Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/Be_FrvCQzJEE8AcZD48fTBBydhc.roa
File:                     Be_FrvCQzJEE8AcZD48fTBBydhc.roa (raw, json)
Hash identifier:          vmCJB59VLswrUqU073qVTINZ2vimvwz+QJwA8ddtgvQ=
Subject key identifier:   05:EF:C5:AE:F0:90:CC:91:04:F0:07:19:0F:8F:1F:4C:10:72:76:17
Certificate issuer:       /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial:       019594CDCB257BEDA8E6BEB0C989F269F23D
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/Be_FrvCQzJEE8AcZD48fTBBydhc.roa
Signing time:             Fri 14 Mar 2025 13:17:49 +0000
ROA not before:           Fri 14 Mar 2025 13:17:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9063
IP address blocks:        185.44.200.0/22 maxlen: 22
                          185.44.200.0/23 maxlen: 23
                          2a01:7820::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:94:cd:cb:25:7b:ed:a8:e6:be:b0:c9:89:f2:69:f2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
        Validity
            Not Before: Mar 14 13:17:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=05efc5aef090cc9104f007190f8f1f4c10727617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:0f:1d:6e:1f:9d:17:77:d3:9e:83:3e:cb:
                    1a:67:a3:d0:b9:ee:fe:8c:3d:48:23:57:37:8b:e9:
                    2b:11:ce:63:24:b3:47:ad:ba:10:ec:af:6e:a8:58:
                    17:43:12:0f:7a:30:7a:00:ec:87:84:e7:12:12:bd:
                    af:98:ee:af:6e:7c:98:9d:77:af:53:1e:b5:c1:f1:
                    2d:ae:c6:15:36:67:2a:95:6e:ff:9e:de:27:a7:c9:
                    a8:e2:cb:8b:c5:38:e8:0a:6d:b9:54:3b:62:0f:c7:
                    13:3e:09:71:b3:f8:47:fa:c3:68:30:54:51:da:3a:
                    d7:3f:2e:a8:00:95:1f:50:10:79:2b:2c:e6:cc:19:
                    4b:42:c0:b8:c2:61:1b:ff:55:a6:87:e6:48:40:b7:
                    b3:9f:88:ee:f4:9f:ae:27:1a:67:3c:aa:c2:17:49:
                    e5:ef:c5:05:77:8a:4a:6e:ec:94:2b:2e:b1:bc:f9:
                    26:ef:61:eb:b1:5e:e0:9b:a9:3f:93:cf:8f:72:75:
                    bc:c6:9c:51:0b:b1:37:3a:83:c8:83:40:66:de:ea:
                    e6:67:ce:75:fb:35:1d:ff:61:7d:c3:31:22:85:dc:
                    0d:f7:f4:20:cf:e5:63:4a:fa:1d:08:6b:b6:00:42:
                    26:22:ba:35:9d:13:61:2b:84:5f:1e:bc:46:dc:3b:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EF:C5:AE:F0:90:CC:91:04:F0:07:19:0F:8F:1F:4C:10:72:76:17
            X509v3 Authority Key Identifier:
                keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/Be_FrvCQzJEE8AcZD48fTBBydhc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.200.0/22
                IPv6:
                  2a01:7820::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:e4:73:fd:f7:4b:98:93:7b:6b:a7:6d:b1:b9:8f:ee:96:cc:
         0b:dc:cc:ae:11:33:f0:60:90:5b:98:e9:77:b8:52:02:fc:d8:
         f1:94:31:e5:fd:59:e6:2e:f2:02:d4:99:2b:3c:ca:b0:d0:68:
         ef:da:32:ef:7d:4c:8b:95:47:82:a0:77:6d:b9:4b:74:d4:ef:
         8c:00:6f:9c:27:51:54:d1:b0:9a:07:0d:a8:05:25:1d:8f:d7:
         dd:6b:c0:54:27:c6:c3:3f:70:63:86:15:6a:17:4c:96:0f:91:
         0f:95:55:f9:94:ee:46:ea:29:42:aa:84:0a:8f:53:94:22:dc:
         e5:73:81:25:9c:3c:bc:99:5a:03:6f:99:c3:c8:fb:fe:79:a9:
         ac:b8:82:1a:0b:19:0c:ca:2c:c6:56:66:7b:7d:e2:2f:fd:b2:
         6d:ff:0e:a5:3b:fa:1f:1a:13:30:a3:77:b2:d7:44:25:3e:74:
         42:5d:ea:87:f8:73:86:60:b4:2a:e6:bb:23:5c:65:00:b4:84:
         01:ca:d0:80:ca:01:16:68:36:b2:6f:29:9e:a6:c2:47:58:8c:
         3d:65:4d:e1:0f:c6:b2:71:12:99:07:d1:b8:a2:e8:d6:e4:f7:
         7b:ca:46:79:bd:9f:67:c8:b1:ba:a6:51:16:d1:78:c9:91:d8:
         41:8b:2c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----