Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/cit1kApnchgp5-NcoLMNmkiberA.roa
File:                     cit1kApnchgp5-NcoLMNmkiberA.roa (raw, json)
Hash identifier:          YklINgFrov70KBDYEmmfBN2An9oGqfElSs5WYcHMAsU=
Subject key identifier:   72:2B:75:90:0A:67:72:18:29:E7:E3:5C:A0:B3:0D:9A:48:9B:7A:B0
Certificate issuer:       /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial:       019352F33153D2A9DD61CEE3AF1C2189A6A4
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/cit1kApnchgp5-NcoLMNmkiberA.roa
Signing time:             Fri 22 Nov 2024 08:18:09 +0000
ROA not before:           Fri 22 Nov 2024 08:18:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9135
IP address blocks:        213.164.128.0/19 maxlen: 19
                          213.164.137.0/24 maxlen: 24
                          213.164.138.0/24 maxlen: 24
                          2a00:fcc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:f3:31:53:d2:a9:dd:61:ce:e3:af:1c:21:89:a6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
        Validity
            Not Before: Nov 22 08:18:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=722b75900a67721829e7e35ca0b30d9a489b7ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:01:b5:11:a4:4f:17:34:e8:35:3d:49:8c:
                    50:d3:06:e7:26:75:a7:b6:06:4a:51:d0:51:46:81:
                    57:b8:58:88:89:9f:74:65:8c:29:e0:2f:a9:73:41:
                    47:e9:36:43:db:28:01:01:27:0f:c6:7b:9f:d7:d3:
                    07:ae:38:f4:0c:1f:c6:ca:f0:88:65:37:e5:19:49:
                    89:9d:c8:1b:9c:7d:2e:64:76:5f:8c:36:fd:c9:e9:
                    77:61:c3:55:8f:3a:2f:2e:57:0a:47:41:16:ac:17:
                    56:8c:b4:69:7f:d6:69:26:00:49:01:9d:65:ec:0f:
                    e6:a9:2b:6e:14:c0:0b:b5:06:2a:b0:be:5d:cd:f0:
                    cb:38:95:f5:52:f1:0d:32:25:51:f3:4a:81:64:a7:
                    35:2a:78:d1:a6:c4:70:7f:7b:16:23:b8:98:26:c5:
                    fc:a2:12:ca:61:79:80:25:8b:fa:d7:9a:11:9b:4d:
                    9c:95:0e:17:72:d4:b8:05:06:95:7f:09:bd:70:f1:
                    f0:93:c2:d8:85:06:05:88:b9:1e:be:e5:5b:5f:47:
                    6e:b5:44:c8:62:37:5f:85:7c:bd:fe:93:b8:17:8d:
                    70:a5:9f:73:22:69:4e:c5:93:a4:38:d5:b6:ea:2e:
                    3a:f1:48:b0:2d:71:08:e1:0a:53:29:f1:37:cd:9a:
                    dd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2B:75:90:0A:67:72:18:29:E7:E3:5C:A0:B3:0D:9A:48:9B:7A:B0
            X509v3 Authority Key Identifier:
                keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/cit1kApnchgp5-NcoLMNmkiberA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.164.128.0/19
                IPv6:
                  2a00:fcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:35:a7:0c:bb:33:21:da:fb:e3:a3:3c:0f:81:82:02:56:a6:
         29:44:82:3c:b7:57:da:4a:3b:0b:43:10:7c:ad:13:57:bb:9d:
         30:d9:ad:53:85:5c:4e:4b:05:92:4b:6e:74:5f:41:2d:92:57:
         fd:ab:c4:a0:47:ab:12:30:0a:36:f8:1f:0a:93:bc:8c:bf:14:
         1a:23:a1:1d:af:7c:a5:75:2a:14:1c:90:d8:cc:5b:e1:60:91:
         26:40:6d:49:7b:d4:5d:a6:33:75:a7:17:17:a6:a9:95:7e:6c:
         30:c2:db:ef:d1:1b:c1:5a:68:73:ba:a8:84:c1:d7:88:08:d3:
         66:20:b8:75:1e:98:20:f9:8a:10:7a:a0:1d:81:3e:ba:bf:7e:
         83:31:97:55:2c:55:66:b4:ae:70:c4:29:fa:e5:3b:0c:25:1a:
         cc:0b:11:c1:52:f1:0d:f3:4e:df:52:ed:8d:c3:36:f1:f6:be:
         0b:dc:02:a5:90:d1:d6:bd:46:3e:ad:42:9e:28:11:35:e2:c9:
         4e:cb:a4:72:71:a7:a0:80:cc:c0:b1:06:f2:2c:82:23:cd:b8:
         1b:d1:d2:9a:b0:90:3f:ee:33:fd:0a:40:ca:27:6b:3a:05:31:
         95:b4:60:bf:6e:0b:ad:ae:ae:b8:5e:2d:cf:b6:83:45:68:d5:
         6d:52:27:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----