Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/eB4xS7CpqLRb2JgxAH_3VDuzmr4.roa
File:                     eB4xS7CpqLRb2JgxAH_3VDuzmr4.roa (raw, json)
Hash identifier:          lgPKEDL7rv+2uD71tK4QEs/9FUkCUmeC3N9KXDEj/yM=
Subject key identifier:   78:1E:31:4B:B0:A9:A8:B4:5B:D8:98:31:00:7F:F7:54:3B:B3:9A:BE
Certificate issuer:       /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial:       019424B3D900251F5EA410482BF0287C1D22
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/eB4xS7CpqLRb2JgxAH_3VDuzmr4.roa
Signing time:             Thu 02 Jan 2025 01:49:13 +0000
ROA not before:           Thu 02 Jan 2025 01:49:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199553
IP address blocks:        148.222.248.0/22 maxlen: 24
                          2a09:2940::/29 maxlen: 48
                          2a0a:e5c0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:d9:00:25:1f:5e:a4:10:48:2b:f0:28:7c:1d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
        Validity
            Not Before: Jan  2 01:49:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=781e314bb0a9a8b45bd89831007ff7543bb39abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:8e:e6:bf:a3:80:9d:2c:c9:9b:5c:61:9d:
                    67:bc:59:97:a5:b4:b5:8d:70:42:29:cd:11:0a:43:
                    18:1b:ed:a9:4c:0f:e3:bc:3c:c8:3e:ed:05:74:06:
                    5e:77:00:2b:0c:6a:41:d9:a7:cd:08:e7:e9:b8:6a:
                    bb:a3:7e:5c:9f:41:fe:e1:4c:ba:3c:d7:cf:80:d9:
                    09:67:a1:39:e6:f1:0b:05:fc:20:e6:e8:fe:26:0f:
                    4d:d9:12:89:a7:9a:31:30:c9:0d:5d:dd:29:c0:a6:
                    6b:c3:6b:b3:3e:91:1f:a2:7a:24:29:a4:de:32:df:
                    13:5d:d5:f3:2f:6e:b4:24:e7:60:a8:00:e0:8e:28:
                    08:fa:cb:97:16:8e:5a:dd:de:86:be:e0:d4:1b:5b:
                    62:dc:07:f3:55:00:d6:70:ab:19:93:ca:1a:36:3a:
                    0a:af:02:75:b1:fc:0c:b2:44:83:17:62:3e:a8:3a:
                    01:d4:e6:38:06:94:9a:4a:49:48:b9:70:2e:0b:7f:
                    86:c0:35:c7:bc:c2:cb:ff:0c:19:0e:6e:ab:e6:ae:
                    db:26:2e:6f:06:3d:fd:c0:f2:e4:1b:33:d7:ec:86:
                    36:77:2a:9e:f9:e8:74:a1:de:45:9d:33:db:3d:75:
                    e0:5b:ae:d7:da:c6:78:5b:d6:e0:d0:f0:33:b3:d9:
                    d3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1E:31:4B:B0:A9:A8:B4:5B:D8:98:31:00:7F:F7:54:3B:B3:9A:BE
            X509v3 Authority Key Identifier:
                keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/eB4xS7CpqLRb2JgxAH_3VDuzmr4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.248.0/22
                IPv6:
                  2a09:2940::/29
                  2a0a:e5c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         24:50:8f:a8:3a:bd:e4:7f:a3:1a:7f:6c:82:ae:66:35:0f:23:
         ad:d8:22:05:4e:6a:c9:16:44:b6:5c:c5:8c:c7:a5:82:e7:a6:
         c0:82:f3:ec:7a:1f:82:27:50:37:c9:ce:ab:5e:ee:1b:d8:31:
         37:a4:13:75:26:7c:e8:cf:3b:0e:a5:93:f5:7f:fb:69:da:1e:
         24:53:6f:ca:7a:3b:8f:8d:9c:59:51:a7:e0:5a:02:2b:6c:6d:
         ee:89:6f:d1:6c:ce:6f:33:aa:de:9c:bd:48:be:64:75:e2:05:
         38:a9:0e:89:ff:45:a7:3b:e9:7a:08:72:ae:52:ed:d0:6c:7a:
         ab:f9:6e:c4:c3:d8:ed:07:13:b5:ea:1f:aa:d2:c4:64:cd:c0:
         50:7b:c2:5f:b9:e1:d0:29:45:c6:c1:d3:c7:a0:50:98:e6:83:
         e9:a6:5e:00:14:db:57:c6:d7:bd:e0:b5:3a:60:7a:86:fd:ae:
         fc:f4:31:5f:19:b2:22:1a:13:eb:40:1f:7e:2a:a5:f9:b2:42:
         fa:11:1a:fc:92:6d:cf:03:51:12:2c:87:f1:13:43:73:2f:f0:
         94:ae:82:62:12:ac:11:98:71:e2:9a:7f:a4:d8:9b:1f:90:fc:
         23:da:2f:41:0f:ce:b6:89:fd:a4:63:77:9e:df:00:0b:38:6e:
         49:f7:7e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----