Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/QTjz4VGR-GTFrRo0tluoiHJIBec.roa
File:                     QTjz4VGR-GTFrRo0tluoiHJIBec.roa (raw, json)
Hash identifier:          cV6m/fRf828h8WvDtj1b9iihpVzZghXy5TyXPUcK2IY=
Subject key identifier:   41:38:F3:E1:51:91:F8:64:C5:AD:1A:34:B6:5B:A8:88:72:48:05:E7
Certificate issuer:       /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial:       01942143CE7E52A4BD6677BA305DAE35BECE
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/QTjz4VGR-GTFrRo0tluoiHJIBec.roa
Signing time:             Wed 01 Jan 2025 09:47:59 +0000
ROA not before:           Wed 01 Jan 2025 09:47:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209842
IP address blocks:        94.154.144.0/22 maxlen: 22
                          2a09:c500::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:ce:7e:52:a4:bd:66:77:ba:30:5d:ae:35:be:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
        Validity
            Not Before: Jan  1 09:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4138f3e15191f864c5ad1a34b65ba888724805e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c6:67:bc:eb:cf:91:cf:90:f8:39:8e:46:f0:
                    8d:90:97:c6:44:29:d8:69:f2:fd:ce:d2:99:c4:5b:
                    5f:75:f9:fd:8c:0e:4a:1f:15:dd:2e:a0:95:11:16:
                    3f:fa:ef:db:24:03:37:cd:e3:16:84:2f:7e:2a:6c:
                    f7:4b:33:93:99:58:98:f0:7a:a7:6f:f5:71:ce:94:
                    91:10:ac:e7:36:04:43:5e:52:c4:a2:78:48:b8:fc:
                    fa:60:b6:75:d0:4a:53:a7:65:3d:e2:f8:92:68:c1:
                    45:40:87:fd:b3:ce:a1:5d:1a:49:2e:52:6a:97:46:
                    10:17:46:c8:55:9a:2e:8e:11:06:29:b0:f9:a0:3f:
                    04:c3:bd:a6:08:dc:a3:7a:ef:e3:2d:ed:53:4b:60:
                    3d:96:de:9a:8a:44:59:b2:24:be:31:fd:5d:72:3f:
                    f4:bb:8b:41:08:c2:be:ed:14:53:7f:bb:d7:00:a2:
                    46:d1:e4:35:83:60:51:ad:e1:26:c0:d9:bf:26:59:
                    8c:f7:00:1b:5e:23:84:f6:69:32:2d:4e:91:17:2d:
                    ce:66:7d:da:9b:7b:e2:c3:ae:94:7c:ad:89:23:b6:
                    4a:55:f8:63:51:91:bb:22:d1:73:62:89:58:34:17:
                    b6:b7:33:af:e5:e4:b4:9e:58:1c:ca:0a:8e:df:4e:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:38:F3:E1:51:91:F8:64:C5:AD:1A:34:B6:5B:A8:88:72:48:05:E7
            X509v3 Authority Key Identifier:
                keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/QTjz4VGR-GTFrRo0tluoiHJIBec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.144.0/22
                IPv6:
                  2a09:c500::/29

    Signature Algorithm: sha256WithRSAEncryption
         26:51:f8:91:4e:46:9c:7e:10:ea:c9:1c:75:4f:b6:5f:6d:2b:
         26:7d:61:11:cc:34:16:37:8f:d9:7b:80:dd:7f:32:73:6b:e9:
         9f:9f:c5:44:55:1c:65:6c:dc:e4:4c:3a:b9:4f:c3:83:00:81:
         02:87:4c:61:1a:ed:aa:7b:3b:20:fb:70:7d:4d:ad:94:9b:78:
         62:96:5d:62:5e:f6:27:59:37:fe:bd:da:48:62:70:35:83:ca:
         d2:53:bc:64:2b:6e:75:8e:48:6f:e9:19:77:2c:c9:df:02:b0:
         a6:20:2c:bf:a1:79:75:1c:2b:39:9d:f6:99:64:66:d2:5d:7f:
         c7:ec:a7:7d:94:bd:e0:bf:bb:26:ad:85:99:6b:01:cf:2c:88:
         d5:ea:66:21:f0:ab:6b:e3:61:78:14:69:ee:9c:e0:e3:29:d4:
         db:9b:39:a6:5c:97:bd:4c:b0:8d:2a:00:93:1a:31:80:f1:ac:
         61:48:e9:c0:97:da:cd:03:24:cf:43:a6:5e:31:9a:75:96:94:
         43:ec:b6:22:2b:90:6a:b3:45:c3:b1:c0:37:e8:95:7b:7c:2f:
         6e:9d:eb:9e:b4:14:53:96:98:3b:91:4e:01:9b:c2:c9:7c:7f:
         b6:ef:ef:f2:2c:1e:4d:aa:af:84:d1:66:44:82:32:c7:1b:d6:
         97:32:ee:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----