Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/PvUc9zsD3htQ8H9mxpx8UzLv3To.roa
File:                     PvUc9zsD3htQ8H9mxpx8UzLv3To.roa (raw, json)
Hash identifier:          zvFKPdwhED+0YLJA5rKh3ueMkFsfC6noT6Esie9dRX0=
Subject key identifier:   3E:F5:1C:F7:3B:03:DE:1B:50:F0:7F:66:C6:9C:7C:53:32:EF:DD:3A
Certificate issuer:       /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial:       01961E87653DD319A48E62FA9B63139DD7DF
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/PvUc9zsD3htQ8H9mxpx8UzLv3To.roa
Signing time:             Thu 10 Apr 2025 07:08:31 +0000
ROA not before:           Thu 10 Apr 2025 07:08:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201265
IP address blocks:        185.32.160.0/22 maxlen: 24
                          185.32.161.0/24 maxlen: 24
                          185.32.162.0/23 maxlen: 23
                          2a00:a5a1::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1e:87:65:3d:d3:19:a4:8e:62:fa:9b:63:13:9d:d7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
        Validity
            Not Before: Apr 10 07:08:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3ef51cf73b03de1b50f07f66c69c7c5332efdd3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c8:b3:72:e0:ec:83:4d:cc:1d:59:f2:72:b2:
                    2c:64:c7:4a:e3:1c:cf:10:3b:b6:54:f3:19:b9:04:
                    e6:7a:99:77:ab:94:57:50:df:c6:ac:0f:e8:29:7a:
                    56:6e:d4:fe:8d:87:20:d0:11:d7:5b:93:85:5c:aa:
                    fe:aa:ac:ca:7d:8b:79:b4:47:bb:da:1c:43:03:f4:
                    a2:37:07:cd:68:99:b0:d0:48:09:19:d9:da:3d:92:
                    9a:16:5b:b3:e7:fa:a9:ab:91:9f:b4:a9:2a:b2:98:
                    e2:74:24:f8:3f:37:9d:72:a0:77:a2:95:d3:d7:f5:
                    f6:c4:8a:8d:4f:af:bc:2c:74:94:5d:c7:49:e6:2e:
                    27:18:22:dc:52:a0:3d:5d:f6:c1:1a:41:95:dd:d3:
                    e0:42:2c:88:d6:43:15:a5:b1:1f:70:8b:38:61:d7:
                    44:6c:eb:3e:e5:9b:34:e7:1b:67:42:7a:ee:60:ec:
                    af:de:70:1d:ca:67:37:60:db:cf:84:98:64:6c:5f:
                    49:f4:fa:7b:67:63:2a:13:0b:05:4c:e7:fb:b0:b8:
                    5a:b9:d0:f1:1e:11:f2:b0:d4:d1:fb:70:a4:68:0f:
                    ea:fe:de:4c:4c:64:19:6c:77:22:5e:36:c7:15:b1:
                    1b:75:fc:e5:f0:0b:eb:2f:22:6f:50:4e:48:86:e7:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F5:1C:F7:3B:03:DE:1B:50:F0:7F:66:C6:9C:7C:53:32:EF:DD:3A
            X509v3 Authority Key Identifier:
                keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/PvUc9zsD3htQ8H9mxpx8UzLv3To.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.32.160.0/22
                IPv6:
                  2a00:a5a1::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:78:86:4e:22:bc:1f:bd:69:7e:05:7b:7a:d2:8d:9a:ad:2e:
         7f:3d:73:38:6f:2d:dd:ef:b4:76:56:ed:8f:d0:cd:5f:4c:d2:
         2c:c9:64:ab:d8:1b:60:da:24:7d:dc:07:0e:15:74:d9:67:c4:
         5f:83:59:eb:80:64:3a:f0:c4:96:b7:85:c4:18:4a:f9:4b:6d:
         42:27:11:6b:e9:00:3f:88:80:37:25:ef:34:67:50:b4:69:4e:
         92:c0:76:fe:21:14:3f:b8:bf:06:db:d7:4f:91:22:2d:b3:d5:
         d8:b7:78:04:2b:42:e0:91:17:32:61:83:dd:f9:9e:c2:1b:ac:
         31:c0:88:45:43:b9:10:07:df:b1:92:31:75:6a:c0:ac:af:e9:
         e4:71:f6:77:6b:f5:89:f4:cc:92:93:a5:60:92:fe:b1:a3:91:
         1d:01:e4:40:47:95:d9:42:bb:03:74:ea:66:08:09:d7:63:40:
         95:15:a2:d6:04:54:97:98:6b:95:1c:1e:67:a4:5b:16:16:0a:
         9e:51:48:ee:1c:56:c1:99:59:49:c4:0b:28:16:9e:e9:7b:ae:
         89:a2:3c:b9:06:d3:89:03:9f:25:24:5c:3c:42:d0:59:0f:74:
         62:fe:3b:9b:d5:20:32:69:d3:97:ca:04:15:a5:11:17:38:1a:
         d8:0e:d2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----