Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa
File:                     KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa (raw, json)
Hash identifier:          Zkhu8f8yjf/QHqOQXe12PGw2OKR9LJM6Q4zyvvvVxD8=
Subject key identifier:   2A:D9:71:B8:4F:FC:46:4D:AE:3C:7D:D1:34:D4:C9:CF:9B:50:FB:DF
Certificate issuer:       /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial:       01942444C029113AF051A8FBB6F7FDD6D84C
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa
Signing time:             Wed 01 Jan 2025 23:47:52 +0000
ROA not before:           Wed 01 Jan 2025 23:47:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8937
IP address blocks:        212.18.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:c0:29:11:3a:f0:51:a8:fb:b6:f7:fd:d6:d8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
        Validity
            Not Before: Jan  1 23:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2ad971b84ffc464dae3c7dd134d4c9cf9b50fbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:09:21:4c:1a:d6:36:bc:f8:11:90:49:4d:
                    5f:55:26:28:a8:77:a8:c0:7a:8e:b0:66:a6:d1:72:
                    64:49:fb:1a:46:e5:bb:9c:f0:3f:b4:dd:b1:f3:cb:
                    94:6c:62:d8:a1:e2:9e:e1:28:10:95:5c:a6:30:d6:
                    9f:2f:02:15:b0:fe:13:61:d5:89:5a:01:d5:c3:33:
                    31:10:4c:99:cf:e8:49:c7:18:83:b8:09:ae:be:98:
                    b2:3f:61:06:86:5e:7c:9b:b9:fc:e5:90:64:1c:92:
                    61:dd:50:e2:3a:c2:5b:5f:8a:78:1d:05:6b:02:43:
                    0d:91:78:bc:20:b6:a6:b2:58:65:0d:82:c9:64:77:
                    81:e5:e5:5f:07:5e:99:98:88:8c:e9:1c:5c:44:0b:
                    95:1f:77:0a:73:a5:01:4b:41:0e:31:c5:80:75:8f:
                    a9:c7:96:4a:77:75:f4:b1:e6:7c:a8:30:58:9d:33:
                    1c:c7:73:54:55:c7:bc:3c:c8:1f:74:e0:69:de:44:
                    7a:06:d8:e8:18:53:99:e9:d6:58:58:20:de:c2:23:
                    9a:29:88:07:de:7a:1e:8b:88:cd:b5:06:dc:bc:6e:
                    97:42:cc:11:82:28:2d:fe:11:fc:6d:8b:8c:aa:2d:
                    9b:1d:6d:eb:a3:65:00:65:c5:43:20:e0:ef:bb:ed:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D9:71:B8:4F:FC:46:4D:AE:3C:7D:D1:34:D4:C9:CF:9B:50:FB:DF
            X509v3 Authority Key Identifier:
                keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:12:d6:d0:cf:1c:1c:fd:e6:a3:76:9b:6c:5e:e8:16:f2:2d:
         f7:b8:57:79:52:40:1f:17:f4:0e:ae:0b:fa:dc:b1:60:9b:92:
         22:09:8b:6e:c3:5d:60:13:ce:5d:56:ac:4e:60:d7:87:ec:f4:
         86:c2:29:63:ae:d1:82:7a:ea:0b:5c:fc:c9:0e:d5:ee:c8:61:
         a3:70:33:b5:91:de:c3:c5:e4:c1:bf:a7:70:9f:9c:a7:e8:b9:
         6f:49:d6:2d:b1:81:a3:fe:f2:7e:33:1e:2a:db:de:84:1f:d9:
         7d:29:47:69:20:2d:b4:cd:8e:e4:2b:c5:dc:e8:ce:a8:b9:9c:
         f4:23:03:3e:c1:39:d0:03:3e:41:ea:1f:f1:8e:46:c4:43:25:
         8c:07:1c:11:8e:d4:a6:54:8b:58:61:7c:ec:4a:ec:6a:53:d2:
         68:bd:68:ec:29:95:70:fa:eb:47:87:99:85:ba:a9:90:0b:77:
         f3:50:d6:ad:26:df:43:ab:6f:fa:5d:64:79:ca:48:35:15:59:
         35:a1:21:06:4b:ff:69:e8:3f:ec:2f:10:1d:48:df:8b:47:7f:
         37:c4:02:58:9f:35:30:7e:5b:67:d9:c5:56:c5:53:d7:f9:2a:
         da:92:fa:58:d6:5d:6b:1d:1f:4d:2a:2d:8b:da:76:a3:fd:cd:
         12:b1:fc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----