Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/Mxp-9-HJ6nj3RoC9hLbs6RobwOI.roa
File:                     Mxp-9-HJ6nj3RoC9hLbs6RobwOI.roa (raw, json)
Hash identifier:          +fWud3kyTaAwOOb4O40dBlDJowiLPF4WjzcQLC+SDBE=
Subject key identifier:   33:1A:7E:F7:E1:C9:EA:78:F7:46:80:BD:84:B6:EC:E9:1A:1B:C0:E2
Certificate issuer:       /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial:       019132868ECFB2C81367081D7AEC8F226519
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/Mxp-9-HJ6nj3RoC9hLbs6RobwOI.roa
Signing time:             Thu 08 Aug 2024 15:06:04 +0000
ROA not before:           Thu 08 Aug 2024 15:06:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199533
IP address blocks:        185.144.115.0/24 maxlen: 24
                          2a0f:ac80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:32:86:8e:cf:b2:c8:13:67:08:1d:7a:ec:8f:22:65:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
        Validity
            Not Before: Aug  8 15:06:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=331a7ef7e1c9ea78f74680bd84b6ece91a1bc0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:a3:e9:70:b4:f8:c6:2f:5f:c7:6d:e8:b8:
                    40:82:25:6c:0e:96:67:ba:58:ec:62:d0:7c:70:1c:
                    29:cd:fc:80:c7:6d:30:26:03:65:23:1f:47:26:2a:
                    bb:f8:6b:c8:17:c7:a9:22:f5:be:84:23:be:bb:92:
                    51:8e:e2:f8:fd:ce:37:27:06:7a:9d:85:60:83:7a:
                    9f:e3:d7:aa:66:6c:6c:15:02:c0:a7:39:da:fc:30:
                    ee:51:c9:42:6c:87:f2:aa:17:2f:5b:32:7d:e8:4e:
                    b3:00:55:65:f7:1e:3a:86:17:01:66:8f:0c:41:7f:
                    ce:db:70:5c:4e:78:30:06:89:62:8e:93:d4:c4:64:
                    fa:a0:ad:bf:ed:ca:ea:ce:9d:b7:d9:6d:00:90:63:
                    eb:16:0a:32:e8:d2:33:28:77:2d:f9:6b:9b:35:97:
                    db:e0:cb:16:bf:d7:2c:87:2e:a9:38:b6:1a:df:5d:
                    75:d5:9c:1e:4b:31:ad:71:ba:9b:c5:e6:ba:ff:e4:
                    e1:45:c1:58:57:8f:10:3c:fd:b5:81:63:cd:b6:32:
                    80:f3:85:27:81:9f:86:12:6b:b7:07:9a:43:b5:40:
                    9e:17:50:ca:1b:26:f9:4b:86:17:f2:f8:b0:58:5f:
                    0e:00:e4:5f:81:af:66:be:13:94:ee:4c:0e:9c:22:
                    7c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1A:7E:F7:E1:C9:EA:78:F7:46:80:BD:84:B6:EC:E9:1A:1B:C0:E2
            X509v3 Authority Key Identifier:
                keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/Mxp-9-HJ6nj3RoC9hLbs6RobwOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.144.115.0/24
                IPv6:
                  2a0f:ac80::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:12:c7:b6:8e:db:1b:55:33:eb:95:d3:8e:16:51:ae:33:01:
         07:1a:95:df:c6:57:cf:73:4b:e6:59:2f:ea:65:b8:3c:79:74:
         49:43:44:92:15:07:e3:db:b6:a5:64:b3:29:03:af:fe:3e:bf:
         38:43:b6:14:b5:01:39:c3:2e:ec:7d:25:f1:a8:a7:e6:3c:6d:
         1e:bd:91:fb:50:02:04:63:ed:73:60:f6:3e:f7:ca:68:9f:37:
         5a:38:8d:06:3c:b9:73:01:6f:90:00:0f:94:fe:2e:9a:be:81:
         f9:01:f9:28:a1:a1:2d:05:3d:ba:62:cb:bb:c6:de:46:34:8f:
         f8:75:14:b5:a3:c3:15:41:b6:1e:fe:72:66:f9:6a:18:d6:80:
         92:c1:d0:b7:10:a9:16:eb:14:59:94:8c:4d:b6:f9:24:3c:7e:
         eb:25:3a:b8:00:2e:f7:9e:af:b6:ac:b6:3e:2d:35:f6:de:af:
         dc:78:b6:c4:99:54:9d:85:c0:00:09:17:95:0b:e5:5f:4b:72:
         e8:07:74:3f:ec:fb:a4:aa:86:0c:ae:97:e3:dd:cd:6c:74:26:
         8d:0d:c6:e3:bf:91:9f:8f:35:a5:b6:de:cb:34:4d:b7:b6:b2:
         55:a4:8b:dc:e1:58:6b:59:69:c0:30:58:31:ec:65:1d:00:b8:
         50:58:c4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----