Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/lvvS-y_t3pi3cv-oXJNHuuwFX60.roa
File:                     lvvS-y_t3pi3cv-oXJNHuuwFX60.roa (raw, json)
Hash identifier:          fbIaohthqLUB14sBjDthABWLRfajk00zaK8xsJAksno=
Subject key identifier:   96:FB:D2:FB:2F:ED:DE:98:B7:72:FF:A8:5C:93:47:BA:EC:05:5F:AD
Certificate issuer:       /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial:       019560C554C9DD4EB9ABA94A6A168F0611EE
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/lvvS-y_t3pi3cv-oXJNHuuwFX60.roa
Signing time:             Tue 04 Mar 2025 10:48:19 +0000
ROA not before:           Tue 04 Mar 2025 10:48:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211993
IP address blocks:        185.233.34.0/24 maxlen: 24
                          2a10:de80::/32 maxlen: 32
                          2a10:de80::/48 maxlen: 48
                          2a10:de80:1::/48 maxlen: 48
                          2a10:de80:b000::/36 maxlen: 48
                          2a10:de80:b101::/48 maxlen: 48
                          2a10:de80:b12a::/48 maxlen: 48
                          2a10:de80:b12c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:60:c5:54:c9:dd:4e:b9:ab:a9:4a:6a:16:8f:06:11:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
        Validity
            Not Before: Mar  4 10:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=96fbd2fb2fedde98b772ffa85c9347baec055fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:91:a0:f3:a3:a1:dd:1e:ec:30:7c:94:21:6d:
                    5f:73:55:1a:aa:0d:96:42:b9:cd:d2:54:80:42:1d:
                    ed:af:59:5f:c7:59:97:54:1e:e7:73:8d:af:d4:a9:
                    63:3e:47:1e:f8:13:b2:48:45:43:8c:89:5e:a1:f4:
                    20:1a:fa:d9:3f:c0:c9:dd:8b:a9:7f:2d:bb:f7:48:
                    1d:ce:4a:f7:f9:f5:7b:5f:29:d6:04:f0:0c:b7:6e:
                    88:5e:87:c6:8f:c0:bc:d9:dc:eb:80:eb:30:53:a8:
                    78:88:08:b9:8f:01:ae:c5:af:5f:17:1c:0b:b7:d1:
                    ed:7a:8d:b8:15:d6:cb:f8:bf:63:e1:15:f9:ba:74:
                    47:52:4c:56:59:3e:de:ad:d0:d7:f7:48:fc:36:3c:
                    ba:2a:7a:29:10:63:d3:c0:25:43:01:b9:77:7d:01:
                    01:be:f2:9e:08:10:e8:0c:40:c1:28:9f:6d:e4:7a:
                    88:8b:18:db:fe:26:47:4d:48:f2:17:25:6c:b1:68:
                    d0:82:45:5b:a8:48:9a:b6:eb:03:a5:b1:d8:ad:72:
                    9d:d8:63:73:c5:8f:e6:4c:60:71:b5:c2:24:ac:7f:
                    21:ba:bf:7c:13:a1:b0:9b:71:32:c6:5f:a0:59:a7:
                    00:04:ad:22:2b:42:47:ba:b0:d3:45:2b:b9:ab:72:
                    d9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FB:D2:FB:2F:ED:DE:98:B7:72:FF:A8:5C:93:47:BA:EC:05:5F:AD
            X509v3 Authority Key Identifier:
                keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/lvvS-y_t3pi3cv-oXJNHuuwFX60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.34.0/24
                IPv6:
                  2a10:de80::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:76:50:d7:c6:48:cf:0d:46:a3:b8:74:4c:c2:36:e9:14:e9:
         99:27:3f:c6:6a:be:84:16:32:be:f0:4f:01:6a:b7:8f:cf:54:
         d1:3a:fe:74:a1:ca:b0:df:ef:06:f5:db:5c:99:3d:16:11:df:
         a0:a8:7e:0f:36:f9:43:ab:86:23:eb:bd:42:dd:95:01:7d:3b:
         bd:5d:09:6c:90:ea:dd:d9:d7:84:36:5e:f9:4b:ab:96:2f:bd:
         fc:ab:4f:de:97:bb:c2:29:30:b1:ea:e3:ec:e5:f9:98:8f:2f:
         fb:4c:8c:7a:e3:aa:b7:d2:57:df:4e:ab:4f:fb:55:16:dc:45:
         96:92:22:1d:f8:bd:91:b2:05:5f:1a:71:c9:b9:1d:a6:05:0b:
         d3:4d:26:46:1b:03:e8:44:99:e2:33:2f:16:b9:fd:8f:ac:f9:
         55:dc:5b:be:9e:8b:29:44:67:ca:d6:7d:58:b8:09:8c:64:65:
         41:e2:eb:72:b4:03:f0:f9:6a:9b:2a:5a:ad:40:81:8b:7a:f6:
         01:31:f3:94:ad:39:87:0a:9c:89:06:24:5a:5e:ca:47:97:4f:
         7a:62:9c:bc:3b:b2:a9:fc:fb:34:1c:d3:64:81:87:c7:4e:00:
         cd:41:c7:cf:b5:13:48:e9:99:76:cf:4b:30:ad:4d:5c:48:5c:
         08:ca:5b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----