Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/Kn6zCRrJAIpDU3vbBWFNfgedDNo.roa
File:                     Kn6zCRrJAIpDU3vbBWFNfgedDNo.roa (raw, json)
Hash identifier:          azRFjdZrexayFU12UNmkO7T6vISzK8GYJvKGqUFKldQ=
Subject key identifier:   2A:7E:B3:09:1A:C9:00:8A:43:53:7B:DB:05:61:4D:7E:07:9D:0C:DA
Certificate issuer:       /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial:       0194274786264A4621B3956EA0B41E92EDDE
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/Kn6zCRrJAIpDU3vbBWFNfgedDNo.roa
Signing time:             Thu 02 Jan 2025 13:49:46 +0000
ROA not before:           Thu 02 Jan 2025 13:49:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203
IP address blocks:        212.57.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:86:26:4a:46:21:b3:95:6e:a0:b4:1e:92:ed:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
        Validity
            Not Before: Jan  2 13:49:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2a7eb3091ac9008a43537bdb05614d7e079d0cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:96:be:9f:b5:94:0e:de:61:83:67:56:bd:4a:
                    c1:f2:80:79:82:0b:55:63:c8:02:8e:5a:fb:ea:87:
                    98:03:98:e5:20:9c:2f:1d:ba:92:13:e7:6e:62:d6:
                    59:fa:c6:bc:ca:18:85:d3:da:ea:7b:68:52:ff:63:
                    77:59:da:b2:34:4a:f8:e0:56:ac:6c:36:1f:ca:f6:
                    ce:d2:32:e3:41:52:50:37:97:1f:47:54:ef:f1:bf:
                    93:98:37:35:1a:f2:14:b9:79:0d:14:d5:9d:47:d7:
                    64:6f:e0:be:57:98:9f:d2:f6:98:11:f8:61:f1:6c:
                    9a:44:fa:e8:db:09:1a:1f:cc:9c:1a:a5:8c:66:fd:
                    fc:7e:df:15:a7:4a:9e:fa:34:84:2c:08:8e:e4:86:
                    d4:ad:08:f7:8f:10:e7:8b:e1:6b:d4:e7:41:a6:4e:
                    8b:2a:ed:07:e6:25:ec:ff:16:91:ec:47:91:81:70:
                    a0:63:ee:89:3a:b6:5f:ff:84:1b:fc:04:00:ab:3f:
                    42:6f:d4:71:bd:f4:ad:ac:01:75:4e:89:74:fe:0a:
                    b4:a9:ef:31:e2:be:b5:93:66:cf:b5:de:6d:b1:60:
                    fb:a9:5d:f6:bf:94:a9:df:8a:99:d7:23:c8:ea:dc:
                    59:96:f1:ef:54:54:47:d6:5e:a3:e7:cf:02:6d:16:
                    bb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7E:B3:09:1A:C9:00:8A:43:53:7B:DB:05:61:4D:7E:07:9D:0C:DA
            X509v3 Authority Key Identifier:
                keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/Kn6zCRrJAIpDU3vbBWFNfgedDNo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.57.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:83:2d:a9:0d:84:78:50:18:f1:d9:ae:a8:47:d0:27:92:16:
         0b:c5:04:5f:b2:67:4a:94:9b:ee:fb:a6:7d:68:d4:e3:9d:25:
         39:fa:3f:93:6c:73:3e:2c:fc:03:ec:d5:36:24:d8:5e:6f:17:
         96:15:ed:8f:4a:8a:45:33:02:11:c2:30:9b:2e:6f:a7:44:0b:
         6b:45:60:d0:b9:85:a0:b3:bd:d8:67:fa:7e:06:87:e4:22:05:
         c3:9f:d2:36:4f:e4:af:f9:f9:10:8a:be:f3:b7:92:d9:0c:ed:
         99:a9:97:e7:65:82:d2:7c:3f:f3:89:fd:5b:11:b0:c4:24:f0:
         f5:f4:f8:ed:ea:e4:34:3b:c2:d2:7e:b9:36:36:55:40:e0:95:
         74:9e:f0:57:41:3a:12:47:de:6e:23:0d:ba:e4:22:ac:df:63:
         7d:f4:f4:61:54:f5:0e:45:07:46:26:f7:6f:7e:d3:66:47:ec:
         53:8a:f0:3f:5e:85:33:df:a5:cb:16:5e:7f:df:8f:f1:c7:55:
         9d:2b:83:e5:cb:90:ee:b6:c6:1e:42:8c:b7:7b:8e:6e:69:65:
         8e:e4:79:71:a3:1a:bb:0f:bc:0a:82:94:c2:d7:ca:63:1b:0b:
         6b:dc:da:03:de:b6:40:36:57:a8:81:7f:fd:cb:ac:82:29:b9:
         b4:98:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----