Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/W_v27Hupk3RRQBILYKusMtNhoAc.roa
File:                     W_v27Hupk3RRQBILYKusMtNhoAc.roa (raw, json)
Hash identifier:          yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=
Subject key identifier:   5B:FB:F6:EC:7B:A9:93:74:51:40:12:0B:60:AB:AC:32:D3:61:A0:07
Certificate issuer:       /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial:       01942444ACB3FFC75D88514B7B7E018D041E
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/W_v27Hupk3RRQBILYKusMtNhoAc.roa
Signing time:             Wed 01 Jan 2025 23:47:47 +0000
ROA not before:           Wed 01 Jan 2025 23:47:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6798
IP address blocks:        193.243.162.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:ac:b3:ff:c7:5d:88:51:4b:7b:7e:01:8d:04:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
        Validity
            Not Before: Jan  1 23:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5bfbf6ec7ba993745140120b60abac32d361a007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:46:b1:58:31:0d:f3:09:9c:98:60:61:78:
                    eb:96:d2:73:6c:c3:14:8d:b8:3d:8e:9a:2a:c1:70:
                    bc:d9:1b:2c:53:8d:85:6c:c4:4f:2d:2d:1e:86:31:
                    00:b3:13:4e:0b:e5:e5:6b:cc:7b:d6:fa:52:92:d6:
                    e1:ee:ad:50:c6:68:cd:c5:4b:1a:d7:97:29:fe:f7:
                    58:46:78:67:22:e7:f2:af:d6:62:7c:91:fd:b2:d1:
                    7c:63:ad:1e:34:46:b0:e7:a6:4b:ea:d1:4b:97:71:
                    0a:9f:0f:c4:61:43:98:89:ef:da:51:30:40:31:ff:
                    78:74:93:1d:5f:bb:42:a3:0d:95:db:38:4d:60:9b:
                    95:8c:31:cf:c7:81:32:30:f5:90:0e:29:94:a8:90:
                    65:ce:8a:77:ab:b3:c4:07:02:76:58:f3:04:41:48:
                    01:0f:02:15:b4:a0:9c:52:6f:cd:95:6c:d8:9e:74:
                    75:70:13:4b:63:5a:a6:b8:06:2b:cb:48:22:ea:f8:
                    95:80:f0:51:b2:c8:2e:aa:0c:42:90:f0:02:3b:e2:
                    c5:29:33:6f:6c:40:e9:83:9f:2e:d6:00:d9:df:5b:
                    98:48:04:7d:82:be:76:6c:b6:03:e7:9f:fb:b0:a0:
                    6f:ae:4c:17:ad:cb:27:ff:ef:b6:14:14:c1:bf:5b:
                    5c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FB:F6:EC:7B:A9:93:74:51:40:12:0B:60:AB:AC:32:D3:61:A0:07
            X509v3 Authority Key Identifier:
                keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/W_v27Hupk3RRQBILYKusMtNhoAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.243.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:bd:ae:1a:94:1c:24:0f:a0:fd:de:8a:4f:18:8f:b2:8d:0b:
         b6:82:e9:c8:5d:dd:02:ae:cc:3f:a2:69:fc:58:c7:59:99:0c:
         93:de:2e:fc:ed:c4:03:45:bb:4f:03:b2:93:40:f2:6c:a0:c0:
         2f:f7:38:7a:25:48:89:0f:2c:55:27:7e:af:d2:ca:72:3f:13:
         0d:bf:c6:3f:94:00:f1:e9:50:fa:9f:5f:55:29:05:a9:4f:16:
         b9:12:c0:c1:db:1c:78:4c:05:2d:6e:7f:a1:b2:9d:33:51:0b:
         2b:6f:9c:d5:03:8e:f7:6c:a9:98:f9:ac:d9:36:86:ed:02:7a:
         0f:25:8f:c0:ce:1c:7c:d0:e5:9d:fc:84:cd:15:c9:12:0e:08:
         76:09:05:5a:91:bd:ea:fa:07:69:e3:38:bc:87:fc:07:68:7b:
         8b:38:57:b3:62:2b:ad:30:ac:45:73:80:dd:eb:bc:d9:e4:9b:
         9c:5d:91:75:69:c0:ad:99:dc:41:04:c0:2a:21:b8:3d:c9:ad:
         fe:6c:b3:43:49:cf:1e:16:f9:fa:8b:bb:27:7e:56:ae:2d:78:
         71:3a:03:65:82:91:2a:f3:c8:91:f1:ec:f7:06:9e:f3:33:28:
         c4:66:a0:41:5f:5a:62:cb:02:89:ee:3c:d4:be:0f:31:67:2b:
         08:61:d2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----