Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FKpblPi3ySbGoqpwyAi9N3Py604.roa
File:                     FKpblPi3ySbGoqpwyAi9N3Py604.roa (raw, json)
Hash identifier:          O3y3LIMN5ulbi/PVPI8stdQUdjr8tb7yMqjjQu9KBWY=
Subject key identifier:   14:AA:5B:94:F8:B7:C9:26:C6:A2:AA:70:C8:08:BD:37:73:F2:EB:4E
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       0194228D2E21B9475C1DB3461C05824DED63
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FKpblPi3ySbGoqpwyAi9N3Py604.roa
Signing time:             Wed 01 Jan 2025 15:47:45 +0000
ROA not before:           Wed 01 Jan 2025 15:47:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     43673
IP address blocks:        82.196.67.0/24 maxlen: 24
                          82.196.67.183/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:2e:21:b9:47:5c:1d:b3:46:1c:05:82:4d:ed:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Jan  1 15:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=14aa5b94f8b7c926c6a2aa70c808bd3773f2eb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:18:a4:ee:98:2a:73:7f:b5:68:ee:24:09:
                    ca:3b:ea:b7:b6:55:d8:44:e5:32:25:9b:30:2c:09:
                    e0:2e:93:8b:28:78:78:43:91:d6:24:64:44:9f:33:
                    91:bc:91:96:c2:49:69:fd:c6:e9:f8:ae:b9:ef:97:
                    00:ed:5e:36:c6:8f:c8:f9:76:02:a4:b3:0c:29:d7:
                    96:1a:bf:25:d3:3b:a0:69:18:67:72:f5:b7:a6:46:
                    b0:db:db:50:e6:a1:d6:00:f8:ce:f8:de:6b:97:ca:
                    c4:af:44:51:d0:f2:70:9f:87:9e:5c:10:5b:1b:7e:
                    5b:b8:76:9a:51:99:08:cb:c1:f7:7d:71:c6:ad:cc:
                    a4:b2:98:48:e2:51:44:ea:12:ac:d5:b1:d8:ff:2c:
                    dd:f0:06:d4:64:87:4f:c6:95:3e:23:31:b6:84:f8:
                    2f:c0:e8:c1:f9:22:6d:91:ce:06:62:2d:01:6b:3f:
                    67:31:6a:17:7f:70:17:cd:ec:d7:a6:24:e5:cd:c2:
                    db:ac:65:91:f0:ef:6d:cc:5f:c1:78:4c:93:a8:07:
                    97:dc:47:dd:4d:05:6c:22:03:5f:ac:10:7a:7e:13:
                    a7:d1:ba:2c:54:3c:df:a7:60:5b:4a:ca:e9:2c:7a:
                    2f:b4:28:ce:e8:0b:dc:07:95:92:e2:e5:ff:fa:2a:
                    0c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AA:5B:94:F8:B7:C9:26:C6:A2:AA:70:C8:08:BD:37:73:F2:EB:4E
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FKpblPi3ySbGoqpwyAi9N3Py604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.196.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:66:f8:e0:2a:a3:12:4b:86:57:21:7f:b6:0c:6c:c5:e2:32:
         f0:91:7e:60:6d:e6:92:14:15:54:35:80:2c:31:11:41:b8:03:
         f6:b8:0c:84:e3:c7:66:63:74:ea:4b:17:61:0a:21:08:7b:13:
         b6:e2:54:e0:e6:07:c0:b7:54:0c:de:bf:d3:6a:9e:9a:bd:5b:
         27:f2:be:5b:31:0d:3a:6b:7b:d6:10:5c:af:c3:1e:ac:4a:9c:
         2c:68:49:3c:13:43:0a:7e:ca:60:99:ea:c0:77:31:42:67:6f:
         ac:73:f9:d9:15:84:68:5e:31:11:b6:c3:b5:c8:d4:93:55:74:
         85:f3:1b:be:e4:ae:cc:a1:b0:7a:e3:72:2c:75:b1:47:04:55:
         fd:cc:4f:03:d8:2b:11:cf:65:c4:5a:02:e1:c6:0d:42:f3:8b:
         45:5e:7d:6c:06:b5:a6:48:a1:3a:3a:0e:95:c2:32:8b:d3:6b:
         4d:3e:0c:68:22:84:c6:b1:81:25:ed:6f:2a:7f:01:a2:ed:8c:
         ba:29:d7:b3:ee:88:66:88:81:72:f3:2b:b2:77:8c:6e:db:79:
         e1:58:d9:75:5f:c5:4f:e6:9c:02:8a:99:e8:2b:f0:dd:1a:c4:
         60:c7:6c:45:73:13:2a:05:ad:ce:b7:27:86:de:8b:d4:58:26:
         97:40:f4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----