Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/cEPe1d3YoskScGmDT-EhAwRX1Zg.roa
File:                     cEPe1d3YoskScGmDT-EhAwRX1Zg.roa (raw, json)
Hash identifier:          2HlSilBxto4Shnydtat8ccDlkora6d+s7b7hf7cB5z8=
Subject key identifier:   70:43:DE:D5:DD:D8:A2:C9:12:70:69:83:4F:E1:21:03:04:57:D5:98
Certificate issuer:       /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Certificate serial:       018CC8DCEE4621C50B6A7323513210A7EAA4
Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/cEPe1d3YoskScGmDT-EhAwRX1Zg.roa
Signing time:             Tue 02 Jan 2024 06:29:31 +0000
ROA not before:           Tue 02 Jan 2024 06:29:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49451
IP address blocks:        185.1.177.0/24 maxlen: 24
                          2001:7f8:fa::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:dc:ee:46:21:c5:0b:6a:73:23:51:32:10:a7:ea:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
        Validity
            Not Before: Jan  2 06:29:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7043ded5ddd8a2c9127069834fe121030457d598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8a:aa:6a:c7:3f:f5:54:ed:a3:ab:ce:5a:48:
                    b7:56:58:2e:75:57:fc:51:30:f5:02:a9:6d:f2:d9:
                    db:29:34:32:a9:4c:bf:a1:d8:1f:1d:98:8c:1a:c1:
                    6a:2e:1b:c2:25:58:33:ef:24:d4:96:50:6c:8c:dd:
                    7b:fd:47:e3:ca:a5:0a:31:e9:e7:c8:cb:8e:5f:fd:
                    9a:ff:7a:82:97:ee:11:18:e2:ba:ad:ee:a5:a1:73:
                    31:17:2a:35:7c:3b:aa:34:36:9d:1f:91:70:ff:08:
                    00:75:44:ae:d3:a4:c6:58:b6:0d:b4:7e:73:e8:67:
                    a2:8b:8e:6c:9b:2b:f0:db:31:21:35:3f:1e:89:1a:
                    db:83:b6:a3:10:7d:9e:0e:4c:88:4a:d3:49:35:cc:
                    94:33:0f:f0:33:e5:83:34:15:11:5f:5f:9e:d5:ab:
                    cc:2d:a3:01:7a:c4:3a:20:14:eb:fe:7c:d7:3f:9c:
                    d2:b3:46:c4:5f:61:b6:b7:9c:78:67:ab:0e:38:1f:
                    0c:96:be:ae:39:ae:f5:98:08:dd:b1:f9:8b:e6:ba:
                    76:82:8b:7d:26:c6:5e:07:6e:66:49:15:41:6b:0d:
                    32:db:02:d3:4b:43:a6:7b:7c:98:bc:b0:bf:9b:4b:
                    ba:fa:0d:98:8c:0e:15:30:3d:20:3f:89:b7:a0:59:
                    42:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:43:DE:D5:DD:D8:A2:C9:12:70:69:83:4F:E1:21:03:04:57:D5:98
            X509v3 Authority Key Identifier:
                keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/cEPe1d3YoskScGmDT-EhAwRX1Zg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.177.0/24
                IPv6:
                  2001:7f8:fa::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:ce:fc:a1:c1:0e:b5:c8:a2:20:3a:42:cd:72:34:92:c6:ba:
         52:f5:4c:b3:2d:7e:9a:d4:cd:be:6f:68:30:a5:59:da:be:c6:
         4e:54:52:b5:78:54:78:63:e6:79:e2:ff:90:37:17:a8:eb:b8:
         83:24:61:54:b6:d9:0d:d0:ec:53:ab:d1:22:1d:69:1d:cf:b3:
         43:79:5b:06:7d:aa:c2:18:cb:b6:b6:b0:47:05:4a:00:09:95:
         4b:d7:de:9d:42:01:9b:c1:76:a6:2c:db:c8:dd:a4:b0:59:31:
         f4:9f:ff:4a:34:6b:89:de:75:5f:41:b1:37:01:f9:2e:a7:78:
         c6:6c:8c:8d:72:0d:4f:21:c4:6c:24:b3:60:02:2d:1b:ef:8a:
         d0:73:be:4b:b3:4a:85:c5:2a:39:f8:7f:6c:0c:cf:54:c7:5c:
         f4:58:79:80:5f:26:4b:08:c6:42:0e:f7:13:d0:1b:35:b1:2a:
         f3:f5:d4:3d:5d:8a:45:18:3f:21:d8:b2:98:9e:8b:99:de:c6:
         18:97:94:31:f1:5a:40:e0:2e:2b:7c:04:7f:46:ca:17:71:be:
         8e:74:a4:20:f8:c0:9d:53:fd:d7:53:1a:7d:b4:dc:de:e7:80:
         42:3e:1c:6f:85:7d:76:53:65:0d:3a:a7:27:60:2b:f7:0f:e0:
         ed:b2:5e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----