Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/30ltggt23rh7GTkDQejt9lmB4lI.roa
File:                     30ltggt23rh7GTkDQejt9lmB4lI.roa (raw, json)
Hash identifier:          0Vi+rnQhpwPVxdHvuD/xFHoYMxHHBZAXfOAyM/8y4Rg=
Subject key identifier:   DF:49:6D:82:0B:76:DE:B8:7B:19:39:03:41:E8:ED:F6:59:81:E2:52
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       01941F8CC21CAB04956166CCE0CDE308A29D
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/30ltggt23rh7GTkDQejt9lmB4lI.roa
Signing time:             Wed 01 Jan 2025 01:48:25 +0000
ROA not before:           Wed 01 Jan 2025 01:48:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206930
IP address blocks:        185.188.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:c2:1c:ab:04:95:61:66:cc:e0:cd:e3:08:a2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Jan  1 01:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=df496d820b76deb87b19390341e8edf65981e252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7b:88:45:0c:ca:90:72:19:15:35:8b:ea:1d:
                    c2:f9:3c:0b:08:53:0d:d8:cb:f9:f0:0c:1c:cf:b3:
                    b4:a5:80:86:56:32:57:e6:1c:ff:88:c8:6b:38:d3:
                    0f:4d:fa:04:43:86:3a:7a:e5:3d:97:aa:fe:cf:11:
                    22:39:50:ca:b4:95:64:21:93:39:63:1e:1f:14:c9:
                    8d:94:42:f8:75:ad:17:7a:72:2d:b8:18:d5:ba:22:
                    af:69:66:69:c8:b1:ef:fb:dc:2b:dd:9e:6b:2c:04:
                    9f:30:b2:7d:91:81:49:e5:fe:2f:d4:28:d4:a6:1e:
                    88:59:ac:a7:08:90:1a:88:c2:09:31:23:29:00:dc:
                    21:e0:d3:0a:b8:6a:86:7c:47:b3:5c:8c:67:a4:71:
                    80:f5:0b:60:2d:d3:6e:61:35:3d:37:86:71:14:ac:
                    d3:a8:4d:12:6f:3c:4a:be:92:52:0d:38:ba:f6:5d:
                    b4:8c:c5:06:8d:9d:5e:91:7b:aa:2d:33:02:2a:02:
                    a5:6e:87:78:f2:c9:c0:03:ce:85:e3:21:5e:d2:18:
                    fc:d9:e0:d6:d3:cf:20:f4:71:6a:06:fd:44:f6:89:
                    fe:09:30:39:a2:b6:8f:fa:3a:fd:60:8e:d4:5b:1c:
                    86:aa:5b:68:73:17:40:7c:62:b1:69:5a:a5:7f:d9:
                    2f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:49:6D:82:0B:76:DE:B8:7B:19:39:03:41:E8:ED:F6:59:81:E2:52
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/30ltggt23rh7GTkDQejt9lmB4lI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:7e:5e:01:a8:f2:a9:33:3f:dd:fe:4f:b1:10:95:a2:eb:37:
         e5:9d:6d:b5:ab:b3:d6:12:fe:f4:2e:41:f9:ce:8e:58:ee:6f:
         a1:95:44:c8:51:2f:2e:6e:90:33:cb:72:4f:de:9d:6d:18:db:
         bf:20:a1:52:3c:3c:a3:03:bd:82:69:02:4c:d4:8f:a8:7a:b3:
         2a:14:6f:2b:8a:f2:95:ba:31:8f:0e:cf:7e:99:b6:c9:97:9b:
         bb:4e:63:2c:ca:36:1b:f6:8f:8e:f0:af:61:8f:76:10:87:5d:
         61:b9:1e:01:c4:33:20:63:51:51:77:07:6a:07:4a:b4:bf:ae:
         4d:74:01:51:87:d1:8a:b0:9e:66:d6:fd:f4:d8:99:ea:bb:5b:
         e6:d6:ad:79:02:91:d9:a0:b5:db:49:c0:7d:e9:65:bb:1a:2b:
         2f:3c:34:36:35:59:a6:c3:de:5e:f5:97:fa:bc:08:c5:a1:2c:
         8e:7d:48:02:9e:9e:7f:ad:df:2e:98:90:51:16:c0:f2:75:d9:
         6a:a3:33:c0:50:39:f8:5c:48:b4:6e:36:e4:3f:93:75:da:d7:
         b0:aa:ac:eb:4c:75:b0:37:db:4d:0d:67:a2:0c:9c:c8:a8:85:
         e4:f9:2e:35:fd:19:48:0e:cd:3f:51:e5:c0:00:e4:71:52:32:
         c9:90:af:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----