Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/qjMEBhnPSGniZnI84qDRLbjstP0.roa
File:                     qjMEBhnPSGniZnI84qDRLbjstP0.roa (raw, json)
Hash identifier:          zxHWsvNMH3bRN0wwXS6+6h5nHO/vNMw7yKNF0sDPkqs=
Subject key identifier:   AA:33:04:06:19:CF:48:69:E2:66:72:3C:E2:A0:D1:2D:B8:EC:B4:FD
Certificate issuer:       /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Certificate serial:       01942444A29AD42FCC5ED1019D8B8E233705
Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/qjMEBhnPSGniZnI84qDRLbjstP0.roa
Signing time:             Wed 01 Jan 2025 23:47:45 +0000
ROA not before:           Wed 01 Jan 2025 23:47:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     61428
IP address blocks:        185.6.84.0/22 maxlen: 24
                          2a03:dc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:a2:9a:d4:2f:cc:5e:d1:01:9d:8b:8e:23:37:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
        Validity
            Not Before: Jan  1 23:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aa33040619cf4869e266723ce2a0d12db8ecb4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7a:27:cd:c8:d5:16:bd:92:94:a5:3f:b8:a6:
                    4c:26:e2:39:40:28:e6:71:ef:b1:12:ba:26:d2:c7:
                    d3:26:5b:e1:ef:20:b7:8a:0a:19:03:c1:a2:01:3e:
                    35:bb:a6:a3:28:b5:18:df:fe:e2:a6:45:d1:00:73:
                    37:1a:f8:e1:a5:59:c2:21:3a:01:b5:84:85:a2:82:
                    fd:64:54:f4:30:ad:24:b1:c3:9c:e1:d1:f7:fa:f6:
                    d8:e9:b7:7a:eb:1e:60:d5:76:fe:04:9c:50:31:4b:
                    2a:ac:0d:1f:a6:c9:6f:b4:33:34:70:76:b9:2d:10:
                    d8:15:e6:b1:d7:75:be:de:f5:e8:ef:4a:c6:43:ad:
                    5a:4b:d9:d2:4b:09:6b:15:71:a8:77:c6:ff:4c:0b:
                    fb:4a:73:2a:2f:db:dc:50:91:17:36:de:26:bc:82:
                    c9:85:43:77:a5:d8:9f:98:38:b1:12:f3:54:5d:3c:
                    65:42:fa:2f:88:e5:ca:ad:25:e7:ac:55:01:08:37:
                    3e:07:c1:a0:9a:3e:2c:1f:78:af:a2:e3:cb:db:b5:
                    c5:95:cc:ab:02:a1:01:a1:d1:ba:00:d3:e0:ea:0a:
                    85:79:86:3d:99:6f:42:aa:8a:04:e4:19:30:20:11:
                    31:8a:1d:d8:47:0f:94:64:24:02:f7:e7:87:e1:31:
                    c8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:33:04:06:19:CF:48:69:E2:66:72:3C:E2:A0:D1:2D:B8:EC:B4:FD
            X509v3 Authority Key Identifier:
                keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/qjMEBhnPSGniZnI84qDRLbjstP0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.6.84.0/22
                IPv6:
                  2a03:dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:4e:30:e6:34:eb:32:51:0e:07:fe:d0:c9:c2:8b:b1:41:68:
         f5:b9:3d:a3:b4:f8:16:b4:81:ed:95:ac:33:c6:5f:73:63:18:
         2f:d1:2f:00:5c:e9:66:49:f0:7c:8f:f4:b4:d5:36:fe:f6:91:
         86:f2:53:03:d1:28:0c:eb:4f:45:04:c0:78:f4:fc:c9:49:05:
         a1:9c:c1:73:1f:bf:15:6c:81:cf:82:c7:70:f5:8b:5a:31:b3:
         a0:cb:1e:66:a5:dc:5a:32:d7:18:1c:2b:fe:90:bc:8c:bb:ba:
         57:6f:25:b7:0d:81:4b:2b:3d:a7:29:9a:18:ce:c2:e9:ac:33:
         51:cc:b2:9b:b4:80:0c:21:97:32:d1:f4:f5:7c:fb:01:90:c2:
         4b:3c:48:45:18:d9:49:a8:30:2a:a7:c5:f8:3b:0a:98:d9:b2:
         d5:06:8e:5a:81:7d:39:18:0c:5c:62:4c:70:87:f9:2d:87:ea:
         72:c3:9b:39:9b:9f:e5:fb:14:f1:8e:56:4b:ee:99:01:eb:ce:
         57:93:45:5d:15:4f:1b:c7:ea:0a:0b:93:df:82:0f:d4:95:59:
         96:f6:cd:44:e1:04:82:51:b0:6f:87:1e:8a:40:a5:c6:07:cd:
         58:91:b8:15:44:f4:44:0d:c7:84:0e:b6:f3:9a:e6:31:32:71:
         86:7b:bd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----