Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/BE_olsmmnp-joM_N2rLYKLd8dek.roa
File:                     BE_olsmmnp-joM_N2rLYKLd8dek.roa (raw, json)
Hash identifier:          ZleCTANKAgfaV22x6J6w6CdrHsjvtau2exHtj44bgPs=
Subject key identifier:   04:4F:E8:96:C9:A6:9E:9F:A3:A0:CF:CD:DA:B2:D8:28:B7:7C:75:E9
Certificate issuer:       /CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Certificate serial:       0195EA95A2901356F0CA16D10A506D9DF601
Authority key identifier: CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/BE_olsmmnp-joM_N2rLYKLd8dek.roa
Signing time:             Mon 31 Mar 2025 05:03:49 +0000
ROA not before:           Mon 31 Mar 2025 05:03:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202748
IP address blocks:        185.83.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ea:95:a2:90:13:56:f0:ca:16:d1:0a:50:6d:9d:f6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde4c465d2df3458c02610f87820c9bc2eb33253
        Validity
            Not Before: Mar 31 05:03:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=044fe896c9a69e9fa3a0cfcddab2d828b77c75e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:6e:ae:44:5b:48:b9:1a:72:47:b6:96:83:
                    34:cb:d6:f3:98:df:be:07:08:d0:d7:a2:ec:46:96:
                    53:12:89:ee:6b:85:05:a6:81:9e:ce:5d:5b:40:f0:
                    cd:dd:1a:ca:4b:51:34:4a:e7:72:c9:47:c2:0a:b2:
                    f9:c7:39:f4:c0:a7:e7:83:83:7b:ae:b2:f7:d8:e8:
                    6f:4a:5b:f5:e5:59:c2:a9:63:e9:96:c3:b1:1d:ad:
                    3c:63:77:99:92:bb:37:cd:cb:c8:44:ca:15:7b:f2:
                    cf:cc:7a:ee:dc:2a:7e:41:8c:b4:ab:b5:b8:5f:c9:
                    ff:c6:ef:e7:38:c3:18:98:8d:2c:e0:a1:98:f8:3f:
                    cd:92:ea:e9:38:63:09:8d:c0:b4:5f:e4:4f:18:cc:
                    24:2d:21:8c:92:cb:eb:57:52:24:97:44:80:7b:9a:
                    94:6d:05:47:d3:15:09:63:10:17:86:07:b7:f8:36:
                    14:6f:af:64:12:ba:4a:45:1f:4b:e8:cf:8b:15:cf:
                    18:fe:b0:6a:9b:b5:32:11:fa:0d:11:02:11:56:f7:
                    ef:d8:f6:69:f6:1f:9b:34:78:0c:45:9f:30:a2:e1:
                    86:21:73:df:44:22:e8:93:98:45:8a:18:f1:ae:b4:
                    32:ae:ee:9a:6c:bd:39:5f:2b:61:3a:b0:6a:17:3a:
                    df:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4F:E8:96:C9:A6:9E:9F:A3:A0:CF:CD:DA:B2:D8:28:B7:7C:75:E9
            X509v3 Authority Key Identifier:
                keyid:CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/BE_olsmmnp-joM_N2rLYKLd8dek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:4a:ab:1e:d9:d0:92:e7:1f:08:77:05:52:a1:57:e0:dc:91:
         9b:1b:6f:cd:08:98:45:91:ab:1a:4f:ce:c8:6a:c1:8c:b0:b1:
         75:67:24:5c:6e:6e:cb:26:74:ed:d3:8f:7c:69:75:75:19:03:
         d5:d5:ea:ff:15:44:c3:d1:ce:64:b0:bd:66:43:67:fb:83:44:
         c3:d0:40:e0:65:26:0b:b9:7d:f9:bd:fc:b1:90:51:d4:93:e9:
         6f:42:5b:b8:d6:77:66:af:e9:a4:7c:eb:bb:44:7f:0c:f6:8e:
         2f:d6:79:8e:b8:5f:39:15:5c:3e:21:53:17:40:3a:87:61:67:
         b4:24:33:b1:ff:c8:e5:e4:fe:57:ad:72:e8:ff:c8:0f:3e:4b:
         08:b2:d1:e0:69:ea:b2:a1:6b:75:8b:5e:37:1b:7f:9a:11:55:
         fc:26:9d:66:fc:8f:fb:38:a5:f2:fe:ef:c7:27:4f:d2:dc:d4:
         10:7c:a4:52:18:7a:cd:16:d1:c8:40:e2:cb:d8:a6:44:74:5d:
         a8:8d:4c:23:5d:1c:02:8a:dd:80:e5:36:79:86:35:c4:e0:c0:
         05:0a:ce:2b:d2:a6:07:b6:b4:40:1d:08:5e:d0:dc:39:9e:87:
         49:12:33:ae:4d:75:e1:ed:ba:4b:e8:0b:f6:aa:40:31:d0:33:
         66:c5:71:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----