Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/vf_PL7Z26am-bUWHqusGVLE57ns.roa
File:                     vf_PL7Z26am-bUWHqusGVLE57ns.roa (raw, json)
Hash identifier:          lq/qQHwmZ7jgnqMZo6s1jASjE57LJ9Te+YbA+3H42GE=
Subject key identifier:   BD:FF:CF:2F:B6:76:E9:A9:BE:6D:45:87:AA:EB:06:54:B1:39:EE:7B
Certificate issuer:       /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial:       019423D6DB543C77807D9ADBFBC7E534AEAB
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/vf_PL7Z26am-bUWHqusGVLE57ns.roa
Signing time:             Wed 01 Jan 2025 21:47:50 +0000
ROA not before:           Wed 01 Jan 2025 21:47:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206605
IP address blocks:        185.181.212.0/22 maxlen: 22
                          2a0a:de80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:db:54:3c:77:80:7d:9a:db:fb:c7:e5:34:ae:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
        Validity
            Not Before: Jan  1 21:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bdffcf2fb676e9a9be6d4587aaeb0654b139ee7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:7d:07:5e:67:2d:86:66:25:33:b2:36:ea:
                    73:fe:1b:45:33:66:d5:36:88:01:d2:ad:84:08:a1:
                    33:be:a3:ae:4a:f0:9f:72:b2:ea:e1:49:d8:27:1c:
                    64:af:b9:f1:b5:0f:58:9b:c7:ef:ce:10:6d:10:c8:
                    16:2f:6d:33:f5:66:90:85:9b:68:e3:66:5e:56:b9:
                    09:4e:7f:6f:75:3a:b9:1e:68:d3:a8:74:24:4e:e8:
                    0e:3f:ed:1f:9d:8e:c0:42:53:56:71:ec:ba:9c:ad:
                    ac:0f:cf:2d:78:a0:3e:d5:e7:1c:19:7e:c2:7f:0b:
                    cc:6e:e0:c8:42:76:fa:0e:3b:94:02:d7:f4:59:44:
                    0b:ab:9b:45:e7:1d:bc:b5:7f:25:d6:c4:5e:75:c6:
                    86:e5:de:d8:21:7d:e4:25:77:03:00:03:f9:e2:02:
                    0f:66:67:48:95:a3:b7:b8:7f:02:f7:cc:49:24:44:
                    30:04:6e:85:0d:25:ee:a8:4f:18:8a:d2:b5:28:40:
                    91:cb:89:62:a5:1c:68:96:33:98:ea:89:d7:ca:13:
                    b6:ad:97:91:3d:1d:b0:b0:db:d0:73:b8:73:8e:ab:
                    c0:31:80:d6:80:b0:54:26:f8:27:ab:d0:af:27:95:
                    fe:13:d5:71:88:7f:a5:40:a8:e9:d6:fb:c3:3b:09:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FF:CF:2F:B6:76:E9:A9:BE:6D:45:87:AA:EB:06:54:B1:39:EE:7B
            X509v3 Authority Key Identifier:
                keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/vf_PL7Z26am-bUWHqusGVLE57ns.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.181.212.0/22
                IPv6:
                  2a0a:de80::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:d0:b6:d5:07:f2:6c:5a:cd:b2:38:66:48:6e:b0:5b:e6:d1:
         5d:5e:2c:62:67:c8:90:c1:36:93:20:ce:1c:4d:3d:99:f1:80:
         1a:e9:9f:1e:19:5e:27:e8:af:6a:07:f4:fa:07:2d:8a:06:4c:
         2d:ca:31:0c:52:71:c7:fc:60:77:7c:d3:25:0f:73:07:e8:71:
         78:d9:88:bb:e7:98:16:fa:6c:12:e1:82:45:9e:a6:a8:aa:ea:
         c9:5e:55:d2:40:11:a0:34:cc:14:5e:2d:81:17:b3:55:8f:32:
         3c:68:7b:f4:05:51:5d:0a:96:fb:47:66:a9:80:90:14:5d:45:
         10:77:56:0e:05:91:ee:40:f1:79:c0:8b:3f:c9:68:46:8d:8d:
         3e:9c:76:a5:53:a1:0a:54:e1:ee:68:46:10:eb:78:3d:a4:11:
         10:ed:69:c6:c3:b3:f3:75:1e:95:e0:74:2a:a8:c9:e1:cd:7f:
         e3:3b:f0:09:06:e2:12:31:fb:d3:88:4a:bd:52:e7:01:30:42:
         7a:7a:7d:06:40:4d:ab:c8:da:60:cb:01:93:86:e1:70:49:15:
         62:26:db:0a:67:dc:60:b0:3c:d5:c0:30:95:4f:20:15:87:b9:
         f8:e9:56:62:85:fd:81:1a:e8:b8:1b:73:8e:d6:df:b6:3f:d9:
         0e:8a:ff:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----