Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/4HbhD6WhIPK2uMWdUhYcl-lG2bI.roa
File:                     4HbhD6WhIPK2uMWdUhYcl-lG2bI.roa (raw, json)
Hash identifier:          yStYHoM7t2nRozeB/MVc1Ojnhg2RW86YS93ijd2iPBw=
Subject key identifier:   E0:76:E1:0F:A5:A1:20:F2:B6:B8:C5:9D:52:16:1C:97:E9:46:D9:B2
Certificate issuer:       /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial:       018FE331920A36E4A3346DFA5F5C21D9C725
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/4HbhD6WhIPK2uMWdUhYcl-lG2bI.roa
Signing time:             Tue 04 Jun 2024 12:20:27 +0000
ROA not before:           Tue 04 Jun 2024 12:20:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42836
IP address blocks:        185.223.86.0/23 maxlen: 24
                          195.66.90.0/24 maxlen: 24
                          2001:67c:20c8::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e3:31:92:0a:36:e4:a3:34:6d:fa:5f:5c:21:d9:c7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
        Validity
            Not Before: Jun  4 12:20:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e076e10fa5a120f2b6b8c59d52161c97e946d9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:6f:51:e5:86:3c:8e:7d:a5:f3:8c:63:b4:
                    4c:3d:ba:97:04:00:ba:c8:7d:72:7c:2c:95:15:4c:
                    0b:d8:63:4b:ed:dd:25:64:46:27:f8:4d:12:7c:1e:
                    f3:0d:5c:26:f4:fb:7d:f9:52:6f:5a:67:75:6b:29:
                    c3:ab:73:fe:b7:dc:e6:7c:57:39:18:75:66:bd:68:
                    87:93:6e:31:3a:05:ea:53:e3:29:76:e1:5b:69:6c:
                    37:fa:d6:f2:3f:f8:86:d2:29:ad:58:08:69:3c:5e:
                    70:98:19:87:46:a9:2e:26:99:1a:09:64:4c:42:51:
                    7b:c3:d9:f7:8c:a0:77:42:25:0a:43:03:d4:3b:9a:
                    0f:34:ea:9d:6f:6e:c5:24:83:1e:b6:13:83:9a:ac:
                    c4:f8:80:57:4d:39:ca:c6:08:4c:18:dc:d4:40:81:
                    d6:14:e3:f5:cd:d7:c3:27:82:11:c4:80:4d:51:db:
                    d4:c5:54:63:2a:78:f5:42:42:5e:97:1a:9d:c4:6d:
                    98:a7:00:4d:96:0d:a1:bf:f9:dc:1a:d9:6c:31:53:
                    b2:ca:81:2f:69:5b:49:8a:b2:79:6d:f3:e2:54:a6:
                    07:76:34:d3:6b:78:f4:ac:76:8b:e9:22:36:64:8e:
                    42:01:0a:ab:da:f1:3f:1c:c2:6a:b3:71:06:41:cf:
                    ec:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:76:E1:0F:A5:A1:20:F2:B6:B8:C5:9D:52:16:1C:97:E9:46:D9:B2
            X509v3 Authority Key Identifier:
                keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/4HbhD6WhIPK2uMWdUhYcl-lG2bI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.86.0/23
                  195.66.90.0/24
                IPv6:
                  2001:67c:20c8::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:3d:01:4d:92:ea:75:82:b3:ee:f2:e8:3f:5c:94:7d:e4:78:
         bc:73:23:e4:6f:67:58:3e:3c:51:da:6a:60:24:a8:80:08:b0:
         e5:b6:30:a8:32:d9:10:75:24:36:94:7f:77:3e:e9:73:d9:12:
         e8:27:ee:93:c9:1c:7b:74:c3:d3:51:cc:36:7e:fd:d1:8e:5f:
         1e:3c:38:eb:0f:bc:b4:a3:71:41:ce:c0:b7:45:4d:87:ef:06:
         49:04:50:66:a2:61:14:02:30:34:12:ec:31:24:2b:c4:30:c0:
         6c:1d:4d:2f:04:c1:d7:10:2e:18:88:bd:9c:7b:ac:98:3f:3a:
         cf:46:14:34:d8:0c:aa:dd:4d:51:c4:b0:4f:d4:41:00:2d:fd:
         09:51:95:4e:bd:ca:4d:2f:5f:4e:f7:d2:9f:de:52:1f:3c:de:
         31:24:1a:42:93:85:09:70:fe:e3:76:af:e5:70:c0:fd:f2:b2:
         53:6b:a6:5d:4a:79:8e:f5:d6:87:2e:6b:a5:71:db:77:67:e7:
         6e:4f:69:53:26:af:c1:6a:3f:74:66:06:d7:52:a4:11:58:f8:
         a0:e4:b7:32:3f:d5:58:41:da:28:2b:9d:e3:f3:11:f9:b7:ff:
         9d:d8:81:87:b3:85:fd:02:3f:6c:98:94:e8:95:06:52:2a:52:
         92:4a:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----