Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/V_AhGLWEz_D5OVSUmOpCvCorc0Y.roa
File:                     V_AhGLWEz_D5OVSUmOpCvCorc0Y.roa (raw, json)
Hash identifier:          zskZj/n1B6PJEz/jXex9+d4fpdYJ2j+Fk5JUolMcUls=
Subject key identifier:   57:F0:21:18:B5:84:CF:F0:F9:39:54:94:98:EA:42:BC:2A:2B:73:46
Certificate issuer:       /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial:       01941FFA07358072693E0DC10E27B1E5521B
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/V_AhGLWEz_D5OVSUmOpCvCorc0Y.roa
Signing time:             Wed 01 Jan 2025 03:47:46 +0000
ROA not before:           Wed 01 Jan 2025 03:47:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208095
IP address blocks:        45.159.28.0/24 maxlen: 24
                          45.159.29.0/24 maxlen: 24
                          2a0f:67c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:07:35:80:72:69:3e:0d:c1:0e:27:b1:e5:52:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
        Validity
            Not Before: Jan  1 03:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=57f02118b584cff0f939549498ea42bc2a2b7346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:74:ad:6a:73:5e:0b:ad:b8:80:73:a4:3b:83:
                    fa:10:89:fc:2b:d0:8e:0e:86:e0:2c:34:fb:f6:e7:
                    e1:60:b5:bd:28:37:8e:a1:b2:1e:cf:bb:85:39:22:
                    5a:a7:65:02:65:8c:27:6d:af:ca:21:ed:4b:7d:54:
                    02:a9:4c:02:8e:a2:20:7f:18:83:9d:5e:5c:5d:37:
                    46:17:d0:56:eb:6d:34:9c:f0:29:e6:05:d6:57:59:
                    27:41:c5:ba:d1:28:10:d7:1c:b6:cd:89:20:bd:f8:
                    e9:0b:54:9a:90:dc:88:5e:21:75:7a:63:00:38:28:
                    5d:b4:a5:de:a2:70:0e:e9:52:b7:20:59:b2:23:ea:
                    64:ae:e4:80:15:cd:07:4d:21:b1:83:e5:61:6a:ea:
                    78:28:39:d9:b7:6e:b1:cd:cf:bf:49:27:24:a6:87:
                    0e:e6:55:68:9d:16:26:c9:fa:8a:7e:22:3e:a2:82:
                    bd:f7:78:03:8d:fc:6a:12:84:93:fe:1c:f4:0c:f6:
                    77:23:03:60:81:09:14:93:dc:48:79:39:5a:80:27:
                    c3:a5:cf:3f:fb:9f:65:2b:f8:b3:39:5f:43:c6:c1:
                    3d:a8:19:dc:60:40:fd:f4:a9:b9:04:48:ae:5f:ee:
                    6f:b5:4a:a2:e9:ad:10:a7:93:f1:c8:84:7a:20:e1:
                    87:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F0:21:18:B5:84:CF:F0:F9:39:54:94:98:EA:42:BC:2A:2B:73:46
            X509v3 Authority Key Identifier:
                keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/V_AhGLWEz_D5OVSUmOpCvCorc0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.28.0/23
                IPv6:
                  2a0f:67c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:3a:5f:66:81:cb:29:00:93:49:c2:93:e8:a0:c4:fb:02:
         ce:e4:87:4d:9f:03:a2:2b:4e:07:c0:86:bb:89:b9:1a:f2:69:
         40:64:c1:19:13:b6:ef:f0:64:65:1d:78:ab:68:c6:86:fa:3a:
         b2:25:5e:68:52:48:0d:ad:29:0c:67:88:13:35:ef:bb:2f:e1:
         60:47:c7:7c:7e:f0:a8:64:65:1b:2a:29:42:a5:21:06:84:1c:
         d6:33:90:f7:e7:56:18:20:39:25:6e:17:43:d1:f8:9f:e6:19:
         09:82:18:c7:74:49:a9:fc:67:14:6e:9b:66:e2:18:10:b7:e7:
         4e:db:dd:6b:1b:02:3c:e8:d6:7a:7c:ff:c9:b7:c8:c1:4c:76:
         78:77:ec:df:3b:bd:96:ac:68:f6:43:aa:e4:b3:2c:43:e4:0c:
         95:e9:01:08:ad:13:5e:89:66:13:96:c9:62:2e:51:a2:2d:58:
         99:36:1d:09:71:72:27:a6:d2:5a:97:ab:e2:d4:83:90:63:fd:
         d2:91:22:ca:02:1a:a9:4b:68:ea:14:1c:37:b5:19:03:46:3c:
         34:e6:b0:54:fd:f4:9c:b9:86:3e:86:df:26:a4:8c:8b:00:a5:
         c4:41:fd:15:7b:e1:cc:52:62:f7:da:d5:7f:49:eb:46:fd:6b:
         ff:8a:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----