Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/wmmMDwm2AgiKGDNMCaNvCRNm01g.roa
File:                     wmmMDwm2AgiKGDNMCaNvCRNm01g.roa (raw, json)
Hash identifier:          xp+qcyiqcHDI+S2i52Fx1S75VBSfMGJw/sF794bk7yw=
Subject key identifier:   C2:69:8C:0F:09:B6:02:08:8A:18:33:4C:09:A3:6F:09:13:66:D3:58
Certificate issuer:       /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial:       0192E1C2A0AA9D0D37FD07E270394095B672
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/wmmMDwm2AgiKGDNMCaNvCRNm01g.roa
Signing time:             Thu 31 Oct 2024 08:48:01 +0000
ROA not before:           Thu 31 Oct 2024 08:48:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     21376
IP address blocks:        176.104.248.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:e1:c2:a0:aa:9d:0d:37:fd:07:e2:70:39:40:95:b6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
        Validity
            Not Before: Oct 31 08:48:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c2698c0f09b602088a18334c09a36f091366d358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f0:28:68:a8:7d:cf:44:3c:b5:a1:43:76:31:
                    d5:72:1e:65:b7:01:af:cf:e9:6e:10:13:db:97:d5:
                    84:c6:83:a2:c1:0d:88:06:0c:cc:24:b9:52:97:0f:
                    ac:d5:b2:20:98:c2:af:7d:6b:fd:f4:36:a9:a4:fd:
                    1c:0d:4e:eb:6f:3a:6f:2a:41:e6:5a:fd:01:0c:02:
                    1b:ed:aa:a8:12:fa:84:fd:63:41:1b:42:e5:48:5d:
                    aa:cc:0e:d4:d4:d8:1f:53:e6:c9:70:eb:f3:19:a5:
                    ae:7c:70:1c:fd:48:b6:7c:62:27:42:6c:ba:eb:a6:
                    4c:8b:7a:5c:c6:e0:b2:26:b4:fb:22:e8:85:e4:50:
                    df:cd:86:79:d9:ce:8d:70:36:2e:0c:5d:07:d5:33:
                    2e:6e:f5:b6:72:a4:49:6d:c2:23:33:65:e0:2b:5d:
                    2d:9f:1a:8c:0f:64:7b:57:0a:e1:b6:de:9e:a8:43:
                    e6:42:4b:ba:83:1e:38:62:81:7d:cd:81:d3:d9:30:
                    38:ca:b5:6f:5b:32:18:5c:e0:e3:6b:da:af:ef:81:
                    97:6c:f0:23:07:b0:55:2d:7b:27:c3:2c:32:46:1c:
                    8a:1a:3b:28:0a:19:41:71:96:e6:36:62:c7:bd:dc:
                    d4:cb:d4:2c:ff:f8:3c:18:d0:28:85:a7:3b:fb:d9:
                    99:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:69:8C:0F:09:B6:02:08:8A:18:33:4C:09:A3:6F:09:13:66:D3:58
            X509v3 Authority Key Identifier:
                keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/wmmMDwm2AgiKGDNMCaNvCRNm01g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.104.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:3c:0e:e7:a6:50:61:1c:65:cd:03:b7:a8:ae:4a:c3:8a:b0:
         da:55:47:3a:24:d4:79:05:a1:e4:5c:91:68:e0:66:e7:e9:2d:
         a4:74:9d:c0:d8:6c:84:24:73:58:f3:08:46:45:c7:b7:a9:fa:
         0e:1d:c4:1c:b6:59:f2:94:45:c4:b9:b5:86:65:64:5a:82:32:
         93:f5:c6:aa:a0:29:f9:32:1f:2f:49:17:dc:94:95:f9:09:c8:
         46:1c:3a:7b:bf:20:00:b7:f7:79:44:d9:30:96:d6:a2:a3:72:
         6b:db:86:0d:39:fb:94:5a:32:ce:8b:9e:ab:88:3e:46:ef:83:
         a3:5d:62:eb:1a:3b:6e:7b:fc:48:ef:87:d6:23:ae:23:b8:f2:
         db:9f:ce:cb:b1:40:27:ab:88:75:b2:c2:26:3c:b9:e8:a8:33:
         33:c4:25:70:84:60:dc:b2:05:7f:89:ba:7c:e9:66:8b:f6:39:
         fe:4b:c6:1c:82:d0:18:95:29:5d:90:70:22:fe:7f:ba:e1:7f:
         3e:64:88:68:c5:2d:f8:63:b2:be:a8:b1:e2:7f:c9:97:54:9b:
         40:3a:1c:36:6e:b5:fc:05:2f:b0:e6:68:0a:eb:92:c2:a6:33:
         5b:73:31:c7:50:96:32:6e:aa:e4:f5:b1:16:93:b4:b4:53:bc:
         b6:7d:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----