Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/yB3brVsIx4Ybw1ASAbrORqB9Wbo.roa
File:                     yB3brVsIx4Ybw1ASAbrORqB9Wbo.roa (raw, json)
Hash identifier:          zaZ1//fxm06VDGg5osNTYChtS5G53CldCfIrhzpwrEY=
Subject key identifier:   C8:1D:DB:AD:5B:08:C7:86:1B:C3:50:12:01:BA:CE:46:A0:7D:59:BA
Certificate issuer:       /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial:       01952276C0CC48FB7C4D50FE3CACF77702B1
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/yB3brVsIx4Ybw1ASAbrORqB9Wbo.roa
Signing time:             Thu 20 Feb 2025 08:26:02 +0000
ROA not before:           Thu 20 Feb 2025 08:26:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202015
IP address blocks:        77.83.199.0/24 maxlen: 24
                          79.141.160.0/23 maxlen: 23
                          79.141.162.0/23 maxlen: 23
                          79.141.172.0/24 maxlen: 24
                          79.141.173.0/24 maxlen: 24
                          91.193.19.0/24 maxlen: 24
                          185.33.84.0/23 maxlen: 23
                          185.33.86.0/23 maxlen: 23
                          193.42.38.0/24 maxlen: 24
                          193.111.208.0/24 maxlen: 24
                          194.124.229.0/24 maxlen: 24
                          2a01:8640:4::/48 maxlen: 48
                          2a01:8640:5::/48 maxlen: 48
                          2a01:8640:b::/48 maxlen: 48
                          2a01:8640:e::/48 maxlen: 48
                          2a01:8640:1e::/48 maxlen: 48
                          2a01:8640:1f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:22:76:c0:cc:48:fb:7c:4d:50:fe:3c:ac:f7:77:02:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
        Validity
            Not Before: Feb 20 08:26:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c81ddbad5b08c7861bc3501201bace46a07d59ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:37:6a:ad:7e:0c:61:10:97:59:2d:36:90:10:
                    ad:a9:af:cc:ea:5d:02:58:54:82:6f:b7:7c:66:b9:
                    d1:3d:58:12:9d:5e:75:8a:09:bb:e3:84:06:15:0b:
                    22:37:4a:8a:4a:15:7a:a3:21:ee:9d:f0:a2:79:73:
                    21:53:c2:49:18:e4:41:6c:9d:1d:7b:69:5d:63:75:
                    28:29:76:d1:fe:93:87:48:ad:52:ff:37:14:32:fd:
                    93:ab:6f:da:d8:68:92:4a:d9:8b:13:0a:7b:c7:30:
                    82:39:c5:8c:6b:cb:45:34:e7:44:e8:8d:5f:d6:99:
                    a9:a8:4b:b4:9b:64:75:ca:f6:6f:56:85:74:99:a2:
                    4a:6d:9a:cc:45:cd:10:52:38:3d:ec:98:32:28:70:
                    da:70:cd:28:3c:bf:3a:99:46:6f:f1:c7:51:73:80:
                    ce:a4:5a:27:a3:39:29:29:de:5e:1f:f9:6a:6f:4f:
                    cf:ec:4a:b1:36:ae:83:e8:25:7e:5b:5a:fc:48:2f:
                    fa:70:61:d0:66:40:59:52:b3:1a:df:0c:ae:5f:0f:
                    8f:8d:36:5c:fc:48:80:3d:1d:27:43:8c:75:26:49:
                    12:06:c6:cd:32:47:f0:74:dd:29:4d:a9:5c:df:7a:
                    7c:45:ee:86:ee:8e:0e:85:89:a7:67:2c:a6:19:a0:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1D:DB:AD:5B:08:C7:86:1B:C3:50:12:01:BA:CE:46:A0:7D:59:BA
            X509v3 Authority Key Identifier:
                keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/yB3brVsIx4Ybw1ASAbrORqB9Wbo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.199.0/24
                  79.141.160.0/22
                  79.141.172.0/23
                  91.193.19.0/24
                  185.33.84.0/22
                  193.42.38.0/24
                  193.111.208.0/24
                  194.124.229.0/24
                IPv6:
                  2a01:8640:4::/47
                  2a01:8640:b::/48
                  2a01:8640:e::/48
                  2a01:8640:1e::/47

    Signature Algorithm: sha256WithRSAEncryption
         3a:6e:16:52:fb:a6:d1:2b:fb:2a:40:8c:88:a4:73:8d:87:ba:
         d7:4a:df:3d:61:7c:b4:92:e5:07:8c:93:ac:d8:c7:e6:43:6f:
         f0:ba:fb:c1:ad:5f:ef:47:1d:6a:da:2e:9f:ca:c6:53:90:5c:
         2c:2f:2b:29:39:d1:81:97:d8:62:bf:c7:00:ba:3f:5d:9c:87:
         51:62:22:b8:3c:9f:15:95:ab:d6:1b:13:f7:d0:a9:ca:0f:59:
         ff:38:72:e0:b0:8d:31:bf:82:47:10:87:b9:02:b9:13:0e:7d:
         62:de:c4:37:ba:25:26:9e:3b:42:c2:e3:3c:8d:29:11:36:4c:
         f7:e6:6d:3c:b4:4e:56:6e:42:3b:15:04:c4:e7:b2:95:e9:ea:
         39:f5:89:8c:d1:20:c0:fc:ef:d3:d5:c8:14:d7:b4:a3:32:0b:
         e7:92:4c:fe:5e:fb:4d:68:95:82:3b:73:f2:13:ab:5f:50:88:
         54:10:c0:46:c4:a5:3a:0c:f0:f4:ee:d4:9c:73:5d:78:55:f1:
         9d:7f:be:2d:37:0a:75:3e:a1:96:3a:a4:bc:4b:b0:e1:52:6d:
         29:77:16:9d:9a:20:63:e2:61:cc:f9:b1:89:38:d2:5f:b1:0d:
         88:bf:40:e6:91:9a:61:df:90:a9:dd:db:74:0d:58:a9:f0:61:
         48:35:a3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----