Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/iHyMz7WaIpGFj9IV33M_hAhVH-k.roa
File:                     iHyMz7WaIpGFj9IV33M_hAhVH-k.roa (raw, json)
Hash identifier:          LGMsJh4DFo99zD3c9hWW4b1EKTfexLADtFi5DHUXz6A=
Subject key identifier:   88:7C:8C:CF:B5:9A:22:91:85:8F:D2:15:DF:73:3F:84:08:55:1F:E9
Certificate issuer:       /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial:       0194266B3F525440D0EF36488AFA5226B581
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/iHyMz7WaIpGFj9IV33M_hAhVH-k.roa
Signing time:             Thu 02 Jan 2025 09:49:10 +0000
ROA not before:           Thu 02 Jan 2025 09:49:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     30848
IP address blocks:        185.169.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:3f:52:54:40:d0:ef:36:48:8a:fa:52:26:b5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
        Validity
            Not Before: Jan  2 09:49:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=887c8ccfb59a2291858fd215df733f8408551fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:9f:38:c1:60:d4:ab:9d:99:3b:ff:a6:9b:
                    86:c3:59:5b:6d:78:ea:73:ca:ba:b2:29:33:79:97:
                    c5:83:f0:25:47:59:01:dc:a1:fa:63:aa:38:fb:65:
                    e1:9a:24:ac:3d:de:1b:86:b6:c8:e5:68:4e:60:98:
                    23:9e:67:95:ae:43:1b:fb:1a:91:69:2c:40:22:f0:
                    64:48:be:ca:9e:2c:87:95:a0:de:7f:07:43:54:64:
                    3e:87:a1:1f:74:a7:86:cc:98:dc:65:36:5b:d3:4c:
                    7b:5c:19:0b:f7:b7:72:fb:a0:d5:64:0f:50:bd:74:
                    18:db:b7:28:c4:c4:ca:81:b5:91:4a:8d:f2:c5:91:
                    55:54:eb:dd:5c:6e:90:cf:7b:ab:1c:db:f3:f1:c0:
                    cd:d3:9b:6f:6f:32:b2:22:65:4b:e6:94:a1:5c:cb:
                    8f:d8:d0:8c:19:94:54:be:04:73:3f:3b:0a:e1:8d:
                    97:65:93:6a:e6:90:cd:d8:7c:64:a7:a7:64:87:1b:
                    3a:ee:56:ec:a8:2d:e4:0f:0f:89:d9:bf:3b:36:80:
                    36:1f:77:c9:1c:81:cc:77:b2:ee:9b:87:58:54:cb:
                    9f:a8:40:dc:a1:ce:52:8a:5f:00:ca:9c:91:08:7e:
                    a5:e4:52:04:8c:7e:3f:db:70:43:07:19:06:06:4a:
                    2a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7C:8C:CF:B5:9A:22:91:85:8F:D2:15:DF:73:3F:84:08:55:1F:E9
            X509v3 Authority Key Identifier:
                keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/iHyMz7WaIpGFj9IV33M_hAhVH-k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:a0:22:7d:67:2b:a0:fc:e5:8f:5e:2c:70:1b:36:05:8b:2f:
         75:c3:0e:a9:78:32:bf:fc:19:25:0c:5a:a4:e1:73:de:b6:3b:
         48:1c:9a:3c:b6:89:b3:93:89:58:41:91:61:d6:74:c3:2f:ff:
         35:87:50:25:d8:72:7b:e8:e9:ad:82:9e:70:9f:28:83:c9:2f:
         0e:36:45:62:8c:46:f3:eb:ad:e5:6d:62:95:4b:02:67:92:a5:
         ec:b7:1c:3a:79:7a:3f:a8:d8:97:c8:62:30:47:cf:5a:97:e5:
         fc:2f:7e:13:13:cb:66:66:44:e9:bc:08:78:92:9c:d2:61:f0:
         1d:84:47:6e:97:51:b0:3f:83:ff:cc:6d:45:e0:c1:6f:8b:87:
         6f:1a:4c:29:8f:c7:85:0f:45:ed:5f:5a:f0:d0:f2:82:8e:ab:
         5e:6c:01:22:18:86:37:a1:0f:e6:d5:e4:6c:8c:44:fa:5d:ab:
         9d:2b:3f:49:73:2e:6c:ef:9b:02:38:71:1e:89:9a:81:7a:77:
         40:fa:a3:0a:43:ca:c5:ce:60:c8:54:7c:bf:ed:8d:fd:6a:2a:
         aa:14:a2:0a:d0:13:cc:3f:36:46:82:fa:f6:22:cd:6e:e4:eb:
         a9:4a:60:34:bf:85:3e:f4:99:df:a3:25:2d:df:4e:94:15:f3:
         55:bb:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----