Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/9qt_AxGF-iefTgTj9gP8JXPuDuE.roa
File:                     9qt_AxGF-iefTgTj9gP8JXPuDuE.roa (raw, json)
Hash identifier:          dzLOUtBgexrBsG0CJE0tpFxhbM0NWc5a6JMvh5ssT/c=
Subject key identifier:   F6:AB:7F:03:11:85:FA:27:9F:4E:04:E3:F6:03:FC:25:73:EE:0E:E1
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       0194D5B79A5AA7835A4CEE340437B5AB2870
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/9qt_AxGF-iefTgTj9gP8JXPuDuE.roa
Signing time:             Wed 05 Feb 2025 10:46:07 +0000
ROA not before:           Wed 05 Feb 2025 10:46:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207346
IP address blocks:        5.180.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:d5:b7:9a:5a:a7:83:5a:4c:ee:34:04:37:b5:ab:28:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: Feb  5 10:46:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f6ab7f031185fa279f4e04e3f603fc2573ee0ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7c:f7:b5:12:98:31:c9:d1:eb:93:1e:a8:21:
                    b9:d0:df:c2:18:dd:4c:13:a7:63:14:50:af:58:47:
                    d6:bf:61:9e:e9:df:3d:ce:6d:7c:6c:36:dd:d4:0f:
                    40:9c:52:20:95:41:0d:62:d6:08:8f:ea:b4:d9:9c:
                    3e:c3:9d:5c:b8:8d:3a:12:a9:20:ae:2c:37:6e:d4:
                    c8:ce:02:2d:d0:a1:b4:35:9f:d5:1a:e3:62:7b:f2:
                    ad:08:a7:96:c0:2a:06:5d:9c:41:ca:fa:08:ec:78:
                    a1:0a:9b:1b:8e:31:b2:04:10:b1:60:26:f3:3a:7e:
                    66:6d:97:ba:08:47:a8:d0:75:77:55:cd:a3:27:eb:
                    c3:0d:ce:ad:6e:16:a0:58:75:07:43:25:02:70:8b:
                    5b:d1:06:ad:58:92:83:03:a3:a8:d8:9e:17:fb:ea:
                    0d:00:23:6d:e5:3c:50:cd:ba:90:32:f7:6f:c0:67:
                    8b:d8:89:57:ae:b1:b3:c4:76:7b:9c:96:c9:b0:78:
                    15:0a:84:10:1d:45:2f:b9:4c:89:58:76:81:54:f5:
                    53:75:6d:7b:88:1e:08:cd:47:d7:0d:67:c4:b4:b2:
                    a5:2f:f7:a7:e9:b9:5b:17:d7:8a:ec:35:73:33:08:
                    63:e6:f3:2e:ac:1e:a0:60:37:0e:5c:1c:bf:fa:a3:
                    d4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AB:7F:03:11:85:FA:27:9F:4E:04:E3:F6:03:FC:25:73:EE:0E:E1
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/9qt_AxGF-iefTgTj9gP8JXPuDuE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:64:f7:a7:0d:47:fb:ff:f8:dd:4a:18:c5:28:f6:95:a3:af:
         48:7a:e2:20:a6:cb:c0:8a:33:80:ee:5d:55:b9:4a:7f:b2:b9:
         64:45:0d:0e:36:3b:b5:f8:84:e2:0b:18:61:b7:fd:16:c9:a5:
         7b:b1:29:84:72:a1:a8:12:22:1b:13:7f:e0:fd:87:30:30:ac:
         5c:14:8f:2e:3d:ce:c6:16:c1:8f:30:3f:22:ad:f8:8f:6e:d7:
         e8:7b:89:87:ec:01:27:8d:13:78:56:a7:87:b5:8f:2a:90:07:
         b2:a5:3f:4a:57:b7:cd:0f:ea:2e:f2:d8:d7:b2:b8:2f:c1:7e:
         ce:ce:b1:fc:49:06:2b:dd:e3:5a:8c:19:19:2a:00:13:42:fd:
         3b:bc:e1:cd:53:91:4b:da:f8:02:e2:0c:0d:a7:c3:20:42:5c:
         6c:ec:1c:66:95:35:cf:a4:e8:d0:87:32:cc:98:5a:b9:fe:8a:
         57:11:d7:c5:ce:10:09:a4:d1:ac:24:2c:c2:b5:bd:60:8e:9a:
         ce:6f:0a:e4:cc:ea:72:f1:81:d9:64:44:fe:35:07:6d:94:7d:
         4f:d6:6d:b5:30:09:6d:a3:13:a9:21:52:5d:ff:8a:45:36:e6:
         d7:a0:c1:dc:fb:26:be:42:25:c0:7c:9a:ed:c1:50:23:57:5b:
         56:a1:f7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----