Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/FZHqYlN5sSygs3AGT6JjnO5Nmhs.roa
File:                     FZHqYlN5sSygs3AGT6JjnO5Nmhs.roa (raw, json)
Hash identifier:          sERrGBENBVLLIjmvI4dssKvhdqbG5h/21qxwv4zx0B0=
Subject key identifier:   15:91:EA:62:53:79:B1:2C:A0:B3:70:06:4F:A2:63:9C:EE:4D:9A:1B
Certificate issuer:       /CN=78688182b8f253c5cf946294786b7901435fc8c3
Certificate serial:       01949DBF96CA9D0878EB45D95AB423C3E593
Authority key identifier: 78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/FZHqYlN5sSygs3AGT6JjnO5Nmhs.roa
Signing time:             Sat 25 Jan 2025 13:56:06 +0000
ROA not before:           Sat 25 Jan 2025 13:56:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201746
IP address blocks:        45.141.194.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:9d:bf:96:ca:9d:08:78:eb:45:d9:5a:b4:23:c3:e5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78688182b8f253c5cf946294786b7901435fc8c3
        Validity
            Not Before: Jan 25 13:56:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1591ea625379b12ca0b370064fa2639cee4d9a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c5:4d:b3:6a:67:c3:c7:9f:04:73:31:22:4d:
                    a1:3b:6d:a0:96:8e:8a:a7:4b:99:96:ea:7f:da:fb:
                    87:47:35:97:66:69:3f:05:36:d2:36:d0:c6:aa:be:
                    7e:33:74:c1:2a:70:8e:ee:6d:ec:5d:6c:07:c0:8b:
                    e3:68:6d:f0:e6:83:67:e7:1c:09:ec:c5:99:07:fc:
                    54:23:a3:f6:34:04:8a:97:6f:51:5f:4b:8b:d3:69:
                    8c:e4:b9:23:34:63:10:ca:a0:a0:6f:57:1a:c5:dd:
                    3d:41:96:14:ab:ee:cb:39:74:4a:fd:c6:0a:9d:7c:
                    2d:08:6b:bd:1b:4e:f5:e7:43:c1:21:70:8e:ea:9a:
                    08:78:29:f1:7f:c5:bf:9c:52:fe:9e:5d:fe:0a:c1:
                    26:c0:c4:e9:a8:22:b4:1a:89:15:35:43:d3:08:d7:
                    c0:b6:7c:14:80:37:f9:67:2b:8a:35:d1:b0:e1:74:
                    4a:79:57:fd:78:00:28:40:b7:f8:6f:7a:b3:4b:5c:
                    c7:4c:71:63:04:0d:30:43:25:dc:5c:89:ce:f2:77:
                    b0:4e:91:4b:3f:87:e0:4f:c3:e8:36:c4:63:41:f9:
                    1b:29:9f:23:89:d9:80:6e:e7:f8:7e:3e:a0:73:07:
                    76:71:f4:cc:a5:fe:04:30:04:17:ea:91:a9:c9:b8:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:91:EA:62:53:79:B1:2C:A0:B3:70:06:4F:A2:63:9C:EE:4D:9A:1B
            X509v3 Authority Key Identifier:
                keyid:78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/FZHqYlN5sSygs3AGT6JjnO5Nmhs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:eb:34:68:81:5a:ae:b9:f7:23:ac:5a:1f:b5:ce:a8:27:83:
         ec:a4:23:f9:45:fb:aa:d0:2b:91:57:21:a5:71:56:73:d1:cc:
         61:85:77:44:12:ef:cc:97:d9:f6:2e:52:53:a7:b4:8a:25:af:
         92:27:0a:05:2b:4f:3f:bf:5e:5d:85:8f:02:10:66:72:9a:81:
         f3:5b:92:38:5b:70:55:73:c8:55:3b:c3:2c:b9:f8:d5:ea:8f:
         25:57:5f:10:5a:5b:ce:7c:29:b4:48:2b:6e:43:bc:60:65:9f:
         7e:de:45:47:ec:c9:09:ea:a7:60:63:31:97:48:8a:b6:5a:42:
         80:5b:83:0f:77:45:45:22:4b:58:d8:a0:c6:45:c0:c9:d7:02:
         81:a8:0c:0f:c0:06:79:66:77:0c:a9:89:bd:19:c7:84:25:12:
         94:f2:be:c3:a7:d7:91:1b:2a:2c:b9:f9:b3:67:50:a8:51:34:
         d7:80:9b:4f:fc:d4:28:d3:01:57:c5:3f:b7:8d:6a:6e:6b:5d:
         ad:94:3d:bc:83:f0:fd:fc:f1:2e:27:85:90:52:0a:18:b3:e2:
         94:b3:c3:2f:67:2e:6c:ed:99:fb:94:95:06:2a:60:d5:f5:9a:
         af:30:46:d3:9a:3b:73:c9:25:85:5f:df:56:53:b8:13:56:70:
         46:dc:c8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----