Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/gPqZz-ULbWxNpVtGrAcbURafLCM.roa
File:                     gPqZz-ULbWxNpVtGrAcbURafLCM.roa (raw, json)
Hash identifier:          bhtp8MkxjHqH+uI5CHLafEhg4ALYqQQHfi1+8hAlks8=
Subject key identifier:   80:FA:99:CF:E5:0B:6D:6C:4D:A5:5B:46:AC:07:1B:51:16:9F:2C:23
Certificate issuer:       /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial:       01942823259464858CA4A9211CF8EFB2543F
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/gPqZz-ULbWxNpVtGrAcbURafLCM.roa
Signing time:             Thu 02 Jan 2025 17:49:39 +0000
ROA not before:           Thu 02 Jan 2025 17:49:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     2852
IP address blocks:        158.194.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:25:94:64:85:8c:a4:a9:21:1c:f8:ef:b2:54:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
        Validity
            Not Before: Jan  2 17:49:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=80fa99cfe50b6d6c4da55b46ac071b51169f2c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8b:ec:d1:80:e4:c6:a0:d8:91:ce:a7:57:cc:
                    25:c0:87:9e:d9:94:dd:dc:af:3d:94:af:8c:c5:4e:
                    4d:eb:fa:7d:ce:c1:e7:44:6f:63:c3:fa:5e:64:a2:
                    2e:25:53:cb:9e:a4:7e:1d:78:22:cd:0d:66:cf:d6:
                    72:6c:c6:b1:36:30:9d:9a:8b:eb:48:a4:91:a0:5a:
                    68:6d:6d:c9:0d:85:01:19:9b:e5:50:05:ae:14:ae:
                    04:a2:d4:5a:89:d4:fe:ad:43:23:93:96:36:e4:e2:
                    a6:43:e1:8a:3b:3e:49:b1:aa:7c:8f:b3:e8:1e:23:
                    ca:39:e9:da:1a:d0:b4:e5:97:50:44:87:6d:62:5b:
                    6d:de:88:82:05:19:fe:a6:41:7a:41:9f:3a:ef:2b:
                    66:03:61:ed:53:57:3c:2c:e0:07:fe:2d:cd:73:db:
                    e0:cd:bf:b3:4a:d2:9d:77:e5:8a:55:c9:29:d0:d5:
                    7f:73:fd:5a:5e:65:46:55:70:24:47:e0:bc:e0:11:
                    47:20:3e:76:c6:9b:c6:75:d3:d6:16:76:f6:8b:a0:
                    d6:57:c5:37:70:36:77:b9:12:b0:15:fc:6f:7a:5d:
                    06:63:a9:f8:e4:84:bc:74:87:f2:4e:ec:c8:d9:39:
                    b3:02:ff:42:a8:90:98:ff:a0:dd:08:58:e9:3a:58:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FA:99:CF:E5:0B:6D:6C:4D:A5:5B:46:AC:07:1B:51:16:9F:2C:23
            X509v3 Authority Key Identifier:
                keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/gPqZz-ULbWxNpVtGrAcbURafLCM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:e6:4a:60:45:b7:49:78:05:60:93:eb:9c:b1:c4:26:21:0e:
         cb:07:ee:3d:d0:7e:b4:f8:c1:b9:71:e3:74:51:11:5f:14:ce:
         f3:b9:ad:d3:b8:66:1e:bc:cf:56:66:9f:0b:3d:22:9d:46:f6:
         4a:6b:5c:91:6d:24:4e:21:ba:06:a4:10:70:26:8e:4f:1a:92:
         4f:d6:4a:7b:22:65:dc:67:1e:8e:f0:d8:4f:d2:f0:4a:eb:03:
         08:c0:0b:80:7c:f1:73:63:09:e3:7f:a9:72:ba:ad:67:ca:fd:
         f7:a1:40:30:57:07:6d:fb:7f:c8:de:10:0d:91:74:e1:ce:40:
         d6:44:00:5d:f3:c1:d7:ff:5a:6e:4e:1b:5a:bb:98:c0:7a:e2:
         8e:ca:eb:3c:04:e6:78:e5:76:87:a4:29:7d:5a:c8:08:b6:6f:
         6b:c2:6d:ab:8b:48:1b:a4:f1:8e:0c:e2:1c:a2:b9:d8:c2:e6:
         94:bf:20:30:1a:4b:1d:61:d9:c3:ab:7b:fd:b2:6e:4a:12:6e:
         20:1a:6c:27:83:16:5b:70:26:33:be:c3:ff:d9:92:9f:d6:83:
         07:8d:3b:93:c1:e1:88:d9:ef:26:02:1e:28:c3:df:c7:7f:06:
         4b:70:6a:1e:fa:b3:0a:bc:ff:a2:61:bb:fe:41:af:c7:c3:d7:
         db:f4:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----