Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa
File:                     ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa (raw, json)
Hash identifier:          DOO9GA+T1exZrXJnaC8HcR8le9oe4m7a+sJjxpyxjOg=
Subject key identifier:   00:14:B0:83:98:8C:EE:50:D2:C2:90:69:6D:25:0C:FA:35:83:93:14
Certificate issuer:       /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial:       019424B28C187070156BC55A064D4D74E14D
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa
Signing time:             Thu 02 Jan 2025 01:47:48 +0000
ROA not before:           Thu 02 Jan 2025 01:47:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25569
IP address blocks:        80.82.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:8c:18:70:70:15:6b:c5:5a:06:4d:4d:74:e1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
        Validity
            Not Before: Jan  2 01:47:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0014b083988cee50d2c290696d250cfa35839314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2a:37:e1:68:ca:12:9b:fa:68:ca:8f:a4:94:
                    28:a7:84:93:38:4d:aa:1a:0b:92:5e:d8:0d:c8:71:
                    c8:bd:4f:b5:6f:da:72:9b:b5:b0:9b:74:3c:f6:19:
                    c8:cc:ad:53:89:31:31:66:46:42:e5:60:13:d0:36:
                    f8:38:35:69:97:76:89:3b:87:1d:23:10:7c:92:6d:
                    bc:c3:32:a9:1d:9a:69:7e:ed:99:57:b7:ba:e4:1f:
                    fe:4e:44:4f:8c:5d:59:d4:87:9a:ed:51:88:bd:2e:
                    1b:09:9b:16:6d:ed:b6:4c:36:2b:aa:6a:5a:22:4d:
                    89:9e:bf:b7:68:99:6b:f8:18:52:b8:81:2b:6d:ce:
                    c1:98:19:04:ee:17:39:95:1f:3a:41:ce:19:c3:f1:
                    13:cd:4e:be:00:b1:4b:3b:df:d5:aa:22:88:32:c6:
                    67:dd:f9:f4:65:6e:8e:78:45:e2:b9:49:7d:d5:b8:
                    36:a5:11:d2:94:b3:07:6f:52:11:42:60:ff:ee:a9:
                    94:3b:98:8b:aa:3b:57:c7:51:ef:7a:1b:de:56:e9:
                    b9:dc:67:d6:79:7d:c3:34:b9:85:00:71:04:f0:73:
                    9d:5c:a6:80:52:ad:17:43:3e:1d:aa:27:cc:7e:e6:
                    02:d2:de:ba:13:75:3d:91:38:03:05:fd:7a:0e:48:
                    ba:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:14:B0:83:98:8C:EE:50:D2:C2:90:69:6D:25:0C:FA:35:83:93:14
            X509v3 Authority Key Identifier:
                keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.82.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:4b:2d:6d:ec:7a:ac:f1:ea:ae:23:c2:0f:e9:8f:dd:d1:d3:
         a1:3e:ad:d3:be:52:4f:2d:7a:c3:0b:5f:2c:7e:d7:9c:47:f5:
         00:8b:70:82:b7:54:17:28:3e:89:b3:90:a0:e2:eb:e2:a0:4e:
         ed:11:3e:be:e3:44:46:a9:fd:7d:72:7a:98:5c:f2:eb:97:96:
         4c:63:07:dd:44:e2:d3:b2:91:ba:c9:30:20:65:43:82:7c:f2:
         67:f4:16:54:ac:64:0b:d6:99:05:7b:21:a6:0a:bc:b5:47:75:
         02:9a:cd:0f:c6:ce:6b:74:34:2e:31:b2:57:34:77:7b:ae:44:
         cd:f2:f0:ac:86:a2:f5:9e:f1:52:2f:dc:dd:ea:73:52:fa:93:
         c9:37:4d:06:e5:b9:8d:ca:ca:4f:2f:39:56:6f:08:e9:fb:f3:
         b5:33:cd:45:ff:2b:f8:fe:f2:94:3b:9b:13:5e:d5:08:f7:12:
         60:b4:03:c7:53:a1:7c:ee:57:72:07:94:c8:11:26:9d:bd:9d:
         a4:57:70:66:45:90:ed:c7:de:6c:07:0f:62:24:ab:58:4a:d9:
         3e:c0:d9:c3:69:8e:de:c2:66:f2:e7:ac:43:64:f7:77:cb:e3:
         08:54:67:45:12:eb:2d:d8:bf:8b:b7:ac:52:85:d9:a1:da:1d:
         1a:e1:15:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----