Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/_ct2jrxg6RKH3wrlYOdA7gv_y28.roa
File:                     _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (raw, json)
Hash identifier:          KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=
Subject key identifier:   FD:CB:76:8E:BC:60:E9:12:87:DF:0A:E5:60:E7:40:EE:0B:FF:CB:6F
Certificate issuer:       /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial:       01942747DE3654026FD855E66EC8F092D8A2
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/_ct2jrxg6RKH3wrlYOdA7gv_y28.roa
Signing time:             Thu 02 Jan 2025 13:50:08 +0000
ROA not before:           Thu 02 Jan 2025 13:50:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198722
IP address blocks:        212.18.110.0/24 maxlen: 24
                          2a12:8400::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:de:36:54:02:6f:d8:55:e6:6e:c8:f0:92:d8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
        Validity
            Not Before: Jan  2 13:50:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fdcb768ebc60e91287df0ae560e740ee0bffcb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:34:30:f8:13:74:4e:b4:ac:3d:ff:96:1c:
                    5a:90:76:87:b2:4d:4c:b6:0a:66:8f:8e:86:be:29:
                    c3:87:a2:f7:72:45:c0:9b:80:af:f6:a3:c4:8e:c5:
                    4c:0b:15:12:aa:50:38:ca:62:e7:4e:22:02:e1:9c:
                    b4:2b:1b:31:84:fc:8c:74:24:fb:ef:80:58:c8:a6:
                    ba:bf:f1:e5:db:bf:67:46:b9:44:ad:55:d4:94:08:
                    ea:48:94:cf:77:88:66:10:e6:cb:c9:dc:99:b7:39:
                    c4:a3:08:1f:55:7b:46:7a:da:db:41:35:e2:24:a6:
                    35:08:d9:f7:e8:4c:5d:3c:48:f1:62:f6:43:3f:ab:
                    18:e0:fb:9c:c1:c7:47:94:b6:d8:d1:79:6c:fd:5e:
                    42:cf:7e:98:57:39:a5:be:bf:2e:3e:3b:01:86:6e:
                    af:1f:77:db:ad:02:3f:81:27:0d:45:d4:58:f9:a8:
                    2d:31:92:6b:02:d2:cf:b0:64:a6:55:ed:aa:89:ca:
                    8e:82:dc:f1:a9:7c:7f:80:70:70:10:83:10:41:23:
                    4c:c0:2b:af:39:bc:2a:22:ae:5a:2c:db:50:a7:9a:
                    62:16:0b:20:5d:9a:f1:14:39:3e:ce:24:8b:ed:48:
                    44:16:b1:b5:f0:6b:b0:46:07:b3:26:a9:62:09:65:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CB:76:8E:BC:60:E9:12:87:DF:0A:E5:60:E7:40:EE:0B:FF:CB:6F
            X509v3 Authority Key Identifier:
                keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/_ct2jrxg6RKH3wrlYOdA7gv_y28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.110.0/24
                IPv6:
                  2a12:8400::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:d1:ba:de:22:52:56:f8:eb:ad:6c:73:ea:1d:13:b8:24:26:
         f8:dc:73:91:ee:f1:dd:2c:a3:42:3a:36:64:a9:41:14:9c:bb:
         a4:b2:3c:92:cc:54:9b:1f:f6:eb:1d:43:c9:85:cf:53:dc:bd:
         53:c4:95:eb:ce:9f:7e:af:1d:b7:6a:67:80:49:bb:a0:b6:2b:
         8a:a7:ad:6c:87:59:34:6b:6f:21:96:e0:31:da:ec:a2:31:77:
         9e:ae:40:57:f6:fb:32:ed:6f:d0:24:99:66:de:7a:8d:01:e0:
         63:22:ab:dc:8c:ea:49:b5:21:ce:2d:83:0f:00:8d:09:ee:e5:
         4a:44:dd:41:15:11:d5:c7:62:e9:7e:35:25:85:0b:e1:49:89:
         f6:69:85:36:77:21:d4:3f:9a:88:a4:2d:d7:63:04:e2:a9:c5:
         e0:72:6d:c7:c8:8e:58:9a:a6:28:a4:95:70:ff:65:db:43:7f:
         c4:91:74:79:33:93:96:8f:ad:42:cb:a3:90:b1:15:cc:cc:25:
         e4:35:c3:79:1a:f9:b4:16:ad:19:c6:7b:3f:f5:48:e8:49:46:
         39:a1:62:bf:ee:92:2d:08:a3:7b:59:25:59:24:bb:db:e1:2e:
         77:4f:98:99:5e:88:c2:f1:00:c0:de:c8:94:0f:31:72:b8:aa:
         e5:17:ef:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----