Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/V6I7xtb-s540gCh7ELkbFAWWNm8.roa
File:                     V6I7xtb-s540gCh7ELkbFAWWNm8.roa (raw, json)
Hash identifier:          4XfEuv+JUU8dRovsqOYBux0Sp8hqu4SxoGQivq4ciLk=
Subject key identifier:   57:A2:3B:C6:D6:FE:B3:9E:34:80:28:7B:10:B9:1B:14:05:96:36:6F
Certificate issuer:       /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial:       0194274849D32663B83071B0A5CF01FA6C42
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/V6I7xtb-s540gCh7ELkbFAWWNm8.roa
Signing time:             Thu 02 Jan 2025 13:50:36 +0000
ROA not before:           Thu 02 Jan 2025 13:50:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     553
IP address blocks:        134.155.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:49:d3:26:63:b8:30:71:b0:a5:cf:01:fa:6c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
        Validity
            Not Before: Jan  2 13:50:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=57a23bc6d6feb39e3480287b10b91b140596366f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:e1:09:61:b7:f8:8e:3d:0c:9a:7c:37:c2:
                    f6:5f:b5:e3:5b:20:2a:df:4b:1b:0a:a5:de:fc:48:
                    14:3a:9c:c3:ed:4c:f6:8d:a5:3f:02:7b:c7:32:cd:
                    ca:45:a8:80:a8:10:57:41:a3:57:55:91:92:59:05:
                    e9:65:df:2c:0f:5b:8a:f0:12:8b:0b:4f:02:5e:7e:
                    13:c4:72:3e:d7:9f:1d:94:8a:8a:db:58:8e:c2:47:
                    15:3c:60:11:ea:20:36:97:90:6e:9d:25:25:5f:a3:
                    58:d5:d9:7a:5c:25:a2:fd:64:3a:fb:26:8b:52:4e:
                    21:ad:0d:04:7f:ab:27:e3:03:d6:12:d8:14:be:60:
                    2d:dd:5e:c7:e9:3a:8c:a6:9f:f9:a8:f1:a2:3c:81:
                    20:c8:aa:4c:3b:5a:ed:ef:80:6a:9e:fc:bf:64:8b:
                    20:3b:ba:e8:a7:94:e1:30:8f:d0:8b:7c:59:04:1e:
                    01:4f:db:47:57:b4:a8:b1:16:db:73:65:28:08:4c:
                    03:cd:f2:ad:13:41:b3:76:fe:c2:9a:2b:41:f0:aa:
                    46:60:c3:3f:fd:04:02:b6:4a:bd:76:3c:d6:0e:da:
                    4b:7c:d4:53:0f:0f:37:a5:e0:68:43:8d:32:c7:b2:
                    fe:fe:74:b1:86:fa:a2:5c:03:de:a2:dc:77:23:3d:
                    4a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A2:3B:C6:D6:FE:B3:9E:34:80:28:7B:10:B9:1B:14:05:96:36:6F
            X509v3 Authority Key Identifier:
                keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/V6I7xtb-s540gCh7ELkbFAWWNm8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.155.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         99:23:b7:4a:ac:e0:16:10:0c:5e:1a:50:a0:41:da:c2:c2:00:
         41:b6:62:16:0d:0b:cf:6c:87:0a:fa:b2:98:fb:91:7e:62:0a:
         b3:b5:57:b2:f6:55:fe:85:a7:89:f5:cc:a5:48:4e:11:42:07:
         26:df:fd:68:d1:c3:23:aa:60:fd:8f:1f:9b:35:76:02:73:12:
         08:26:95:db:66:11:9e:c8:b0:11:8c:ad:47:4e:04:35:1e:89:
         00:1b:d9:80:50:b0:f3:dc:4e:0c:42:90:c0:db:61:97:a7:0d:
         d6:20:30:55:00:51:1c:d9:82:79:72:d3:40:3c:5d:f8:cf:c7:
         58:3f:d2:6f:93:0e:53:d6:43:0d:cf:0d:fb:db:c3:f4:d7:ca:
         be:c8:c0:9d:11:04:62:45:24:d3:73:b4:81:fd:0f:9a:55:cd:
         7e:16:5b:81:1e:c1:9e:7e:b3:0f:3e:32:24:76:34:8c:8f:6c:
         6b:c4:e2:c0:86:1f:7c:20:d8:05:dc:0b:38:93:80:f8:ae:10:
         e0:b4:5c:74:00:b6:5b:bb:e4:11:33:c4:70:c3:72:f8:3f:c9:
         71:d7:86:58:6c:6e:25:ec:c3:61:3e:fb:ee:06:99:ea:31:eb:
         19:2d:55:89:f3:9c:60:19:74:0b:17:a1:1e:63:f5:29:9d:e4:
         c9:26:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----