Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/FxFAHCh-xR5SmE47a0ARTd4GkRw.roa
File:                     FxFAHCh-xR5SmE47a0ARTd4GkRw.roa (raw, json)
Hash identifier:          slz/fDlVOpfItIULaAZ74wfhbWz9EKShd3tsnurJfb0=
Subject key identifier:   17:11:40:1C:28:7E:C5:1E:52:98:4E:3B:6B:40:11:4D:DE:06:91:1C
Certificate issuer:       /CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5
Certificate serial:       019424B290457E009F38300948F4C5ED669F
Authority key identifier: B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/FxFAHCh-xR5SmE47a0ARTd4GkRw.roa
Signing time:             Thu 02 Jan 2025 01:47:49 +0000
ROA not before:           Thu 02 Jan 2025 01:47:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     47473
IP address blocks:        93.186.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:90:45:7e:00:9f:38:30:09:48:f4:c5:ed:66:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5
        Validity
            Not Before: Jan  2 01:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1711401c287ec51e52984e3b6b40114dde06911c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cc:cc:43:ee:0c:c7:a6:ce:8d:64:4e:35:8a:
                    b3:85:a6:0e:2b:cf:9f:74:ce:73:7c:e6:ec:2a:b8:
                    45:9f:6a:5a:1c:5d:b3:0c:11:fe:46:c9:9d:e3:7e:
                    ea:48:bd:b7:9d:cb:f0:c9:94:3d:5b:e5:53:4a:25:
                    93:30:4c:5f:aa:a5:03:95:44:2e:da:0d:62:11:20:
                    65:ac:c3:87:ab:f4:8c:af:59:dc:29:d3:bf:4a:10:
                    e6:ff:6e:30:98:57:1e:93:7e:07:b2:78:3a:a1:21:
                    62:6d:68:b4:03:69:9d:6c:4c:00:94:02:6f:42:0d:
                    ae:e7:0e:89:5e:d2:0d:f6:20:ab:83:9d:39:37:6e:
                    14:ee:ce:e3:cb:a7:d1:2a:9d:6b:78:73:1b:41:32:
                    c2:68:52:a6:18:34:50:db:d3:d3:59:d9:3a:bf:78:
                    3b:b3:43:c8:c2:21:1f:bf:8f:6a:f0:6c:ad:8c:94:
                    ff:2c:60:ef:f8:a4:65:bd:2c:39:3c:20:3d:96:16:
                    70:fe:6f:f8:71:35:6e:27:92:f4:b7:e1:44:e3:94:
                    d6:8f:92:f9:8b:82:e8:86:7c:16:87:99:35:2a:d8:
                    62:a9:92:21:e7:8b:f6:3c:31:8f:a2:b0:4f:f1:32:
                    67:6a:7a:f6:91:d5:ec:0e:b6:74:2e:d9:9e:77:66:
                    bc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:11:40:1C:28:7E:C5:1E:52:98:4E:3B:6B:40:11:4D:DE:06:91:1C
            X509v3 Authority Key Identifier:
                keyid:B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/FxFAHCh-xR5SmE47a0ARTd4GkRw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.186.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:2a:d3:70:cf:27:58:22:a2:35:69:52:96:32:42:69:04:41:
         4d:a3:c1:57:c1:4e:3c:71:a3:92:15:a6:c3:38:b6:3d:bc:9e:
         07:79:82:5f:9e:b0:88:ad:2c:a4:28:a8:50:08:5c:7e:2f:cc:
         01:3f:29:7a:c9:6f:51:a3:db:21:10:6e:a6:01:76:69:25:7c:
         12:b7:6c:86:e7:07:ba:6b:ba:b6:a3:1d:b9:d6:3a:d0:b7:8a:
         49:23:ba:52:58:0f:7d:d9:e0:cb:34:58:d7:0e:25:20:6d:b7:
         eb:db:ea:96:e6:a0:57:ed:5f:48:ad:e1:e1:85:b7:b1:1e:58:
         a1:3c:ca:7b:b7:9b:7e:04:37:b7:30:05:97:49:a0:bc:e0:14:
         0b:4f:14:e4:34:e6:00:52:bc:5f:94:4e:18:55:13:99:e2:ce:
         a5:d4:0c:1b:fd:a1:7a:95:d8:bb:55:70:6c:3e:01:fb:c5:11:
         64:3a:c8:a5:fe:df:3c:86:81:f7:62:15:ad:2e:a0:a5:6c:37:
         e8:ce:f2:a3:34:79:eb:df:31:cc:3e:99:bc:d6:31:2b:5e:45:
         ae:c6:ee:84:c0:4c:56:28:b6:73:c0:4d:0d:96:93:bf:74:b5:
         9d:aa:74:1a:34:d4:57:f5:82:4c:fe:98:06:3a:e1:f1:80:c0:
         1d:99:93:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----