Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/g8YwGSQJtphdygepP_zngeWXvFU.roa
File:                     g8YwGSQJtphdygepP_zngeWXvFU.roa (raw, json)
Hash identifier:          MN0YFZEniJxqcHz8F+CefbhmwKUatb2Z2T+SIRMCHgk=
Subject key identifier:   83:C6:30:19:24:09:B6:98:5D:CA:07:A9:3F:FC:E7:81:E5:97:BC:55
Certificate issuer:       /CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Certificate serial:       019427B60D298D296FE0618B5FC95978625D
Authority key identifier: C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/g8YwGSQJtphdygepP_zngeWXvFU.roa
Signing time:             Thu 02 Jan 2025 15:50:29 +0000
ROA not before:           Thu 02 Jan 2025 15:50:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201939
IP address blocks:        185.57.52.0/22 maxlen: 24
                          2a02:5820::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:0d:29:8d:29:6f:e0:61:8b:5f:c9:59:78:62:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
        Validity
            Not Before: Jan  2 15:50:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=83c630192409b6985dca07a93ffce781e597bc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:12:14:25:cc:99:2e:a4:99:e0:37:fa:56:
                    66:73:a0:b9:36:bf:ca:a3:9c:1a:0e:57:33:7d:83:
                    46:1a:b1:86:eb:c5:8c:ca:d2:9d:75:4f:8f:4e:61:
                    f3:ce:df:91:05:fb:2e:39:c9:3f:be:0e:46:66:00:
                    5d:91:2f:27:f4:7c:d1:ee:0a:85:34:53:fd:61:12:
                    35:92:b4:13:78:d3:ff:ad:70:ce:87:b2:a4:10:f6:
                    8b:0c:8d:bd:99:9f:fa:d4:00:a8:21:7b:c8:1b:37:
                    d4:a2:26:45:26:cf:ee:d0:8d:96:de:73:9b:ce:47:
                    f8:71:5f:9d:59:1a:ad:6a:d5:58:23:8e:f6:b3:1f:
                    46:ff:c6:9d:df:e9:a5:5d:9b:50:91:c6:f3:e5:76:
                    92:b2:66:29:c0:a3:74:cf:c2:fe:ca:1c:87:8c:14:
                    5e:0d:65:3b:0b:b5:52:f7:c9:0f:c3:e5:05:0b:42:
                    5c:3a:80:d3:cd:88:28:c7:25:1f:fa:68:c3:ec:cf:
                    0f:49:c2:f0:74:01:48:d0:05:53:ab:f0:43:76:49:
                    c8:8b:14:b8:77:e5:62:00:79:f4:a8:be:80:58:51:
                    0d:d3:41:c1:13:5e:ef:f7:56:2d:4e:4e:ef:f0:90:
                    c0:43:12:56:0f:b8:d2:a9:1a:0d:20:46:58:6b:e3:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C6:30:19:24:09:B6:98:5D:CA:07:A9:3F:FC:E7:81:E5:97:BC:55
            X509v3 Authority Key Identifier:
                keyid:C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/g8YwGSQJtphdygepP_zngeWXvFU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.57.52.0/22
                IPv6:
                  2a02:5820::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:6d:bb:b4:46:fd:9b:c1:ad:84:f0:43:00:b3:53:a5:a4:82:
         53:03:4f:9d:d5:ad:f5:7e:2a:ba:97:8f:8e:2e:8e:04:72:c3:
         df:40:7b:a4:9f:3d:48:4e:78:39:2b:2d:62:84:1d:4c:03:75:
         da:78:5c:d8:03:48:70:79:8d:0c:86:d8:f5:ef:db:ad:be:53:
         76:48:3e:83:96:59:58:4f:d3:a8:cc:a5:99:cc:0f:55:88:16:
         b0:5f:99:8b:32:87:17:0b:c4:e4:2c:a4:c5:0e:6b:97:78:27:
         89:dc:2c:e4:19:da:6a:85:ce:5f:ae:09:d0:9a:f6:fe:b0:cc:
         36:67:3e:e2:56:1d:70:52:21:43:b0:37:f9:c9:0f:42:83:bd:
         a2:f5:51:c1:1d:ef:3a:fa:c7:24:f1:0b:e4:dc:cd:ac:99:1b:
         ae:0c:2c:ed:96:3d:20:b1:4c:58:57:eb:44:89:d9:c8:fa:64:
         95:a3:f9:71:91:06:a7:41:f0:bb:1b:33:59:c8:a4:44:81:cc:
         e7:ac:2f:a6:05:a9:1d:1d:ba:dc:a4:98:ba:5c:3b:36:e1:39:
         79:91:d1:32:a0:87:85:55:a3:fa:c4:26:56:79:42:49:a6:82:
         d2:23:eb:db:6c:8d:4d:af:39:4a:5c:b6:04:ca:09:91:8d:34:
         6a:49:4d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----