Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/1-YCQCphk32b8tDaXBmol_BTFhAA.roa
File:                     1-YCQCphk32b8tDaXBmol_BTFhAA.roa (raw, json)
Hash identifier:          vDe37BPFiFzh2DmP54Y2HTtv1UAWo0nqbWO5t7R6/68=
Subject key identifier:   F9:80:90:0A:98:64:DF:66:FC:B4:36:97:06:6A:25:FC:14:C5:84:00
Certificate issuer:       /CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Certificate serial:       01955681C5167C4F875098CEB64A5FD5D3CB
Authority key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/1-YCQCphk32b8tDaXBmol_BTFhAA.roa
Signing time:             Sun 02 Mar 2025 10:58:20 +0000
ROA not before:           Sun 02 Mar 2025 10:58:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205687
IP address blocks:        185.209.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:56:81:c5:16:7c:4f:87:50:98:ce:b6:4a:5f:d5:d3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
        Validity
            Not Before: Mar  2 10:58:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f980900a9864df66fcb43697066a25fc14c58400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5c:40:12:32:ec:74:a7:66:c1:0a:fb:cb:66:
                    79:ac:21:a6:0c:41:04:11:33:e0:6c:ce:fb:e7:2a:
                    11:a4:df:9c:41:82:37:34:a6:60:2f:10:96:54:d8:
                    49:0f:68:fc:bc:e8:fe:2d:ff:2d:06:6f:20:d6:08:
                    c2:f6:cc:6e:9d:ef:21:bf:54:eb:89:92:13:25:4c:
                    81:45:68:55:4a:6d:ce:bb:c1:bc:8d:ef:7d:1c:0a:
                    54:19:19:58:af:e7:49:15:ff:1a:a7:cf:a2:89:f0:
                    35:bc:8b:84:a8:61:0d:d8:4d:34:e0:fc:18:8d:5b:
                    71:32:75:68:38:3d:b8:dc:7f:e5:95:6e:b9:c6:e8:
                    10:85:28:c0:bb:44:96:3f:c5:50:d0:9b:6b:de:87:
                    97:e8:ea:15:cf:dd:68:9b:6c:7b:6a:cb:c6:7a:3c:
                    ff:91:0b:6f:6b:16:cb:eb:76:55:b7:41:78:d8:d3:
                    a1:17:8f:bb:4e:b0:09:8f:fc:dc:d9:f2:01:37:5f:
                    f7:42:d8:55:0d:72:27:62:fc:f3:e3:3d:4a:4c:79:
                    2f:1c:41:1c:b2:1a:fd:8b:eb:b8:33:5f:77:4a:e4:
                    02:94:b3:31:f3:6e:4b:77:b6:c6:44:82:2e:a2:b9:
                    af:06:40:50:73:a1:d1:eb:69:64:90:3d:77:9e:c4:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:80:90:0A:98:64:DF:66:FC:B4:36:97:06:6A:25:FC:14:C5:84:00
            X509v3 Authority Key Identifier:
                keyid:CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/1-YCQCphk32b8tDaXBmol_BTFhAA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:d3:59:fc:12:c3:93:56:1f:bb:4a:a7:b3:1f:42:e8:a0:6a:
         4d:69:b2:49:73:b4:fe:33:0e:d6:46:74:d2:42:8d:16:c1:28:
         c8:ad:cc:a4:a8:b8:16:17:e8:a3:8f:6e:f8:7a:51:45:cb:86:
         de:d9:5b:89:21:87:47:df:fd:a0:02:8e:86:e5:ae:fa:d5:4c:
         25:e0:50:4d:7f:b0:b7:27:fc:84:b6:5e:56:e7:43:da:19:ea:
         65:50:c0:d1:ea:c1:4e:b8:59:d5:3b:c9:ad:96:38:27:ce:a2:
         60:77:77:61:4c:91:00:22:6f:71:55:de:67:a5:06:c5:67:7b:
         a7:fe:c8:77:ef:e7:be:fb:f0:21:91:90:2c:4a:ea:17:1a:74:
         10:5f:2f:2a:e6:14:28:a7:94:9f:fe:64:7c:f2:27:fb:1a:77:
         4a:5c:66:f1:35:c6:30:30:87:3d:27:f5:cd:48:82:61:dc:6e:
         89:ff:42:9e:19:a1:ac:9d:a5:f8:15:e7:30:fe:b7:62:9a:7b:
         1d:f3:57:73:ef:f6:9e:e2:2a:7e:86:85:5d:7e:36:f3:60:5d:
         5a:b8:15:3b:61:d1:b1:92:1d:1b:57:15:ec:bd:01:69:57:5d:
         6d:f4:81:7e:bd:d9:f3:36:a7:b8:b5:3a:79:c1:b3:8e:1c:d9:
         67:93:94:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----