Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa
File:                     Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa (raw, json)
Hash identifier:          kLJ19pvLEfn+3aegz32dVtHoMMSBCouRhdwvdRrL0So=
Subject key identifier:   0B:3D:DF:69:5E:03:E2:63:D1:27:3A:CE:90:1B:B1:AD:00:DF:C6:45
Certificate issuer:       /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Certificate serial:       019421B2180B082262BFCCABA5FEA0CAAFCC
Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa
Signing time:             Wed 01 Jan 2025 11:48:27 +0000
ROA not before:           Wed 01 Jan 2025 11:48:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206549
IP address blocks:        185.181.224.0/22 maxlen: 22
                          2a0a:d480::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:18:0b:08:22:62:bf:cc:ab:a5:fe:a0:ca:af:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
        Validity
            Not Before: Jan  1 11:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0b3ddf695e03e263d1273ace901bb1ad00dfc645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ca:03:88:e7:3a:82:0b:36:22:63:a6:2d:29:
                    53:d2:05:f7:a6:7b:15:05:71:cf:a8:77:07:95:24:
                    2f:8e:a5:b2:24:ce:70:16:b9:09:90:28:f0:6f:35:
                    79:dd:e9:d6:b3:c3:5a:04:3a:f1:b7:4e:3e:a4:73:
                    bc:99:b6:0b:da:ea:20:84:4f:a1:88:60:66:f2:ca:
                    44:1e:49:75:6a:fc:2c:84:29:87:30:8f:b3:e1:8b:
                    f5:3e:22:fa:a4:50:5d:39:17:04:d2:db:6a:ec:6d:
                    70:63:27:ea:f4:0a:f7:e8:11:16:2d:c8:b9:5d:9d:
                    ae:7e:b8:db:13:07:e8:d4:88:38:78:a2:67:eb:11:
                    a6:c6:38:3b:b8:9a:ab:bb:ce:62:84:f6:8b:69:da:
                    52:39:c4:a8:c9:4c:9b:cf:19:a2:87:44:37:46:90:
                    64:29:c1:04:3a:33:02:4c:8c:c6:57:0f:de:ea:98:
                    78:5e:42:0c:49:73:78:89:6c:a6:33:12:89:8f:19:
                    ac:1f:45:bc:37:08:93:a6:7c:d9:46:a9:98:ce:5e:
                    2f:65:f0:68:5e:9b:6d:ac:4c:a6:84:71:36:7b:3b:
                    9c:fb:d6:88:e2:d7:20:a9:75:9c:df:d5:40:a8:20:
                    b2:84:f0:2d:93:64:ef:eb:bf:43:e4:ee:de:11:c8:
                    a1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3D:DF:69:5E:03:E2:63:D1:27:3A:CE:90:1B:B1:AD:00:DF:C6:45
            X509v3 Authority Key Identifier:
                keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.181.224.0/22
                IPv6:
                  2a0a:d480::/29

    Signature Algorithm: sha256WithRSAEncryption
         71:9a:8b:cc:3e:78:7b:4a:ad:20:91:00:ff:1a:77:60:7f:1b:
         c5:a5:f3:c5:ac:06:4f:7a:f5:c6:c0:62:5b:51:a5:4b:82:86:
         99:35:b8:ca:fc:77:e8:1b:d9:4b:19:2a:2d:b6:4e:6b:40:f2:
         45:b8:3e:cd:c9:94:1e:e9:5f:8a:b7:1c:c8:4a:1f:b3:c4:72:
         32:ba:fb:62:58:c8:e0:19:08:18:c1:13:83:d9:74:d8:92:9b:
         6c:b5:a6:24:35:ec:32:2b:3c:71:e7:84:cd:20:33:a0:ab:47:
         b1:bd:5e:71:e1:e3:a8:79:65:e8:d4:50:0c:87:2f:f5:e4:1b:
         45:01:7a:9f:5a:d9:56:9f:c1:ef:02:d0:75:c5:a8:2b:b1:91:
         57:be:87:88:8c:50:e9:e1:39:09:03:d3:b1:ed:f1:55:c7:f6:
         6a:39:b3:af:43:d7:a1:ce:61:fb:5a:df:d3:17:22:74:ba:c7:
         15:ed:59:38:34:a7:b6:49:ba:13:7d:00:78:11:22:8a:4b:ed:
         e3:48:ac:06:22:4f:84:43:4b:b6:e5:c7:01:9a:bb:9e:45:74:
         7b:6f:24:f3:55:81:46:ff:1f:ec:d2:2d:1f:29:cd:c0:3b:ce:
         68:b6:3a:c5:e9:e0:2c:ef:2c:78:c6:c5:43:84:f9:06:06:bc:
         aa:f4:6c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----