Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/pkUWU7hoqn1MoMfV_e6H2-KJHtM.roa
File:                     pkUWU7hoqn1MoMfV_e6H2-KJHtM.roa (raw, json)
Hash identifier:          pNc3IO7oSLkfW6eqPtj4TJMlIbS8z2hqWPYZAIIHzEM=
Subject key identifier:   A6:45:16:53:B8:68:AA:7D:4C:A0:C7:D5:FD:EE:87:DB:E2:89:1E:D3
Certificate issuer:       /CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Certificate serial:       0194221FE82B2EBFCC4F5BC5CD3A67F4A2B0
Authority key identifier: 15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/pkUWU7hoqn1MoMfV_e6H2-KJHtM.roa
Signing time:             Wed 01 Jan 2025 13:48:23 +0000
ROA not before:           Wed 01 Jan 2025 13:48:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214423
IP address blocks:        195.95.248.0/24 maxlen: 24
                          2001:678:c60::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:e8:2b:2e:bf:cc:4f:5b:c5:cd:3a:67:f4:a2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
        Validity
            Not Before: Jan  1 13:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a6451653b868aa7d4ca0c7d5fdee87dbe2891ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a9:d1:4a:7e:ab:01:22:1a:c4:f0:10:9a:c3:
                    7b:ae:0b:5b:9c:18:bf:9d:11:0a:6e:bd:e0:f3:d5:
                    8a:3c:3d:10:4a:98:aa:83:a0:1b:1f:ea:b8:49:30:
                    f3:86:65:1b:3e:1b:5b:ff:22:4b:13:36:ec:66:c6:
                    53:4a:37:d4:26:85:8c:58:c1:88:93:10:f9:2b:b1:
                    87:16:a1:61:33:b2:86:13:b5:7a:6b:14:41:ac:e8:
                    c4:4c:8b:89:b0:17:aa:3c:a1:a7:63:ba:93:f0:85:
                    da:ea:e3:6f:7c:e3:ef:67:79:dc:2a:12:90:ee:ee:
                    9c:c2:71:0e:8c:04:74:fe:c2:14:9d:23:a2:8c:0d:
                    bf:4e:bb:5a:f3:bc:1c:0f:b5:3a:25:b5:27:8d:e6:
                    f0:8f:53:8e:48:7d:52:56:2f:9e:d7:da:64:e0:0c:
                    ac:a3:d4:c5:f5:4f:fd:27:c4:1d:6d:69:50:33:2a:
                    9c:e8:06:16:a4:cb:f9:6a:2e:72:c1:f0:b2:4f:9e:
                    ca:de:71:99:ac:5e:81:4a:b8:d9:ba:a9:57:ea:f2:
                    a8:c2:b6:5f:4d:f7:2d:70:83:d9:02:97:bb:41:d6:
                    50:ef:83:85:a4:a2:30:fb:6b:72:8f:10:47:e5:d2:
                    0f:ee:82:a9:61:e9:b2:77:dd:77:b6:91:1a:6c:85:
                    40:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:45:16:53:B8:68:AA:7D:4C:A0:C7:D5:FD:EE:87:DB:E2:89:1E:D3
            X509v3 Authority Key Identifier:
                keyid:15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/pkUWU7hoqn1MoMfV_e6H2-KJHtM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.95.248.0/24
                IPv6:
                  2001:678:c60::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:42:a0:91:05:ac:bb:e9:27:6d:39:ab:77:b3:98:6a:c4:fb:
         51:8b:44:ad:23:f9:58:ac:b7:34:92:6e:c9:12:df:d3:e5:71:
         71:eb:24:bd:94:3f:fc:e3:7a:22:30:de:a5:cb:50:ce:51:2d:
         be:21:92:bc:c8:24:45:a8:86:cb:08:14:35:a6:44:70:a6:37:
         70:52:8b:b5:09:8d:42:45:6d:2b:b2:80:f4:4e:12:45:37:61:
         bf:ce:86:cc:95:c9:01:21:a8:a8:a3:7f:1f:a1:54:9c:c9:30:
         c0:17:3f:1d:f5:38:c5:b5:f4:c0:c7:9d:e8:2e:66:a5:ed:cb:
         89:cc:68:9f:05:51:5a:26:0b:1a:2f:b4:60:72:ae:82:15:5d:
         33:f6:d0:59:cd:c4:3b:27:77:6c:80:e6:bb:f7:65:6e:d5:05:
         65:f6:8b:4b:4a:e0:0d:9e:b7:d7:b9:de:07:36:a1:96:be:7a:
         ad:1c:14:24:97:50:2e:66:d7:d1:94:25:df:c3:52:e3:48:19:
         c0:85:fe:f2:38:6c:d0:a9:28:f7:f4:7c:ee:9f:58:a5:97:7d:
         2a:e1:a5:28:e3:08:9a:b4:c5:fa:67:39:3e:cc:d7:47:a4:8f:
         6b:98:05:91:45:7c:f9:13:03:f5:68:01:0f:52:d0:f3:b0:9e:
         9c:30:4e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----