Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/Mf8_fr0emM9VzKXxaSCkla0gpe8.roa
File:                     Mf8_fr0emM9VzKXxaSCkla0gpe8.roa (raw, json)
Hash identifier:          M0YySaNEC7qXOCCeVLXEwEcDDAoxkin1ih/jS/04KOM=
Subject key identifier:   31:FF:3F:7E:BD:1E:98:CF:55:CC:A5:F1:69:20:A4:95:AD:20:A5:EF
Certificate issuer:       /CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Certificate serial:       019425215C4E015CD4FC6E1321C0477A87A5
Authority key identifier: 11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/Mf8_fr0emM9VzKXxaSCkla0gpe8.roa
Signing time:             Thu 02 Jan 2025 03:48:50 +0000
ROA not before:           Thu 02 Jan 2025 03:48:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     1724
IP address blocks:        161.3.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:5c:4e:01:5c:d4:fc:6e:13:21:c0:47:7a:87:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
        Validity
            Not Before: Jan  2 03:48:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=31ff3f7ebd1e98cf55cca5f16920a495ad20a5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:5d:cd:50:62:2d:53:99:65:9e:6c:cf:97:
                    9a:48:bb:24:d7:0e:5b:97:55:f9:6a:b6:9b:7b:38:
                    5e:63:1f:af:dc:38:5f:b1:91:0c:b2:f0:26:6d:86:
                    9f:d0:f4:fd:4c:dc:60:09:1a:fb:44:55:2e:7c:ff:
                    08:d5:54:08:19:ca:f0:15:d2:00:c6:48:82:8a:f2:
                    27:9d:5c:c6:a2:aa:d3:bc:9a:64:ef:e7:d7:e0:a8:
                    ed:d7:7b:65:77:ba:73:fd:bb:0d:c3:a1:eb:10:59:
                    c1:d1:f3:0f:11:c6:9a:d4:0f:81:dd:b4:ee:3b:16:
                    ab:12:60:b7:45:b7:de:5c:96:e2:c0:cf:c6:fe:31:
                    07:cc:49:4d:23:6c:02:1b:ae:0e:d6:7b:db:66:67:
                    67:59:03:82:84:dc:04:cf:ec:e4:13:18:ba:56:65:
                    7f:a7:a1:86:46:1f:a9:9b:59:7f:45:17:f0:ee:80:
                    05:7c:a1:3f:57:e1:50:2a:8c:8c:45:33:20:bf:14:
                    be:4c:b4:ec:f0:70:6c:5a:f1:02:96:1f:c6:b9:fd:
                    9c:f3:ef:dc:ea:ea:7b:b0:40:71:e9:38:6a:9d:ea:
                    e9:9c:33:cb:f9:8f:1d:28:70:87:1c:a5:24:63:48:
                    73:02:20:0e:c8:a2:81:6e:3d:a9:17:54:13:34:ea:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FF:3F:7E:BD:1E:98:CF:55:CC:A5:F1:69:20:A4:95:AD:20:A5:EF
            X509v3 Authority Key Identifier:
                keyid:11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/Mf8_fr0emM9VzKXxaSCkla0gpe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.3.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:89:e9:a7:b0:49:c1:4f:57:6d:cf:a8:be:cc:57:b1:2e:65:
         f6:9d:b6:6d:27:60:6d:b4:d9:bf:f9:30:73:56:a9:c1:bf:c0:
         f5:82:65:5b:05:5c:de:03:b7:69:03:a2:0a:de:79:35:0d:85:
         b5:10:3f:05:e3:e7:96:6c:ce:7a:9e:0b:99:e8:8c:b5:27:cb:
         1e:68:fb:a1:1d:9a:07:f3:a8:16:55:50:e8:22:ff:e4:bb:6d:
         59:72:40:b2:9b:c5:3a:01:0a:88:de:5e:ce:b0:4a:13:39:bb:
         f2:77:8f:18:aa:f6:98:41:f2:78:a1:93:51:c1:0e:59:e9:13:
         8b:cd:83:11:23:08:93:e8:5a:a8:2f:ab:73:18:8f:7c:88:e0:
         25:91:1a:a9:1f:dc:66:a3:fc:25:38:83:27:92:af:23:07:7e:
         0b:ce:b4:c1:b0:c9:86:ef:81:00:62:30:d8:94:cf:bf:03:8f:
         69:09:1a:c0:51:13:0c:3b:29:83:77:df:3f:c2:57:5d:be:9d:
         58:35:0b:2f:b5:51:3e:dd:e7:5f:8c:c1:05:59:3e:31:97:8f:
         7c:f4:36:88:f5:38:55:5a:cc:82:03:cf:57:96:65:f2:cb:ed:
         86:d6:b3:af:87:fd:5e:05:27:a0:bd:b3:85:a0:bc:95:5d:18:
         6e:db:4f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----