Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa
File:                     EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (raw, json)
Hash identifier:          DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=
Subject key identifier:   11:4D:8E:F8:67:74:05:5E:F5:DC:40:1D:16:81:89:B8:63:27:2E:04
Certificate issuer:       /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial:       019423690604F25A8EE1CA518127EC0BB21D
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa
Signing time:             Wed 01 Jan 2025 19:47:52 +0000
ROA not before:           Wed 01 Jan 2025 19:47:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39771
IP address blocks:        153.112.232.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:06:04:f2:5a:8e:e1:ca:51:81:27:ec:0b:b2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
        Validity
            Not Before: Jan  1 19:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=114d8ef86774055ef5dc401d168189b863272e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:84:e4:00:50:0c:9b:db:37:99:92:bd:9c:b8:
                    ca:66:9d:27:e6:64:ae:6f:b9:62:7a:26:20:48:73:
                    e8:e0:4a:a8:02:3b:a4:49:3d:e6:f8:8d:fb:4d:9d:
                    d9:9a:d3:9b:d4:fb:2e:48:e5:33:a1:be:55:bd:25:
                    47:67:85:72:53:69:88:18:ca:1b:75:cf:35:67:bb:
                    10:53:9d:02:98:a7:9f:5b:90:31:2f:05:bf:8b:2e:
                    f7:ad:b8:23:6a:a6:0e:af:69:7d:b4:52:b6:c5:64:
                    c5:e0:14:fd:da:d8:79:b7:c7:1b:f4:60:bb:cf:f2:
                    72:0f:7b:f5:25:30:4c:4e:1f:d3:74:1f:74:43:29:
                    ca:c1:25:62:59:1f:1f:15:ae:20:95:58:19:1f:42:
                    41:b1:a8:92:ca:31:82:06:28:dd:c7:c7:0b:7f:e5:
                    40:95:9d:7c:5b:db:cf:ac:d5:db:6b:a6:17:66:05:
                    02:a9:4a:3a:88:5a:0a:41:10:1e:97:6e:72:eb:6d:
                    a0:a1:4b:64:1c:50:e5:9c:bd:19:d8:08:81:8c:59:
                    ca:f9:40:01:03:bd:62:23:66:8f:66:46:0e:44:5f:
                    b2:35:05:55:d6:b8:b0:51:46:a2:7c:69:8b:c2:09:
                    c4:99:4e:9c:97:b1:a3:8f:ad:aa:f0:28:3a:d8:59:
                    53:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4D:8E:F8:67:74:05:5E:F5:DC:40:1D:16:81:89:B8:63:27:2E:04
            X509v3 Authority Key Identifier:
                keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.112.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:b6:e2:77:62:37:60:e4:71:45:4c:79:c4:45:ba:f6:f9:00:
         56:02:f4:23:8f:77:de:19:b7:de:e0:59:90:83:23:73:03:75:
         d8:f9:ec:aa:7b:42:5c:a2:c6:9e:c7:c1:e9:22:08:e3:94:32:
         f1:de:0d:ee:80:b8:54:cd:83:96:e2:fc:a5:b2:9e:b8:1b:c2:
         05:5c:53:d6:42:ad:ba:e2:07:24:01:19:41:30:2d:47:d1:64:
         a1:a7:6c:4c:69:ec:ff:77:06:2c:91:0f:c5:9c:07:02:e2:00:
         ab:fd:9b:b9:71:1c:36:76:6f:43:d5:c6:f3:29:cc:78:e5:58:
         6f:2e:11:74:0f:e7:89:da:b4:fd:06:c6:74:ef:21:6e:8f:52:
         6f:94:20:1d:ea:9a:cc:ff:15:de:e9:c1:ab:6c:0e:0a:3e:14:
         e0:5e:ff:e6:3f:e8:88:62:7c:18:2c:9e:7e:5b:41:2e:52:00:
         51:83:da:ba:2b:79:20:15:5f:20:d7:63:f8:63:cc:2c:c5:ca:
         3e:a0:3c:24:6f:fe:d5:ad:96:c3:0e:a3:a6:d3:79:56:00:6a:
         79:0b:42:05:17:62:29:f8:a3:c2:eb:9c:cd:9f:21:c0:89:de:
         ce:6b:ba:23:b3:7f:17:c9:67:cd:61:de:38:b5:ac:2a:48:4c:
         69:59:22:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----