Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/bAacBV2Nw5dlSOAXdJOoA7HEvjE.roa
File:                     bAacBV2Nw5dlSOAXdJOoA7HEvjE.roa (raw, json)
Hash identifier:          fR7tFabVPNstEHxx+U9K/CBKuKf4T3tR3OGzVsaSh0c=
Subject key identifier:   6C:06:9C:05:5D:8D:C3:97:65:48:E0:17:74:93:A8:03:B1:C4:BE:31
Certificate issuer:       /CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Certificate serial:       0194258F68835E7EDC1D3FF7B2BEEACEB6AC
Authority key identifier: 20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/bAacBV2Nw5dlSOAXdJOoA7HEvjE.roa
Signing time:             Thu 02 Jan 2025 05:49:02 +0000
ROA not before:           Thu 02 Jan 2025 05:49:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     29075
IP address blocks:        185.204.188.0/22 maxlen: 24
                          2a0a:fc40::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:68:83:5e:7e:dc:1d:3f:f7:b2:be:ea:ce:b6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
        Validity
            Not Before: Jan  2 05:49:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6c069c055d8dc3976548e0177493a803b1c4be31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:5e:a0:48:ec:bd:eb:d9:81:43:78:5c:d2:
                    8e:10:2c:e9:eb:e9:ae:5d:6c:5d:a2:36:ce:37:16:
                    5b:c9:0f:6c:50:a0:2c:ae:56:92:40:a2:db:d7:ad:
                    a9:de:8b:24:20:3b:b0:e7:65:d4:7c:03:28:7d:d0:
                    91:3d:bf:5b:ae:72:6f:62:ae:82:6d:59:a8:ab:da:
                    4f:40:52:52:bc:5a:71:f1:b4:79:15:2d:c9:6c:d8:
                    a4:73:7e:11:2c:64:db:00:f4:7e:fa:76:05:b1:f8:
                    f4:95:80:c6:0e:97:c0:5b:29:ec:04:a1:c8:7e:b7:
                    a5:d6:a7:b7:08:87:e9:fc:e8:a8:5f:73:53:70:45:
                    55:a1:c9:e3:02:53:84:8f:c2:6f:8b:69:e9:4e:f7:
                    b0:40:b4:01:3a:1b:e1:3a:bd:43:88:2d:4d:93:d0:
                    f1:59:f2:b3:d5:0d:27:18:3d:b7:0c:26:50:64:2b:
                    0f:76:30:89:8f:0c:08:9a:c2:20:4b:c1:1c:46:79:
                    ba:2a:52:69:b1:2e:7e:28:89:be:83:21:35:ac:da:
                    d0:a3:8e:34:df:78:7e:bc:72:60:a8:e0:30:fe:d3:
                    d5:1f:c6:54:42:40:d6:4b:5a:77:42:c1:99:87:44:
                    69:71:08:cc:82:37:85:2d:fb:bf:36:52:86:a5:ba:
                    b0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:06:9C:05:5D:8D:C3:97:65:48:E0:17:74:93:A8:03:B1:C4:BE:31
            X509v3 Authority Key Identifier:
                keyid:20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/bAacBV2Nw5dlSOAXdJOoA7HEvjE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.188.0/22
                IPv6:
                  2a0a:fc40::/29

    Signature Algorithm: sha256WithRSAEncryption
         80:45:72:68:e2:6b:a2:47:2e:58:54:0e:ef:60:12:a4:c7:91:
         e0:96:71:81:cc:ce:a1:db:72:dd:b7:62:5e:11:2c:40:6a:64:
         0a:3e:c5:f8:35:2e:bf:62:f0:15:5a:b9:69:56:3c:4c:29:ce:
         8b:1d:2d:e2:a6:0f:59:b7:63:36:02:be:c2:90:73:67:09:cc:
         1b:c6:ee:88:64:f9:03:b3:40:a2:6a:20:ef:75:0f:58:d5:48:
         29:a6:b9:b8:57:6f:f9:e0:bf:29:1b:9a:42:46:a3:a4:e5:cb:
         58:1c:38:c6:e9:a1:a6:36:bf:13:85:2b:12:28:99:90:c8:14:
         2e:34:ef:8b:0b:a4:c8:d3:51:bb:3c:de:b7:47:b2:70:61:51:
         f6:66:5e:ab:ef:a0:84:68:c6:b0:b0:b9:c0:dc:28:88:3b:03:
         3d:fc:55:64:92:70:06:73:c2:16:77:aa:0d:3f:8b:d1:2c:12:
         92:0b:17:fc:3d:38:4b:b1:15:4f:e9:9a:43:8d:f2:03:bb:7e:
         37:72:a9:15:e2:2a:93:28:15:85:7b:cd:ba:a0:6b:b5:7d:05:
         2f:15:4a:22:f9:b2:7d:48:82:b4:6e:46:da:d2:49:bb:3c:cc:
         36:4b:fc:2e:13:d0:b9:31:5d:dd:a0:5b:85:de:7d:95:04:8d:
         4c:f2:21:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----