Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/3rD9StsheQJ2jCCVmyxVVyxpBjE.roa
File:                     3rD9StsheQJ2jCCVmyxVVyxpBjE.roa (raw, json)
Hash identifier:          GzfI8HFdBgSfemP2c5Gqo1niPoqxRYIEhQjVPM2DMmU=
Subject key identifier:   DE:B0:FD:4A:DB:21:79:02:76:8C:20:95:9B:2C:55:57:2C:69:06:31
Certificate issuer:       /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial:       0194221FBD254620D85D449A02E3602B92A8
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/3rD9StsheQJ2jCCVmyxVVyxpBjE.roa
Signing time:             Wed 01 Jan 2025 13:48:12 +0000
ROA not before:           Wed 01 Jan 2025 13:48:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6714
IP address blocks:        78.133.220.0/22 maxlen: 22
                          2001:4190:8032::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:bd:25:46:20:d8:5d:44:9a:02:e3:60:2b:92:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
        Validity
            Not Before: Jan  1 13:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=deb0fd4adb217902768c20959b2c55572c690631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f4:38:17:87:1c:46:81:bb:47:e7:80:b3:8d:
                    7f:1c:1a:5a:de:53:0f:5a:44:b4:51:2e:ed:e6:46:
                    65:43:20:d9:3d:7b:f2:5c:38:7e:07:80:4f:88:b1:
                    2c:cc:c2:0a:b6:d0:87:48:dc:c9:30:7a:26:8c:fb:
                    fe:26:cb:a4:bd:9e:62:2d:9f:dd:54:ec:e1:ce:e2:
                    a2:c3:d3:65:7f:b6:1d:48:3d:89:6f:5d:38:2f:de:
                    e6:2a:b9:43:ac:ae:0d:ab:1c:b9:c9:15:4a:94:7d:
                    be:16:e9:ae:d9:b2:61:76:78:33:19:e1:54:2f:9f:
                    59:6a:d8:02:d4:be:5a:b6:d3:33:9e:bc:c8:9f:68:
                    d7:a3:76:aa:1d:3a:78:c8:fa:0b:82:2b:4e:33:37:
                    e9:c8:7c:f7:47:db:62:af:91:5f:8c:14:8c:2c:e0:
                    31:41:3b:78:1f:30:f3:f9:63:52:7e:93:08:d7:0f:
                    e8:8b:ad:7b:ee:8f:8b:af:99:44:c9:d5:e2:5c:8c:
                    1c:1f:40:da:d3:b7:ce:f4:c6:a8:19:72:d5:5e:d0:
                    33:fb:61:72:fa:d4:43:70:61:9f:e3:90:27:ac:c4:
                    3e:5f:11:3f:d0:65:7b:89:13:99:47:25:a4:83:1b:
                    f9:af:79:18:21:2d:a3:c2:94:89:ef:e4:f9:bb:4f:
                    1b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B0:FD:4A:DB:21:79:02:76:8C:20:95:9B:2C:55:57:2C:69:06:31
            X509v3 Authority Key Identifier:
                keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/3rD9StsheQJ2jCCVmyxVVyxpBjE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.133.220.0/22
                IPv6:
                  2001:4190:8032::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:9c:97:5c:7d:e6:85:95:a5:ef:e6:6d:e9:92:0d:38:3a:a4:
         c2:8d:8f:c0:e7:b1:23:84:e5:1b:74:77:34:ca:89:0a:e2:ed:
         c7:79:89:c4:66:c5:37:0c:ca:6c:c7:b1:36:c6:c9:c6:cd:e4:
         07:48:21:5c:cf:e4:d8:33:6c:f3:d2:d0:a3:4d:df:db:8e:79:
         23:36:b0:d2:b7:a9:01:a0:a7:f7:5f:d1:13:a6:45:52:a5:44:
         b1:c3:46:ac:cf:fa:71:b0:29:5a:c6:cf:31:db:72:94:3e:e3:
         c2:4c:1c:1f:be:dc:89:a1:26:f6:40:54:9a:09:2e:9b:3b:a3:
         61:46:e0:6a:f6:56:68:e9:f3:53:f7:9f:5d:df:5b:d7:10:da:
         a8:66:18:3c:43:38:3e:4d:9d:d4:64:54:43:e6:fa:a4:4d:15:
         5b:55:f5:a2:84:4a:36:2f:4f:13:54:db:09:de:b8:9e:87:43:
         83:fa:6a:53:04:ca:a2:99:31:fb:7e:7a:c5:c2:77:dd:bc:a9:
         01:78:fe:c2:4b:11:4d:65:37:31:6b:87:20:3c:9c:ed:1e:4a:
         e0:95:74:f3:86:8c:fd:bc:c5:bd:65:67:eb:40:47:5d:dd:41:
         a8:f7:be:0c:0c:ae:08:02:ad:10:a6:b9:95:8c:09:00:31:3d:
         32:79:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----