Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/SUwSO2Fs2FjhvtnhOTiiq1oGzWM.roa
File:                     SUwSO2Fs2FjhvtnhOTiiq1oGzWM.roa (raw, json)
Hash identifier:          olDxnIOko1Itz17Pa+h1ZPnFbbCInWHBCOkMHLf/KiI=
Subject key identifier:   49:4C:12:3B:61:6C:D8:58:E1:BE:D9:E1:39:38:A2:AB:5A:06:CD:63
Certificate issuer:       /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial:       01953BC41C01F70A052654DE1AF9A395449B
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/SUwSO2Fs2FjhvtnhOTiiq1oGzWM.roa
Signing time:             Tue 25 Feb 2025 06:21:02 +0000
ROA not before:           Tue 25 Feb 2025 06:21:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203092
IP address blocks:        185.218.24.0/22 maxlen: 24
                          2a0b:d040::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:3b:c4:1c:01:f7:0a:05:26:54:de:1a:f9:a3:95:44:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
        Validity
            Not Before: Feb 25 06:21:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=494c123b616cd858e1bed9e13938a2ab5a06cd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f8:9a:7a:a3:7f:b4:8d:b9:77:55:1d:f7:5d:
                    de:80:55:05:2c:74:eb:82:c3:3c:9e:04:05:8f:7a:
                    1d:4b:36:fa:a7:c7:19:e2:2c:6f:09:4e:f8:88:7f:
                    78:48:04:9e:52:51:72:68:90:bd:ca:f5:9d:21:71:
                    54:ec:0d:cb:75:9c:14:d1:0f:3b:31:c7:b9:19:47:
                    ec:18:24:a7:80:89:ab:32:21:83:14:8f:ba:9f:26:
                    ee:41:f4:0b:5e:b1:dd:68:f9:49:3e:11:42:92:2f:
                    1d:95:20:d4:33:a9:30:3f:e2:0e:e6:4a:ee:bb:20:
                    25:e7:1e:ff:76:90:c0:49:be:d1:1a:94:8c:b6:b4:
                    8b:28:24:4c:ca:d7:2f:2b:ac:50:17:0a:db:94:09:
                    e8:0d:52:12:8a:a0:f0:2c:5e:d9:4e:3d:c3:67:5c:
                    99:81:f4:d0:fd:c6:35:69:14:93:0b:c7:75:9a:a6:
                    18:ac:56:26:b0:ed:c6:e7:b8:8a:39:ed:db:80:d7:
                    b8:2d:a3:3b:2e:8b:5c:12:2f:17:2c:4d:d1:c8:69:
                    fc:76:95:e4:85:0d:3c:9d:5a:60:09:b4:84:d6:75:
                    99:22:b4:a4:bc:97:67:a0:1f:17:14:3a:53:8e:72:
                    c8:33:93:63:92:d6:b1:51:5f:6a:c5:bb:3f:25:d2:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4C:12:3B:61:6C:D8:58:E1:BE:D9:E1:39:38:A2:AB:5A:06:CD:63
            X509v3 Authority Key Identifier:
                keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/SUwSO2Fs2FjhvtnhOTiiq1oGzWM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.24.0/22
                IPv6:
                  2a0b:d040::/29

    Signature Algorithm: sha256WithRSAEncryption
         8a:3c:2b:ae:e0:8f:92:88:a7:25:88:65:ca:49:f9:8e:d7:9f:
         2f:14:14:30:32:6e:b7:e0:a0:12:8a:6c:49:ca:5f:bc:52:da:
         ad:02:54:4a:f5:e0:a7:a5:4b:ed:4f:9b:b6:93:a1:61:be:65:
         65:c1:2c:b9:91:a7:69:8f:17:a4:31:1b:22:6f:75:c0:96:31:
         fe:59:9f:ce:90:55:8b:f8:8b:cc:d1:ec:3f:24:bf:9f:4f:87:
         5f:45:bd:2e:b8:e9:28:d0:f6:d6:b1:d1:08:8d:a4:74:d8:3e:
         20:3a:22:5d:ea:7b:20:61:f1:54:7f:80:83:39:3a:26:aa:bf:
         21:60:9a:b4:81:aa:78:ce:4b:26:18:c7:74:dc:c2:55:db:22:
         68:5d:24:dd:1b:74:de:d7:c0:76:9a:d2:cc:64:aa:fd:e7:3b:
         aa:4b:5a:ad:77:3f:94:f4:2f:be:6b:44:4b:1e:08:26:f3:1a:
         46:43:5a:c1:8f:69:c5:43:25:f5:00:a2:0f:3a:a2:cc:d5:90:
         44:21:29:da:a5:dc:1b:32:b1:30:ed:3b:85:81:59:17:51:fa:
         fe:af:e2:8d:16:87:0f:76:cf:3e:d0:cd:c6:58:16:86:ee:7c:
         ea:07:86:f6:bc:eb:10:b0:0c:2a:fd:fc:3a:a5:46:ca:96:7d:
         77:fd:d0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----