Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/wpydopt6VUah6RQMZrzjsU6WoPc.roa
File:                     wpydopt6VUah6RQMZrzjsU6WoPc.roa (raw, json)
Hash identifier:          cp20Yibn6t1V4VomO6+maPrzeM92DrtR/BD0ISnTpAw=
Subject key identifier:   C2:9C:9D:A2:9B:7A:55:46:A1:E9:14:0C:66:BC:E3:B1:4E:96:A0:F7
Certificate issuer:       /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial:       019420D611F9F9FE483A3BB15334D0E8FE45
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/wpydopt6VUah6RQMZrzjsU6WoPc.roa
Signing time:             Wed 01 Jan 2025 07:48:07 +0000
ROA not before:           Wed 01 Jan 2025 07:48:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     50434
IP address blocks:        195.254.184.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:11:f9:f9:fe:48:3a:3b:b1:53:34:d0:e8:fe:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
        Validity
            Not Before: Jan  1 07:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c29c9da29b7a5546a1e9140c66bce3b14e96a0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d5:1b:6f:d0:da:16:a9:42:e6:39:41:ef:99:
                    10:2f:5d:71:b6:5b:96:88:49:09:96:0f:0d:4e:2e:
                    ac:6e:c7:d3:e6:f0:03:7a:f9:3c:12:9f:68:b7:99:
                    e7:e4:18:be:31:e5:8a:95:70:e3:e9:41:95:fa:d1:
                    42:fb:64:b6:2e:39:8e:38:be:c6:63:43:15:5b:0f:
                    a5:85:6e:bf:01:b3:95:a6:86:97:6c:3a:ca:f6:b4:
                    5d:4b:b4:e4:c2:74:bb:2e:fc:a7:b7:5c:3c:09:66:
                    c1:10:12:1f:a5:0e:46:d0:0b:cd:0c:5e:2d:0c:3e:
                    24:f7:0c:e8:0a:0f:38:0c:38:a7:dd:03:03:bb:c5:
                    4f:b9:ec:90:4a:e9:fd:a3:1e:b7:4f:dc:b3:ef:2a:
                    b5:4f:9f:01:02:d0:68:a2:4e:e0:60:0b:82:39:1f:
                    b2:dd:59:74:25:56:d2:de:56:01:85:59:0e:6f:7f:
                    61:94:63:6e:74:23:01:61:63:05:cc:d1:ab:9b:b9:
                    1a:e5:13:e2:18:76:c6:df:77:b2:18:33:e2:c1:37:
                    40:1a:df:13:c2:84:13:17:c5:9b:14:1e:81:a3:31:
                    97:f0:bc:db:bf:7d:94:89:ea:fd:54:b2:ca:36:fa:
                    62:80:15:6e:ed:5a:f9:97:ba:e7:21:48:cc:08:5e:
                    0a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9C:9D:A2:9B:7A:55:46:A1:E9:14:0C:66:BC:E3:B1:4E:96:A0:F7
            X509v3 Authority Key Identifier:
                keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/wpydopt6VUah6RQMZrzjsU6WoPc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.254.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:6f:5c:77:ed:57:78:57:9d:55:98:87:4c:06:31:a9:d0:e4:
         4f:eb:36:d8:26:44:3d:65:75:29:ec:38:41:a3:eb:7c:60:7b:
         5f:9a:c0:63:da:b1:38:b0:80:46:6f:c2:5c:61:78:fd:c5:87:
         4a:09:04:7a:cc:cb:f1:91:cf:e6:5e:ab:d9:6a:f8:44:f0:39:
         7c:cf:ba:b3:25:f5:22:68:9e:e3:08:b6:9e:09:3f:f2:75:3e:
         eb:51:37:82:74:c3:d6:80:b9:a8:aa:ee:30:e3:6c:7b:49:ff:
         50:b4:f2:e7:d3:58:5a:a2:06:b7:7d:bd:34:d1:8c:e9:ce:85:
         7c:86:b1:d5:7e:5a:9b:29:49:a6:c7:6e:aa:54:be:de:96:23:
         33:0e:63:a4:a0:67:11:b8:69:fb:c1:d1:d7:de:85:f7:54:f9:
         4f:0f:c0:c8:ff:60:9f:2c:4f:f2:8b:80:72:23:6b:07:88:2f:
         77:be:2c:0b:ed:f7:64:f7:10:76:e9:8f:cc:27:86:f3:04:31:
         26:43:ac:79:e7:64:cc:bb:70:fc:77:a2:23:e5:70:d6:55:e5:
         bd:62:76:3d:1a:70:50:30:68:c4:82:11:46:70:65:d4:b2:ba:
         0a:2e:70:8c:bb:18:db:26:38:4e:2b:cc:6b:e2:2b:3a:1d:f8:
         f8:ba:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----