Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/cNr_HYvpiGioRSQRxwB1USCGS48.roa
File:                     cNr_HYvpiGioRSQRxwB1USCGS48.roa (raw, json)
Hash identifier:          +noL2GpravnsNJo9M6TMNUj+1J6YWZz/J8eJw0GPGmE=
Subject key identifier:   70:DA:FF:1D:8B:E9:88:68:A8:45:24:11:C7:00:75:51:20:86:4B:8F
Certificate issuer:       /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial:       01950042A630918496674859D4D5E926AC7C
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/cNr_HYvpiGioRSQRxwB1USCGS48.roa
Signing time:             Thu 13 Feb 2025 17:02:02 +0000
ROA not before:           Thu 13 Feb 2025 17:02:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215130
IP address blocks:        83.142.28.0/24 maxlen: 24
                          2a14:3940::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:00:42:a6:30:91:84:96:67:48:59:d4:d5:e9:26:ac:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
        Validity
            Not Before: Feb 13 17:02:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=70daff1d8be98868a8452411c700755120864b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:12:3b:75:20:0b:d7:51:4b:3f:e3:bc:05:db:
                    df:7c:58:cc:f0:6d:2f:58:b0:5f:64:c5:80:5a:0d:
                    9a:c8:c9:6a:46:1f:1d:46:f2:f1:29:29:c0:be:e0:
                    0c:46:f1:17:e4:fc:6d:00:28:e3:49:d0:49:03:0a:
                    58:69:9e:a6:04:ef:b7:c0:8a:06:2f:87:90:b9:91:
                    cb:40:de:51:e3:69:11:90:4c:6e:34:67:b4:79:19:
                    2d:5a:92:7b:ff:d5:7f:65:49:29:68:0e:bd:46:5c:
                    9f:a8:56:02:e7:0c:ab:7d:aa:9c:3a:96:84:3c:0e:
                    3b:cb:32:64:22:13:42:2a:92:7c:06:ab:be:fd:1d:
                    69:00:a0:85:ce:99:2c:53:38:8f:37:44:d9:b0:c0:
                    ce:8b:be:08:41:68:ac:7c:07:e5:b7:ae:46:1b:2f:
                    d1:1a:52:e6:87:c9:28:9b:f2:68:59:3b:88:4f:5a:
                    92:c7:c7:cf:1e:a3:8c:4e:98:87:17:e4:92:a1:01:
                    87:27:64:a2:ed:ae:ab:19:5d:31:f4:7f:cf:c1:41:
                    a6:72:a9:18:b3:17:94:fc:74:be:9f:d8:22:23:8c:
                    d2:a6:28:33:ac:cb:d0:63:5d:c8:a5:c0:53:94:f2:
                    47:eb:96:6b:f4:f9:9f:52:e7:6a:bb:36:f0:5b:b6:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DA:FF:1D:8B:E9:88:68:A8:45:24:11:C7:00:75:51:20:86:4B:8F
            X509v3 Authority Key Identifier:
                keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/cNr_HYvpiGioRSQRxwB1USCGS48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.142.28.0/24
                IPv6:
                  2a14:3940::/29

    Signature Algorithm: sha256WithRSAEncryption
         0d:6e:1e:c1:14:02:aa:30:53:6a:13:ca:a3:19:1d:4b:34:65:
         1f:c3:ab:a5:bb:3e:b8:de:d4:eb:b0:a1:68:fa:ea:32:eb:74:
         8e:12:c3:b2:08:c3:f4:37:5f:02:43:6e:c4:13:93:dc:d9:1a:
         36:83:6f:66:b4:3f:5c:eb:0c:57:b7:ba:2b:bb:ea:9f:71:32:
         01:f0:38:78:32:72:05:ab:94:90:4a:50:22:dd:be:aa:10:ac:
         05:68:0e:90:d4:6d:4c:e0:df:99:dd:4f:e9:9d:bc:f3:20:38:
         5f:f5:2e:8f:63:d4:c5:f2:ed:a3:ab:8d:7e:44:00:9d:fa:9f:
         4f:04:06:72:83:73:e1:5c:3f:9f:99:13:5f:9c:37:15:3d:03:
         32:1e:f4:e5:9a:b5:7d:f2:7c:13:77:62:8b:20:41:13:00:c1:
         fb:b1:3b:ec:84:a4:12:8d:d5:ed:e6:56:86:ba:0f:8a:bb:e5:
         eb:5a:9d:f8:c7:8e:09:67:f4:78:00:54:e9:87:ce:84:8b:26:
         36:58:07:73:1f:94:bd:9a:ec:af:0d:3c:96:76:6d:c2:60:66:
         6e:91:e7:4b:83:3f:54:b2:12:c2:22:d0:63:b5:66:9e:1c:76:
         b1:86:fb:8d:b8:98:e8:47:84:69:80:13:dc:f1:54:2a:2f:e0:
         0a:40:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----