Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/Uyg4_Ozw9Ipj9uu784y9KAfEr7A.roa
File:                     Uyg4_Ozw9Ipj9uu784y9KAfEr7A.roa (raw, json)
Hash identifier:          PWFMCOTkx94rFl6c7QVt2h1VgycYcWOsnSvIAK4MJo0=
Subject key identifier:   53:28:38:FC:EC:F0:F4:8A:63:F6:EB:BB:F3:8C:BD:28:07:C4:AF:B0
Certificate issuer:       /CN=22423839f210721627641ae6b6cceacee8d9067b
Certificate serial:       019425FD37DA376E0C59729BD9D2E6FADC16
Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/Uyg4_Ozw9Ipj9uu784y9KAfEr7A.roa
Signing time:             Thu 02 Jan 2025 07:48:59 +0000
ROA not before:           Thu 02 Jan 2025 07:48:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202179
IP address blocks:        185.50.180.0/22 maxlen: 24
                          2a01:a960::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:37:da:37:6e:0c:59:72:9b:d9:d2:e6:fa:dc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b
        Validity
            Not Before: Jan  2 07:48:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=532838fcecf0f48a63f6ebbbf38cbd2807c4afb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:ff:ea:e5:f1:76:88:c8:9c:be:ba:50:07:
                    79:30:26:02:cd:5d:3a:2c:03:89:9f:ad:92:82:92:
                    69:68:53:ee:dd:42:9f:52:01:4f:82:2d:cd:9f:df:
                    11:54:01:b1:a3:47:17:25:3b:4a:dd:77:1e:b1:28:
                    c5:f6:1f:95:d2:c6:4e:1b:27:cd:91:8b:1f:d8:51:
                    56:ce:7d:1b:8a:22:75:71:d5:1d:a6:91:4e:1f:76:
                    03:3a:7c:ef:6e:6b:5d:56:f4:4f:0e:a1:ec:6b:bb:
                    d2:af:eb:d5:79:1d:6b:03:b8:3b:f1:2a:45:8f:13:
                    81:32:e2:09:5b:d9:62:f1:16:a8:98:a9:2c:c1:3a:
                    eb:e7:30:05:52:52:56:f1:40:0a:19:e8:bc:d5:14:
                    d1:61:fc:e2:af:97:ed:64:c1:be:ad:04:07:d4:f5:
                    36:99:b8:c0:40:e3:8d:e4:b1:00:1f:77:ac:42:ea:
                    46:75:89:a8:9f:c3:7a:18:6a:1d:81:af:88:ac:19:
                    39:03:80:34:0e:97:5c:ee:c7:ac:9b:23:0d:3d:9f:
                    a0:94:0f:1b:5d:aa:12:dd:1b:03:b4:de:80:d1:f0:
                    93:1d:e1:19:07:bb:e6:54:7d:11:3a:48:d9:99:c4:
                    e9:a7:70:a9:a3:21:bf:3b:9d:30:38:69:ec:cd:e8:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:28:38:FC:EC:F0:F4:8A:63:F6:EB:BB:F3:8C:BD:28:07:C4:AF:B0
            X509v3 Authority Key Identifier:
                keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/Uyg4_Ozw9Ipj9uu784y9KAfEr7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.50.180.0/22
                IPv6:
                  2a01:a960::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:d8:55:79:f7:91:8f:5f:d5:8e:84:44:5b:c5:44:3d:98:9a:
         af:d0:40:63:e0:7d:d5:68:6f:4d:93:44:a3:d3:b8:2a:0a:70:
         83:9b:30:d4:2c:70:6f:7c:f8:a7:40:64:21:4a:ab:45:5c:5c:
         92:a7:f0:36:25:40:f3:9b:f2:a8:0f:30:75:ba:30:7b:41:d3:
         30:9b:84:bb:04:29:16:83:69:1d:6f:e0:50:4f:52:13:21:44:
         a9:d9:b8:e6:73:ce:95:6c:b2:82:b8:ea:56:a1:ea:72:89:d9:
         45:4e:54:13:ca:3d:76:2e:e2:f9:c1:12:c9:cb:32:eb:23:fe:
         7d:ef:49:69:32:42:d2:c0:ff:a8:42:d5:db:1e:2d:8d:3a:43:
         16:5a:e5:3c:7a:7e:ba:0c:8f:f2:81:01:fd:b6:8e:2e:7e:a5:
         95:eb:a6:10:e5:e7:4d:78:cb:f5:50:09:34:0f:14:be:27:20:
         4c:d1:67:86:77:f1:6e:9c:12:73:f5:56:51:2c:29:fa:6e:19:
         52:35:1b:b9:0f:33:e1:33:7a:75:a9:e4:62:bf:91:c1:e3:c3:
         eb:07:09:93:c5:59:1a:ca:43:b4:38:76:f8:7f:90:9e:3d:2c:
         a9:a8:66:e4:a4:05:80:02:5c:98:de:28:ad:0e:cc:19:24:ea:
         cb:0c:74:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----