Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/OgYJc9A280CynujJhuzMa0BI-4Q.roa
File:                     OgYJc9A280CynujJhuzMa0BI-4Q.roa (raw, json)
Hash identifier:          MiNQpI1WP7M4DChXTEl99hg+v/DrVYZq8o6Yc8vjTOw=
Subject key identifier:   3A:06:09:73:D0:36:F3:40:B2:9E:E8:C9:86:EC:CC:6B:40:48:FB:84
Certificate issuer:       /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial:       019425FC97842D660A8DC5D9D0F3FF2E4443
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/OgYJc9A280CynujJhuzMa0BI-4Q.roa
Signing time:             Thu 02 Jan 2025 07:48:18 +0000
ROA not before:           Thu 02 Jan 2025 07:48:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197731
IP address blocks:        31.3.104.0/21 maxlen: 21
                          31.3.104.0/24 maxlen: 24
                          31.3.105.0/24 maxlen: 24
                          31.3.106.0/24 maxlen: 24
                          31.3.107.0/24 maxlen: 24
                          31.3.108.0/24 maxlen: 24
                          31.3.109.0/24 maxlen: 24
                          31.3.110.0/24 maxlen: 24
                          31.3.111.0/24 maxlen: 24
                          185.119.28.0/22 maxlen: 22
                          185.119.28.0/24 maxlen: 24
                          185.119.29.0/24 maxlen: 24
                          185.119.30.0/24 maxlen: 24
                          185.119.31.0/24 maxlen: 24
                          2a03:7900::/32 maxlen: 32
                          2a03:7900:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:97:84:2d:66:0a:8d:c5:d9:d0:f3:ff:2e:44:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
        Validity
            Not Before: Jan  2 07:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3a060973d036f340b29ee8c986eccc6b4048fb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:36:33:36:76:5b:bb:3c:5e:2a:da:7c:fb:
                    33:1b:01:f4:a8:cb:19:f0:62:72:55:42:0f:a2:47:
                    a7:b9:2c:9d:be:67:74:57:9b:ee:02:fe:6d:17:07:
                    96:3f:e5:42:0d:b2:4f:2a:41:a9:af:fb:40:b5:a2:
                    b7:5b:02:56:8a:a6:61:a8:0c:cd:e7:8a:38:e8:8b:
                    2a:be:b0:05:ae:40:87:8c:43:2d:e3:5f:3d:91:46:
                    b3:27:de:06:c2:f5:55:a7:cf:72:d4:48:72:ef:55:
                    4e:e4:d9:2f:90:d8:0e:f6:47:ed:6a:a3:1b:ec:cc:
                    bf:64:be:10:1c:0a:da:20:a7:e2:6b:df:e0:87:14:
                    d9:43:5f:e9:83:18:19:33:ea:6a:18:e4:c0:86:8e:
                    22:f9:95:40:f8:d3:65:e8:3d:9d:40:7e:45:06:d2:
                    f8:cb:db:43:fc:ae:7f:eb:7e:11:0f:24:97:27:e2:
                    ab:62:e7:51:e4:b3:f3:b4:c3:1b:cc:46:ab:be:0f:
                    40:2c:38:11:bc:c1:9f:a3:63:3b:f8:b6:66:6a:d1:
                    28:a1:7c:23:6c:2f:dc:47:9c:a5:f4:ca:02:bf:d3:
                    0d:83:32:9d:36:3c:17:3c:48:e2:de:9d:f5:7f:62:
                    9c:7e:41:b8:c4:d9:be:29:c2:30:c6:34:7f:23:6f:
                    28:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:06:09:73:D0:36:F3:40:B2:9E:E8:C9:86:EC:CC:6B:40:48:FB:84
            X509v3 Authority Key Identifier:
                keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/OgYJc9A280CynujJhuzMa0BI-4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.3.104.0/21
                  185.119.28.0/22
                IPv6:
                  2a03:7900::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:97:6b:34:b2:b1:50:9e:87:5a:75:5c:f1:60:36:98:15:ad:
         0f:26:8e:1a:d9:fd:01:85:2b:9a:b7:5d:36:03:dc:50:d9:54:
         72:0f:66:72:6d:31:f1:7d:80:e3:dd:78:7c:b4:08:7c:62:84:
         77:f2:b6:70:a2:67:23:73:1e:8a:0e:94:61:5e:a6:45:89:55:
         1b:97:f2:cb:f8:ea:84:e5:2e:9c:69:ea:5d:e5:d8:23:94:3d:
         07:36:8c:ec:d9:24:11:69:46:c5:fe:e0:a6:98:20:b9:82:f6:
         c2:a2:13:8d:a8:7f:11:b1:b0:44:d5:4b:e3:da:fc:29:69:c5:
         23:ab:91:fc:ae:09:94:6f:01:48:c1:bd:54:c2:75:be:8e:9b:
         80:61:03:82:9d:54:39:70:2e:cb:07:51:03:95:71:a2:94:a8:
         4d:9a:19:9d:59:a0:75:04:3d:77:f9:45:cb:a7:b9:ed:97:29:
         84:d1:ea:6a:e7:ff:12:1f:5e:af:68:1f:9f:55:14:5e:eb:74:
         db:f5:3c:7b:32:12:b5:28:c1:b3:e5:20:e9:bd:b1:0b:c5:0e:
         e8:e7:1c:c0:70:ae:3d:36:e4:fd:0d:13:de:cc:d1:80:9f:82:
         07:e4:94:16:90:1e:c5:59:e8:ce:33:1a:5f:e9:6a:e0:4b:e1:
         c3:d7:89:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----