Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/1-QJRvD_s23t8EY5xEdDTuC908Sc.roa
File:                     1-QJRvD_s23t8EY5xEdDTuC908Sc.roa (raw, json)
Hash identifier:          lC8dpaKtg1+1rVuBlbmqllxIuGpvRJft4kKrK9r2MOs=
Subject key identifier:   F9:02:51:BC:3F:EC:DB:7B:7C:11:8E:71:11:D0:D3:B8:2F:74:F1:27
Certificate issuer:       /CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Certificate serial:       01942748210D6673DC7676CF60D736772011
Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/1-QJRvD_s23t8EY5xEdDTuC908Sc.roa
Signing time:             Thu 02 Jan 2025 13:50:26 +0000
ROA not before:           Thu 02 Jan 2025 13:50:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     1741
IP address blocks:        157.24.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:21:0d:66:73:dc:76:76:cf:60:d7:36:77:20:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314
        Validity
            Not Before: Jan  2 13:50:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f90251bc3fecdb7b7c118e7111d0d3b82f74f127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:ec:16:ec:e7:d6:53:d1:2a:97:f9:d6:a4:
                    38:e3:4b:86:ca:1a:35:44:c5:50:1a:90:8f:8e:a1:
                    f7:09:7e:58:0f:de:93:2a:e3:b2:e0:fa:bf:0b:b0:
                    1d:1b:6c:8e:72:eb:84:0c:9e:76:ae:65:65:48:b7:
                    68:9d:29:a7:6a:1e:4e:f2:27:b1:c9:9b:1c:e0:20:
                    5c:ad:68:be:bd:b7:73:37:5c:24:f0:31:83:cf:6d:
                    da:a4:6d:50:e3:4f:bf:bb:93:98:fd:66:0d:46:3c:
                    bb:11:7b:e8:49:ac:fb:50:7d:ab:2b:b6:ee:11:11:
                    72:2d:d8:9a:18:53:da:1f:07:bc:7d:05:f8:91:76:
                    05:2d:c8:51:d6:53:00:b3:85:94:1d:83:aa:4c:6c:
                    6f:1f:9e:fc:ee:94:f8:79:ff:7a:f9:bd:0a:08:fd:
                    47:ed:bf:bc:a8:04:72:5e:40:36:44:2d:32:00:35:
                    82:3d:1c:54:21:7b:69:5f:e1:1d:aa:e1:4a:80:7d:
                    10:f3:3b:bc:30:91:89:51:56:c3:2b:73:6c:af:dc:
                    98:d3:35:ea:de:a7:d2:a0:fe:a0:4a:e4:38:ef:af:
                    ea:98:51:4d:fe:ad:8d:6f:86:44:d5:11:76:e2:31:
                    c1:6c:c5:5b:38:66:dd:2d:bf:84:56:fc:ee:e3:34:
                    fe:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:02:51:BC:3F:EC:DB:7B:7C:11:8E:71:11:D0:D3:B8:2F:74:F1:27
            X509v3 Authority Key Identifier:
                keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/1-QJRvD_s23t8EY5xEdDTuC908Sc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.24.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:2c:fb:70:1d:66:63:c9:cd:fd:89:95:f6:8c:29:c5:cb:61:
         cf:57:33:1c:e1:a0:5b:49:55:6c:0f:14:9a:f4:a0:7d:53:10:
         ac:e8:fd:d2:76:1b:61:9a:a0:d9:49:e1:a9:24:5d:73:69:c1:
         be:55:ca:92:ac:98:11:d9:b1:35:79:c6:f9:e6:dc:2d:35:11:
         35:9c:5b:24:35:d6:b9:af:fd:a4:30:cc:fc:04:61:b3:81:1d:
         0d:9c:00:e6:27:3a:5b:69:82:89:86:e5:90:0e:f2:20:8c:31:
         75:35:7f:14:9c:5a:db:9c:6e:d7:0f:80:c4:ff:3f:1b:21:21:
         c3:33:6d:17:7b:91:87:68:4a:cd:9f:6e:e4:e7:c4:48:b4:fa:
         6f:c6:2e:8f:58:cb:76:52:f9:9c:74:ee:8a:47:a3:72:1f:53:
         30:1e:67:26:79:96:a5:93:2e:09:4c:0c:3f:9f:db:0e:68:f3:
         23:77:d9:1f:4f:fd:c8:24:09:6f:bd:f4:05:78:e6:82:4a:e4:
         bf:61:f0:be:59:3d:5d:95:52:32:fa:2e:18:61:6f:fd:e4:05:
         18:08:97:53:31:b3:03:54:00:0b:93:78:3f:36:1d:81:79:b1:
         6f:c6:1e:ba:1f:70:d3:3e:2b:80:fb:42:44:67:20:58:9d:80:
         31:6b:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----