Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8hy51DhLgHU_3FUqbAqf12Tfh8g.roa
File:                     8hy51DhLgHU_3FUqbAqf12Tfh8g.roa (raw, json)
Hash identifier:          HN/LLZkUijRDRL+zW0iFO/3R0gfZkAdOh7rO4zopVVU=
Subject key identifier:   F2:1C:B9:D4:38:4B:80:75:3F:DC:55:2A:6C:0A:9F:D7:64:DF:87:C8
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019621485A7DB531659F198D8FF2FC71B303
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8hy51DhLgHU_3FUqbAqf12Tfh8g.roa
Signing time:             Thu 10 Apr 2025 19:58:32 +0000
ROA not before:           Thu 10 Apr 2025 19:58:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     395839
IP address blocks:        193.5.65.0/24 maxlen: 24
                          2a0f:3940::/29 maxlen: 29
                          2a0f:39c0::/29 maxlen: 29
                          2a0f:3d86:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:21:48:5a:7d:b5:31:65:9f:19:8d:8f:f2:fc:71:b3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Apr 10 19:58:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f21cb9d4384b80753fdc552a6c0a9fd764df87c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ee:74:6f:60:b3:81:ae:c3:ff:bc:7b:e8:c9:
                    99:b3:0d:04:26:60:59:d0:36:eb:76:d9:8f:47:e2:
                    88:42:48:42:3c:dd:30:4c:97:78:f3:2e:bc:9d:f4:
                    95:b1:79:e7:a1:cd:7d:d6:15:a6:58:74:c8:a0:99:
                    ef:50:eb:a8:5a:fc:ff:14:0a:05:65:d2:8a:52:8f:
                    b5:ca:6f:52:41:27:07:6c:06:67:ce:fd:f6:ee:03:
                    73:fb:a5:3e:de:ea:95:b1:d8:ce:61:20:fd:97:bf:
                    fe:98:e4:6d:79:73:32:c0:62:15:fd:46:f2:5f:4b:
                    b6:5d:28:ca:d4:68:f4:96:8e:99:ec:eb:2b:61:b6:
                    17:af:c9:ae:25:84:0b:96:56:60:3c:bc:a8:b8:28:
                    d1:ce:cd:c1:58:2f:a1:9e:8d:de:df:cd:65:56:c1:
                    9d:88:13:9f:a0:f3:37:3b:07:ab:c5:a1:bb:2a:bf:
                    0d:80:a9:42:53:98:71:2b:fa:e9:89:3d:c2:57:a0:
                    99:b7:eb:38:7c:16:74:eb:be:92:70:d8:71:81:5d:
                    00:e0:17:06:69:a8:e1:35:38:d1:e1:38:6f:17:48:
                    30:36:f4:26:79:bb:d6:01:86:56:94:0a:2a:95:18:
                    fc:78:85:81:45:f0:fb:69:79:89:c4:0b:00:af:e7:
                    c8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1C:B9:D4:38:4B:80:75:3F:DC:55:2A:6C:0A:9F:D7:64:DF:87:C8
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8hy51DhLgHU_3FUqbAqf12Tfh8g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.5.65.0/24
                IPv6:
                  2a0f:3940::/29
                  2a0f:39c0::/29
                  2a0f:3d86:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:c5:59:28:77:b7:1a:60:26:59:5d:2a:9d:5e:c3:3d:3b:89:
         97:30:05:81:8e:39:2d:82:59:66:af:3c:0e:ee:7a:1b:2a:77:
         15:9b:e2:a3:32:33:51:16:7b:3c:a2:b1:23:a0:02:27:d8:02:
         fb:a6:b3:83:3b:93:5e:e4:2b:68:29:81:ec:ca:bc:e9:0c:e4:
         57:3f:5b:54:01:41:7b:5c:dc:df:25:5f:dd:5e:a1:72:1d:84:
         87:07:fa:57:49:6e:7e:2a:19:69:07:90:6b:d6:cb:68:40:47:
         d2:1b:c6:d8:43:f0:5e:24:fd:77:91:9c:bd:6d:f7:ab:af:e2:
         e1:99:6e:ba:51:c0:b9:e6:d4:91:17:65:39:88:55:03:b8:c5:
         8c:77:3a:78:b9:b0:2a:5d:32:bc:41:fd:c2:2f:da:2d:53:43:
         47:78:0a:39:5e:56:05:b7:ce:72:c7:f2:4b:da:4d:72:fb:d0:
         7f:e8:c4:62:c8:10:6c:ce:f9:ad:3b:9d:ce:e8:c5:a6:58:54:
         3d:d9:7a:15:fd:21:bf:0f:f6:96:e3:8f:38:11:b9:0c:bf:d2:
         ec:ef:ab:39:35:1c:a1:34:79:de:ee:40:b0:70:b3:cc:16:01:
         7e:73:9a:08:78:50:b8:df:fc:05:a7:a7:69:cc:1c:9c:d1:a6:
         18:d1:01:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----