Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/v-xNq330WdoiiPlZjkVxav1Azgs.roa
File:                     v-xNq330WdoiiPlZjkVxav1Azgs.roa (raw, json)
Hash identifier:          5Gfb2PYZTagtc6GTH7GCkVgOxZ7Twxzj2kExG39tIfs=
Subject key identifier:   BF:EC:4D:AB:7D:F4:59:DA:22:88:F9:59:8E:45:71:6A:FD:40:CE:0B
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       01941F8CA9A43C2B0754997F648CF9235504
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/v-xNq330WdoiiPlZjkVxav1Azgs.roa
Signing time:             Wed 01 Jan 2025 01:48:19 +0000
ROA not before:           Wed 01 Jan 2025 01:48:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44188
IP address blocks:        185.165.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:a9:a4:3c:2b:07:54:99:7f:64:8c:f9:23:55:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Jan  1 01:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bfec4dab7df459da2288f9598e45716afd40ce0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7b:00:b7:5f:9b:e1:ed:af:d4:ef:ca:38:57:
                    b6:87:0f:df:ce:b1:36:ea:36:9f:4c:13:75:d2:b6:
                    a7:eb:92:ca:31:28:9c:79:15:5d:7b:a9:53:53:ea:
                    a5:40:e2:8d:76:2f:1c:c7:0e:e7:52:3f:e5:33:f2:
                    50:66:9b:84:5f:17:18:89:af:9d:a6:54:c2:c7:8e:
                    30:5b:a9:fd:fa:d6:ea:36:eb:0a:68:7c:da:12:31:
                    0f:2a:a9:b9:55:47:c9:7d:ff:58:de:67:9a:de:fb:
                    88:f9:bd:2b:a0:6c:f5:b9:b0:50:f1:39:b1:b7:ea:
                    ba:81:53:4e:8b:dc:1b:6b:ac:5c:7f:ee:c0:5e:d0:
                    ff:e3:ae:62:75:80:87:c6:07:ff:bb:93:b6:f2:54:
                    83:ec:96:13:b9:fc:90:b5:dd:81:e5:ea:25:c1:88:
                    0d:c3:35:44:1e:75:2a:00:2c:76:12:de:8e:4e:a1:
                    aa:52:14:e3:73:a4:c6:6d:c0:70:44:0e:7c:5d:eb:
                    31:39:c3:81:cf:2f:25:6e:5b:6c:89:59:fe:3c:98:
                    05:29:9a:c6:11:cf:1b:7e:52:0d:5e:33:db:ea:d2:
                    c9:a3:fe:06:ee:3f:cb:3a:f3:02:fc:8e:9a:97:bf:
                    bd:96:f8:aa:7b:69:31:b8:18:69:f9:24:b6:f5:97:
                    e5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EC:4D:AB:7D:F4:59:DA:22:88:F9:59:8E:45:71:6A:FD:40:CE:0B
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/v-xNq330WdoiiPlZjkVxav1Azgs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.165.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:47:16:8f:33:62:0a:bd:66:57:a3:bc:da:ab:16:97:ce:
         24:23:e0:ec:0b:85:05:03:9d:68:42:17:b5:72:02:0f:68:53:
         7f:4c:32:6f:42:04:af:41:1f:46:d2:f7:52:56:b1:2c:c9:a8:
         fe:c2:1f:74:dc:68:ef:fb:9b:99:74:77:95:12:d9:61:43:d1:
         c1:1d:e0:be:a1:d5:8c:00:81:1b:4c:5d:f0:d8:64:d6:8b:65:
         6a:80:e6:1a:84:fe:2e:c4:89:f5:73:45:44:77:17:e1:96:60:
         75:d2:1c:31:da:fb:15:d7:e5:e7:da:dc:87:28:7d:c2:4b:d8:
         9a:ff:ea:1f:7d:92:2e:fb:59:1d:68:81:ef:76:02:71:7a:fc:
         54:48:11:a6:7c:45:91:2e:ed:e2:1f:46:2c:23:c3:4e:76:50:
         47:82:fd:d5:dc:f4:23:a8:af:dd:65:d1:39:2c:9d:7d:e0:21:
         62:ef:f1:65:46:40:a6:b9:43:69:75:99:62:ce:a2:f7:c2:fd:
         a3:18:39:19:59:11:56:1b:d9:5b:b3:46:15:c0:1c:75:5a:29:
         86:9c:b6:d8:9f:92:95:0a:50:82:1b:8d:3c:d5:18:1e:23:9d:
         87:25:fa:aa:cd:65:c0:01:16:91:11:ba:cc:7b:e2:6b:3c:61:
         c6:a9:d4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----