Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/SNV_1VpgwAmnXneSKWb5jRq8ToE.roa
File:                     SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (raw, json)
Hash identifier:          WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=
Subject key identifier:   48:D5:7F:D5:5A:60:C0:09:A7:5E:77:92:29:66:F9:8D:1A:BC:4E:81
Certificate issuer:       /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial:       019424B320F419AC0754F72247C273FF6115
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/SNV_1VpgwAmnXneSKWb5jRq8ToE.roa
Signing time:             Thu 02 Jan 2025 01:48:26 +0000
ROA not before:           Thu 02 Jan 2025 01:48:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203201
IP address blocks:        147.78.184.0/22 maxlen: 22
                          2a09:840::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:20:f4:19:ac:07:54:f7:22:47:c2:73:ff:61:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
        Validity
            Not Before: Jan  2 01:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=48d57fd55a60c009a75e77922966f98d1abc4e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:a3:df:a9:51:86:39:17:e4:7d:a2:84:52:
                    2a:30:50:57:cb:d7:b4:f3:36:69:c5:3d:00:6c:49:
                    65:6c:b4:9e:1f:46:d1:09:2d:15:ee:cf:f7:38:62:
                    78:07:e9:f1:46:1d:94:f4:85:14:3f:6f:4a:f0:8f:
                    61:b3:a0:41:d9:47:99:94:56:93:4b:8b:6c:de:11:
                    0a:83:37:15:a1:57:b8:f6:41:b8:e4:38:1b:5d:d5:
                    4d:06:7c:06:37:4f:75:be:e7:ad:91:91:de:2d:3c:
                    bb:90:df:c2:55:03:8b:c5:ee:64:45:27:df:5b:b6:
                    6f:27:c6:8a:2e:c9:2c:4f:fb:a8:29:48:e9:fd:88:
                    60:c9:1c:ac:9b:e1:87:c4:f8:24:b1:a1:30:4b:0f:
                    20:2a:74:a8:bf:27:60:27:a1:02:a5:56:bb:f6:68:
                    20:08:4f:34:13:2f:7c:89:3d:3a:98:1d:3d:c1:11:
                    24:f3:68:8f:3c:50:ed:72:94:ca:52:90:72:66:ca:
                    68:b8:a7:b3:35:b8:c5:0c:80:32:4a:7d:89:4f:1b:
                    d7:00:02:d5:b2:85:23:bd:ab:8e:d5:01:4d:20:c2:
                    1c:c3:a3:4b:cc:44:16:f1:2e:43:af:8d:3e:e6:1b:
                    6f:3d:6a:74:54:c0:15:91:a6:10:28:e7:03:98:1e:
                    ed:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D5:7F:D5:5A:60:C0:09:A7:5E:77:92:29:66:F9:8D:1A:BC:4E:81
            X509v3 Authority Key Identifier:
                keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/SNV_1VpgwAmnXneSKWb5jRq8ToE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.184.0/22
                IPv6:
                  2a09:840::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:9d:f8:59:e5:28:b2:d7:c6:13:49:b0:63:32:f5:2b:6c:80:
         75:91:d5:18:d3:d4:6d:26:2d:7f:49:4d:f7:1a:34:50:ef:23:
         5f:d1:e6:d2:42:09:54:88:8c:05:78:3d:50:31:2b:dc:64:55:
         bd:99:5e:17:38:66:84:33:35:10:f5:46:f5:76:80:15:f4:af:
         bb:6c:ac:79:3e:24:f3:7c:f8:2b:45:16:ff:45:7f:5b:b5:75:
         7d:85:3f:32:38:0e:3d:68:ac:98:be:d1:1e:47:e9:77:42:24:
         6f:1b:f5:7a:a1:bb:f2:9b:c0:e6:1b:74:bf:47:41:22:9a:b4:
         eb:72:c9:6b:31:3d:4b:5d:5d:2e:11:b6:44:88:63:07:32:09:
         fa:84:78:86:ea:02:3d:88:c6:81:cd:58:6c:ed:a3:8c:43:ea:
         60:ec:dc:5c:ed:5a:27:7f:6d:24:8b:e4:0f:c4:4d:fa:29:e3:
         58:e6:99:1c:04:bf:72:81:11:4a:f1:98:9a:62:05:bf:2d:40:
         c9:27:8e:4b:ec:2a:4b:3b:fa:96:8e:80:d0:f3:a7:60:76:e4:
         24:b7:c2:5b:5a:27:0f:2b:a3:0a:d6:4a:77:2c:d9:be:1a:f9:
         5f:f4:b7:3c:5a:8e:99:52:f2:5c:3d:b0:11:31:67:ff:9a:ce:
         58:a6:c2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----