Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/ur3dSSpuEwtDhi5m-xYjQ9J-ZlQ.roa
File:                     ur3dSSpuEwtDhi5m-xYjQ9J-ZlQ.roa (raw, json)
Hash identifier:          cwXAi1sfFPfN04wsw1nczJfstzqjCt7igbtZqfyu1Oc=
Subject key identifier:   BA:BD:DD:49:2A:6E:13:0B:43:86:2E:66:FB:16:23:43:D2:7E:66:54
Certificate issuer:       /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial:       01942825EB83998A7CB2EE58F3ABC2E6C4A6
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/ur3dSSpuEwtDhi5m-xYjQ9J-ZlQ.roa
Signing time:             Thu 02 Jan 2025 17:52:41 +0000
ROA not before:           Thu 02 Jan 2025 17:52:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204030
IP address blocks:        185.116.80.0/22 maxlen: 22
                          2a06:7c80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:eb:83:99:8a:7c:b2:ee:58:f3:ab:c2:e6:c4:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
        Validity
            Not Before: Jan  2 17:52:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=babddd492a6e130b43862e66fb162343d27e6654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:21:d3:db:4a:be:54:76:08:7e:be:68:e0:
                    41:0b:ad:4f:1f:03:f0:51:1a:d3:01:77:9a:f4:7a:
                    cd:2b:d7:07:22:16:8d:f2:e1:f1:17:a6:a6:d1:38:
                    9b:21:38:85:fe:80:7e:56:27:cd:11:10:b8:0f:a7:
                    db:a6:5a:e4:64:25:cb:15:4d:fd:32:9e:9c:17:0d:
                    7f:4c:87:04:1e:63:06:b6:82:2a:b6:3a:e1:e2:27:
                    3d:82:41:40:97:51:09:9c:b3:e5:c2:66:ec:31:b2:
                    31:01:ec:fa:dd:77:56:8c:0c:8d:da:fb:d6:26:d7:
                    7c:98:9d:3d:86:a3:22:5c:e3:99:02:c1:e4:90:32:
                    6d:70:af:9d:de:8f:c0:2f:7b:09:6e:dc:6b:1f:cc:
                    2b:47:82:cb:6a:ac:6a:06:6c:be:a9:41:f1:64:c2:
                    01:1d:c9:b0:dd:f3:84:a3:f9:5e:66:ce:54:4e:b0:
                    c4:b8:90:43:c5:85:e2:73:d9:bb:d4:eb:c2:4f:21:
                    df:5e:63:bf:90:3c:2d:d2:bd:45:e6:63:13:2d:35:
                    df:1d:52:6a:ef:15:64:fb:50:78:4b:ec:37:8d:b5:
                    70:61:08:10:10:0d:50:72:46:b4:3f:9b:0b:5d:e8:
                    33:ed:1a:2e:9e:24:6f:6b:fb:1e:c8:5c:7d:25:27:
                    ba:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BD:DD:49:2A:6E:13:0B:43:86:2E:66:FB:16:23:43:D2:7E:66:54
            X509v3 Authority Key Identifier:
                keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/ur3dSSpuEwtDhi5m-xYjQ9J-ZlQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.116.80.0/22
                IPv6:
                  2a06:7c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         5b:7c:3b:b7:63:6a:47:ad:35:3f:65:c5:7b:d2:89:b3:b1:ab:
         0c:4c:01:30:25:d1:2b:de:a8:df:de:0b:77:5a:a7:1d:56:db:
         79:8d:04:8d:d5:9a:df:99:cd:fd:29:3f:bd:09:26:4f:06:87:
         31:21:b1:f7:23:3a:75:02:09:37:ba:28:5e:29:bb:b5:8f:30:
         47:82:f5:97:a2:a8:9b:c9:60:db:70:4e:9d:5f:d7:1f:bf:d5:
         18:43:f1:0a:b6:c9:fc:9b:ca:7e:40:84:de:94:e6:1c:ac:a9:
         3f:c5:9c:39:06:42:5b:a7:66:fb:7e:b5:04:af:a4:f3:a5:27:
         ec:e9:08:b5:55:4b:9c:f9:c6:93:e8:e4:4b:8f:fa:b2:b8:06:
         35:34:25:7a:6a:73:cb:3f:1d:91:48:67:f6:91:a1:36:60:8f:
         7c:c9:40:38:37:29:09:d1:9b:a0:de:e1:d3:c7:f4:73:b3:bb:
         21:fb:f8:25:eb:e5:01:c9:12:5f:d5:14:d3:01:6d:d1:85:a6:
         13:3d:6f:ee:47:0b:da:20:43:b9:b4:6e:1d:38:f7:1a:03:38:
         b2:db:d5:20:5b:8c:32:22:9e:14:af:fe:50:08:96:4d:e6:78:
         dd:e9:dc:e9:39:16:84:b7:49:07:7a:66:d9:cc:4a:12:76:0c:
         aa:3e:16:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----