Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/BJt218vyPAIZF_L2ax-fXs78RO0.roa
File:                     BJt218vyPAIZF_L2ax-fXs78RO0.roa (raw, json)
Hash identifier:          P3rkYDci/na2QczVHIWVXTso4Bg4G7j/ooyuS4+Wnxw=
Subject key identifier:   04:9B:76:D7:CB:F2:3C:02:19:17:F2:F6:6B:1F:9F:5E:CE:FC:44:ED
Certificate issuer:       /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Certificate serial:       019427B491742683B4A1AAC4CF05E011B809
Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/BJt218vyPAIZF_L2ax-fXs78RO0.roa
Signing time:             Thu 02 Jan 2025 15:48:52 +0000
ROA not before:           Thu 02 Jan 2025 15:48:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48200
IP address blocks:        193.36.46.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b4:91:74:26:83:b4:a1:aa:c4:cf:05:e0:11:b8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
        Validity
            Not Before: Jan  2 15:48:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=049b76d7cbf23c021917f2f66b1f9f5ecefc44ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:71:6e:f5:40:6d:02:47:66:d9:50:d0:8d:b6:
                    9e:05:4d:62:c8:87:92:e4:c2:73:75:c5:1c:0c:cc:
                    38:9e:98:3e:f1:48:76:a7:82:05:fe:41:bf:c8:4d:
                    ff:43:71:01:dd:a1:59:ea:0b:ab:5a:1c:6d:03:5a:
                    a3:2d:a3:52:25:56:a0:83:f8:29:f6:ae:8d:7a:ec:
                    5c:e2:32:a0:c5:cd:91:02:7a:5e:b0:a9:d6:97:f2:
                    8f:68:7e:0a:09:4a:ef:ca:19:a4:0b:4d:c8:3a:2c:
                    a5:c0:20:51:79:bd:6d:ab:2a:fd:fb:7e:73:13:04:
                    69:94:f8:5a:64:b7:ab:c4:bd:e9:9e:6a:18:56:d7:
                    0c:4f:09:1a:38:6f:e4:53:c4:54:22:e9:3c:6a:1a:
                    85:d5:64:68:41:45:3e:d9:05:4a:1e:9e:a5:ed:e9:
                    29:8e:8d:55:5f:ef:6b:5c:39:98:7a:6c:ae:1b:ed:
                    fd:c8:4e:8f:95:f6:42:26:89:90:99:c1:6d:43:34:
                    b6:c4:b2:8d:b1:40:df:c6:7a:33:a6:24:fc:51:bc:
                    9a:91:0f:05:c4:f7:c9:cd:88:53:13:b7:65:9b:09:
                    95:6b:da:2c:56:e4:9f:ed:eb:17:34:01:54:d0:3d:
                    df:85:f9:e6:aa:c0:1c:dc:97:f5:de:7a:9b:58:22:
                    12:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9B:76:D7:CB:F2:3C:02:19:17:F2:F6:6B:1F:9F:5E:CE:FC:44:ED
            X509v3 Authority Key Identifier:
                keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/BJt218vyPAIZF_L2ax-fXs78RO0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:2d:d4:b8:47:b9:eb:c0:00:08:c6:13:0f:b3:73:1a:a6:53:
         06:8c:81:53:90:79:66:79:a3:5f:a6:99:46:0a:0c:76:51:c6:
         26:21:11:4e:f4:3d:e8:87:c5:b6:95:73:66:32:6d:90:65:7c:
         b5:98:38:77:28:4d:db:ca:f2:c8:01:dc:b3:15:60:ec:02:4e:
         b6:db:3f:c8:66:a9:35:2c:f4:f6:9f:68:30:bb:4b:75:87:9f:
         05:75:c1:9c:1e:a8:bf:91:ca:94:51:25:11:50:b7:13:a2:4d:
         09:72:7e:87:86:96:ee:d5:ea:06:d9:a7:70:83:da:86:fd:ce:
         61:a6:0a:e2:7b:88:c3:55:ba:ae:03:81:fb:2b:02:81:78:3c:
         74:d4:02:3f:6b:d1:e4:d6:82:ad:6b:33:71:ab:2b:0f:ab:d8:
         88:29:24:5f:07:56:69:ab:f0:72:d1:82:7b:d8:97:16:b6:e4:
         f1:81:82:22:76:5d:de:c2:63:64:54:5c:e8:45:bc:c3:7d:44:
         c1:fb:b6:4d:ab:ad:f2:03:d8:aa:32:c9:66:af:df:b3:41:94:
         c5:b2:8f:b1:82:f8:6a:fe:65:66:dd:41:bd:c0:81:7b:63:6a:
         31:f4:8c:e8:dc:6d:c5:31:4c:8b:fc:9a:af:8e:ba:c1:d8:b5:
         08:d2:a8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----