Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa
File:                     5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa (raw, json)
Hash identifier:          SNl+Y4M8n9I3K17PdDkj5othPOFaJvzjGzvPP4WmJSg=
Subject key identifier:   E5:ED:4D:C6:E2:21:A6:A7:06:A0:96:8F:7B:0E:4A:97:9F:FF:F0:B7
Certificate issuer:       /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial:       0194221FD219C7CC59011AD958721514E54C
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa
Signing time:             Wed 01 Jan 2025 13:48:18 +0000
ROA not before:           Wed 01 Jan 2025 13:48:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209993
IP address blocks:        45.90.192.0/22 maxlen: 22
                          2a0e:240::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:d2:19:c7:cc:59:01:1a:d9:58:72:15:14:e5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
        Validity
            Not Before: Jan  1 13:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e5ed4dc6e221a6a706a0968f7b0e4a979ffff0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c3:ed:de:bc:ee:0d:2d:ea:dd:93:a9:8e:41:
                    8b:cf:13:78:98:95:76:10:68:82:19:99:04:85:58:
                    b0:ee:39:81:d2:3a:8f:a6:7d:9d:c6:33:ac:36:a2:
                    08:e1:47:4c:d6:97:6c:87:11:e2:b7:a0:97:ff:68:
                    0d:46:a2:60:06:ab:ad:f5:71:f2:f4:b8:ec:bb:95:
                    85:50:9f:fc:9c:9f:b6:bc:74:53:ac:07:0f:72:1b:
                    85:87:49:b5:48:b8:08:99:e8:fb:cd:fb:a3:17:fa:
                    9f:4e:08:86:73:35:6f:8f:a1:18:07:45:09:ad:40:
                    a2:c4:a8:3a:12:5d:e8:cb:dd:6e:5d:61:f5:81:d1:
                    f2:9c:b0:58:4c:65:70:08:76:73:0d:57:c6:bb:01:
                    1b:fe:19:b8:cc:ac:b8:2f:01:d1:07:d5:8a:b4:42:
                    2a:77:62:84:50:56:c4:33:89:27:6e:49:2c:e3:73:
                    50:f2:bf:c2:7d:d8:17:36:00:c2:21:88:44:19:b4:
                    ac:d2:e0:de:81:24:04:54:f8:18:9f:58:2c:58:a0:
                    88:79:bd:4d:2c:5b:d6:a0:29:43:29:ad:74:76:20:
                    92:be:e7:4c:26:3f:e2:29:4e:2a:2c:4e:83:13:91:
                    38:bf:9a:a7:7e:3a:f2:60:e1:3a:1e:f5:8d:bd:69:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:ED:4D:C6:E2:21:A6:A7:06:A0:96:8F:7B:0E:4A:97:9F:FF:F0:B7
            X509v3 Authority Key Identifier:
                keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.192.0/22
                IPv6:
                  2a0e:240::/29

    Signature Algorithm: sha256WithRSAEncryption
         47:b9:29:da:03:ba:cb:ee:41:3a:9b:50:7a:8f:5e:be:1a:ac:
         58:b0:ba:1e:57:e0:db:c7:d9:55:93:4b:d4:4f:57:6a:6f:8c:
         57:fe:b3:f3:32:d4:62:ac:2e:55:b8:82:59:99:f8:92:ea:6f:
         ce:b2:f8:5f:8a:2e:f2:a1:64:0b:ca:94:51:c7:30:b5:e4:a2:
         b1:91:d4:e6:70:ed:46:18:ed:58:76:85:23:32:c2:8f:e6:ce:
         84:46:44:b1:b0:33:5c:4a:cc:12:36:ed:a6:6f:d1:24:99:bd:
         99:80:c2:2e:b2:3c:b6:f7:e6:1c:99:74:88:93:35:00:b8:95:
         61:5f:0a:ef:b1:a9:22:86:2b:14:e5:1d:d8:1e:ba:cb:16:d4:
         ce:46:22:ce:3b:4c:f7:57:51:d6:a8:a8:a9:68:aa:26:c3:a6:
         8a:73:f0:c7:e0:67:62:2d:3f:78:6e:92:05:e6:59:4b:b1:f3:
         69:80:0e:be:4d:23:28:76:e0:3a:91:a4:35:78:90:ae:6c:68:
         b4:f6:50:22:c5:a0:26:ec:b3:dd:45:70:b6:72:38:e5:8f:63:
         6b:fe:af:53:09:f7:36:ff:b2:eb:b1:dc:97:d1:56:08:65:d3:
         bf:08:a1:3f:19:7c:ec:62:69:db:36:c0:ed:43:63:2d:4a:67:
         14:5c:e2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----