Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/1-rpc7ufolrPPESf1-RPYDxCY_T8.roa
File:                     1-rpc7ufolrPPESf1-RPYDxCY_T8.roa (raw, json)
Hash identifier:          aMrW8McI1AnE66yXNAmSVq0+rlupGq2T5Ly3LIkG59o=
Subject key identifier:   FA:BA:5C:EE:E7:E8:96:B3:CF:11:27:F5:F9:13:D8:0F:10:98:FD:3F
Certificate issuer:       /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial:       01942143D9E867B65ED91DAB1FAC5901A3CB
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/1-rpc7ufolrPPESf1-RPYDxCY_T8.roa
Signing time:             Wed 01 Jan 2025 09:48:02 +0000
ROA not before:           Wed 01 Jan 2025 09:48:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62193
IP address blocks:        185.44.108.0/22 maxlen: 24
                          2a01:6420::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:d9:e8:67:b6:5e:d9:1d:ab:1f:ac:59:01:a3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
        Validity
            Not Before: Jan  1 09:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=faba5ceee7e896b3cf1127f5f913d80f1098fd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:10:96:63:c5:16:28:50:3d:20:4a:c0:9e:d3:
                    c8:ac:bc:37:d0:26:a7:82:9a:f2:c2:a0:29:ab:64:
                    94:e8:3e:3e:68:28:5c:94:f0:0b:69:42:21:da:72:
                    b9:97:10:d9:2c:8b:de:38:9c:02:4d:c0:51:c2:66:
                    16:04:d7:92:3e:1d:16:ad:7c:66:5e:59:04:78:fb:
                    51:9f:0a:35:38:71:92:0a:87:53:f0:7c:05:36:87:
                    6b:18:7c:da:48:d9:26:bf:eb:16:96:09:c8:6d:54:
                    24:82:05:d8:be:5d:02:0c:88:18:4a:35:0f:c2:7e:
                    b5:3c:ff:77:95:66:ad:4d:42:93:ab:ae:23:a9:1a:
                    42:c3:43:9e:9d:0a:09:8b:06:4e:84:51:e1:7f:a7:
                    d7:af:62:b4:30:10:c4:90:77:da:5c:bb:56:8f:f1:
                    30:4a:df:bf:fa:30:48:e2:d5:57:50:a9:40:22:ab:
                    70:b5:cd:a2:7d:1b:26:c1:fe:77:f5:11:66:c4:e0:
                    2f:2c:08:76:f4:68:82:f5:1f:3b:ab:4f:75:e2:dc:
                    9f:34:7d:ac:3e:ab:8e:8c:87:64:87:c0:01:43:da:
                    78:cf:24:4a:d0:dd:01:5d:26:42:5b:40:87:46:52:
                    b1:ba:1f:97:c3:1c:1c:66:52:59:59:a6:a4:9b:51:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BA:5C:EE:E7:E8:96:B3:CF:11:27:F5:F9:13:D8:0F:10:98:FD:3F
            X509v3 Authority Key Identifier:
                keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/1-rpc7ufolrPPESf1-RPYDxCY_T8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.108.0/22
                IPv6:
                  2a01:6420::/29

    Signature Algorithm: sha256WithRSAEncryption
         1e:5f:a7:43:55:97:8e:c3:a2:50:46:ff:da:72:68:f6:d8:51:
         df:38:4e:51:34:1b:ae:bb:ff:da:cc:db:dc:57:00:7a:8d:e4:
         e5:0b:a4:28:14:c6:90:3b:59:db:6a:f5:8f:65:06:e7:04:51:
         5c:10:ae:bb:b2:40:94:15:27:8f:1b:83:37:ae:e4:30:0d:f2:
         0b:c6:25:39:dc:55:7e:d7:ac:79:ec:e2:0b:54:ea:87:6a:75:
         d7:f4:b2:c8:ec:fd:e2:96:9e:5a:c0:54:21:34:09:2d:e9:c3:
         3f:f1:bb:7f:61:35:7e:93:06:24:0c:63:b3:6b:d6:61:3a:ee:
         f6:0e:c2:c2:02:44:f6:ee:23:44:e8:40:a6:57:a8:f0:82:e2:
         25:a8:76:a8:32:a1:2e:8f:a2:c5:6b:bb:17:80:e0:95:91:ca:
         52:52:b3:fd:9a:85:7d:9e:e4:e5:cf:57:ff:12:b6:e2:81:95:
         e2:3a:c8:30:89:75:3f:7b:93:29:28:47:5e:af:5d:cc:b8:2e:
         b4:e7:67:29:9d:43:bc:44:4c:0a:ee:3d:8c:87:bd:2b:c1:ef:
         eb:f7:3e:dd:d9:c7:c1:e1:67:64:15:10:96:d3:0e:ae:d0:39:
         d2:30:5f:17:a2:0d:9f:6a:eb:73:b6:0f:20:63:76:94:49:5b:
         50:2e:70:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----