:b5:b7:b0:2e:39:b2:fe:3a:ce:7c:6c:
                    36:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BD:78:92:9D:1C:7D:C6:BF:A6:83:CA:E7:E5:63:16:50:44:F0:19
            X509v3 Authority Key Identifier:
                keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/1714kp0cfca_poPK5-VjFlBE8Bk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.7.172.0/24
                IPv6:
                  2a13:83c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7e:50:e2:c2:fb:14:d1:0a:dc:25:70:7a:f4:91:80:98:49:cb:
         1c:fb:e8:40:4b:78:f3:5f:98:c7:b3:58:ec:c7:ec:b6:16:91:
         15:51:8d:27:c9:f6:99:9f:e8:5f:c1:ee:f2:17:73:e6:98:4a:
         84:8f:1d:91:39:62:4f:98:64:6e:42:c8:ac:09:48:b9:e3:53:
         2c:23:05:cb:ac:6c:e1:1c:0d:d7:8a:f9:66:b9:c4:29:28:23:
         90:a2:ad:c3:e7:c9:0d:78:c0:35:dd:70:a7:27:b5:37:d5:31:
         be:aa:82:24:fe:ed:ce:a1:2c:3c:93:be:d9:10:59:c7:63:27:
         fa:31:40:d2:44:60:94:b2:e5:ea:1a:e1:9e:d6:37:dc:cf:ec:
         f1:a5:9b:d6:be:f8:23:b3:3d:0f:44:05:85:58:93:4d:76:f2:
         e5:c2:e2:d1:0f:1e:80:79:14:9a:89:1d:06:59:c2:e0:c0:ef:
         86:8f:71:cc:a8:29:ac:a6:15:16:fd:e9:38:01:69:df:32:b6:
         d8:1c:75:39:12:49:2a:f3:8b:8d:f2:0f:4e:f9:c1:2c:8c:9b:
         2b:ae:1e:ae:45:62:78:11:44:2b:8c:48:88:8f:79:6d:b6:f1:
         84:1c:77:8b:cd:85:ab:f9:7c:18:c2:19:54:e6:0b:0b:b0:7a:
         d7:3b:e0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----