Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/VE9yG6N_Mb25HqSHEpBhyXwRC7Y.roa
File:                     VE9yG6N_Mb25HqSHEpBhyXwRC7Y.roa (raw, json)
Hash identifier:          0Kb0TYqMjFHTXZ8Svj1KphHdekI3GlPWCtjyxxULRQc=
Subject key identifier:   54:4F:72:1B:A3:7F:31:BD:B9:1E:A4:87:12:90:61:C9:7C:11:0B:B6
Certificate issuer:       /CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Certificate serial:       0192BF791DB81408FDEBFDCA72BDE7D8CA16
Authority key identifier: 32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/VE9yG6N_Mb25HqSHEpBhyXwRC7Y.roa
Signing time:             Thu 24 Oct 2024 17:00:38 +0000
ROA not before:           Thu 24 Oct 2024 17:00:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210177
IP address blocks:        194.62.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:bf:79:1d:b8:14:08:fd:eb:fd:ca:72:bd:e7:d8:ca:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
        Validity
            Not Before: Oct 24 17:00:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=544f721ba37f31bdb91ea487129061c97c110bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:34:c2:69:fb:8e:49:e2:4b:ff:fb:08:47:d7:
                    aa:ff:aa:69:dc:a6:c7:c8:9f:7a:61:f2:75:75:23:
                    12:eb:7a:71:1c:0c:d8:e7:20:16:fe:01:fe:34:d2:
                    f9:7f:11:47:bf:60:90:02:31:2c:52:82:53:55:2a:
                    2a:c8:88:b0:3e:2e:f7:23:6c:8a:aa:2d:87:72:39:
                    44:dd:73:a9:74:4f:2a:f8:3a:3a:0b:68:ce:51:63:
                    8b:6f:b1:0c:83:77:9b:c7:a9:51:af:1e:5a:b1:fb:
                    b6:a6:a5:64:a5:35:e5:71:f7:76:85:5c:6c:53:2f:
                    f6:b3:63:95:a0:bc:17:76:e4:3b:38:24:9a:e4:61:
                    e2:b8:4d:e4:b6:5d:53:8e:d4:17:00:c7:de:66:8f:
                    5b:0a:e6:70:99:41:40:d6:d4:60:45:ba:e5:ef:a8:
                    80:13:cf:f1:29:e9:45:50:9c:5a:7c:e4:15:f4:dc:
                    48:fd:ed:da:41:3f:be:97:b9:81:1b:36:63:7a:a8:
                    1d:39:e4:62:fd:64:18:27:b6:53:44:bd:2e:b1:d9:
                    70:71:ab:2a:78:13:63:d6:32:e5:23:74:8f:ec:39:
                    9e:39:43:8d:bc:a9:67:6d:26:d4:67:96:3b:0a:10:
                    54:18:fe:7f:f2:78:c0:fe:40:68:6e:5e:39:58:6a:
                    22:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4F:72:1B:A3:7F:31:BD:B9:1E:A4:87:12:90:61:C9:7C:11:0B:B6
            X509v3 Authority Key Identifier:
                keyid:32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/VE9yG6N_Mb25HqSHEpBhyXwRC7Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:8f:7f:23:01:a8:e6:44:41:36:af:2f:29:92:c0:f8:b1:45:
         b9:0b:72:36:06:2b:1f:bd:5e:5e:d6:36:40:db:40:6b:3e:21:
         c1:18:da:70:7e:90:cc:43:81:7c:68:17:43:c8:3d:05:e9:19:
         09:38:a9:ff:83:42:4d:f7:60:bb:9c:fe:12:cf:ce:9c:aa:43:
         f9:e4:f8:37:20:3a:cc:f6:91:01:91:3e:a4:08:b2:f1:c1:a3:
         8d:73:94:45:8a:4a:4c:bf:39:45:06:4b:b7:bb:e6:b2:e3:f0:
         c1:ec:21:21:fe:b8:7d:2a:e1:00:09:0a:8a:89:30:3e:a7:c3:
         e4:1c:39:8a:40:37:e4:f3:06:97:7e:54:7a:36:ea:21:cf:ef:
         2f:79:f3:d2:01:55:72:60:f8:bb:b1:84:28:a5:d4:a5:3b:00:
         02:38:87:36:15:65:d7:9d:3d:cf:b9:cc:2e:25:ef:c4:a6:61:
         82:a1:91:63:06:5b:d7:7e:1c:74:54:a5:5f:eb:82:01:de:15:
         3d:1c:06:4b:16:aa:9a:4b:3c:42:cf:b1:a1:f4:b8:ce:f9:14:
         9e:f5:0e:4e:f0:92:62:84:d9:cc:dc:ca:4c:15:83:bd:02:fb:
         a2:3f:23:fc:2f:0b:21:1c:22:86:1d:91:7f:16:8d:ab:6c:3b:
         b5:d9:ba:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----