Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jlnoXMNZHNXlmc_-XuiJFoTSNO8.roa
File:                     jlnoXMNZHNXlmc_-XuiJFoTSNO8.roa (raw, json)
Hash identifier:          +eBu72EJKLdnD6EkWhJBdQ4a9YkF0qlPQBY/0o6+G/8=
Subject key identifier:   8E:59:E8:5C:C3:59:1C:D5:E5:99:CF:FE:5E:E8:89:16:84:D2:34:EF
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       01941F8CA410F02F40997FB4D7D151C788FA
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jlnoXMNZHNXlmc_-XuiJFoTSNO8.roa
Signing time:             Wed 01 Jan 2025 01:48:18 +0000
ROA not before:           Wed 01 Jan 2025 01:48:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3352
IP address blocks:        194.187.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:a4:10:f0:2f:40:99:7f:b4:d7:d1:51:c7:88:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Jan  1 01:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8e59e85cc3591cd5e599cffe5ee8891684d234ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:41:c3:f4:3a:92:0e:de:89:3a:63:18:7a:0d:
                    ba:65:51:5d:59:5d:9e:de:2b:12:9c:34:c5:1d:14:
                    5c:80:69:93:aa:36:34:08:f4:31:62:a3:09:29:c2:
                    f2:56:28:91:1b:45:ea:4c:15:d0:d4:68:d5:d7:6c:
                    31:30:aa:7a:ea:ff:54:18:5f:4b:7a:ad:7b:a9:e9:
                    9a:83:7c:26:03:04:78:58:13:54:ed:3e:91:b6:c7:
                    6b:42:cb:06:ab:61:ad:12:de:a7:58:04:b2:8d:2a:
                    02:fe:76:e4:91:3b:ca:fc:97:01:21:50:b1:a8:91:
                    8d:0e:82:fe:7b:2e:40:73:55:ef:2f:7b:0f:ee:4f:
                    fd:83:b4:b3:d4:f6:b0:3b:87:a7:1d:2b:1c:5b:90:
                    05:fa:71:f7:5b:b3:49:a8:0c:18:d0:a8:e4:d5:da:
                    2d:36:f8:86:58:82:cb:69:a5:0e:fd:5c:d1:1a:aa:
                    56:96:b6:0c:b5:5b:c5:52:bf:97:ce:97:18:a2:4c:
                    1c:04:5c:66:20:ff:89:00:30:41:2d:df:00:cb:5d:
                    72:78:f8:35:9e:49:44:50:19:11:6c:d0:c2:d6:7f:
                    10:2d:29:29:d9:42:e8:17:7f:4e:03:d9:30:a0:21:
                    fa:45:17:cd:15:06:f6:e9:b3:d3:af:a8:c4:45:54:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:59:E8:5C:C3:59:1C:D5:E5:99:CF:FE:5E:E8:89:16:84:D2:34:EF
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jlnoXMNZHNXlmc_-XuiJFoTSNO8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.187.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:ef:6f:09:5f:48:3f:55:52:f8:38:43:04:2c:d4:6d:1e:eb:
         2e:26:eb:c0:ea:55:4d:df:fd:a5:b8:19:01:72:dc:d9:6c:36:
         d4:7c:93:c8:3a:b1:47:87:ce:f0:94:f9:eb:87:ca:fb:f2:7a:
         f3:06:37:2d:3f:3c:70:f7:7b:ce:b8:f9:1a:0d:ea:6d:cb:9a:
         e0:fb:38:0c:a5:03:3f:1e:ea:f8:99:1a:e4:60:ae:81:36:74:
         91:04:6b:a2:07:01:dc:1d:eb:44:42:d1:ba:1b:89:f9:4c:f9:
         56:a3:45:e5:56:a7:86:e5:f7:61:7a:54:49:7d:12:01:e6:88:
         da:2b:37:74:e8:bf:ac:7c:b4:41:99:05:4d:e3:c9:ab:77:5f:
         7d:c2:e8:6e:22:a2:9e:7f:8d:c8:c9:6c:0c:da:9c:27:b0:5d:
         f1:14:75:e4:1c:8e:a9:78:70:e3:a5:df:76:36:82:5f:53:e1:
         83:74:ac:5a:cb:f5:32:0e:d7:26:f8:2d:f4:24:02:eb:f2:c6:
         4a:0e:7e:36:22:2a:28:79:73:16:47:c0:25:78:cf:99:10:be:
         86:74:18:86:fb:21:70:18:d8:e4:eb:fb:7f:6b:d6:94:f6:21:
         d8:4e:28:df:54:ad:05:9e:54:53:27:c0:5d:df:da:49:31:80:
         c3:34:2f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----