Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/99ovKIs7DqoXCFgMc3tY-Dn815s.roa
File:                     99ovKIs7DqoXCFgMc3tY-Dn815s.roa (raw, json)
Hash identifier:          LCqxC97TPyTHpUsMAjf+F4zipAHzhEXoBKAv7DqvaTU=
Subject key identifier:   F7:DA:2F:28:8B:3B:0E:AA:17:08:58:0C:73:7B:58:F8:39:FC:D7:9B
Certificate issuer:       /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Certificate serial:       019426D9A12D94C143704509A5422E9CFF92
Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/99ovKIs7DqoXCFgMc3tY-Dn815s.roa
Signing time:             Thu 02 Jan 2025 11:49:44 +0000
ROA not before:           Thu 02 Jan 2025 11:49:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208613
IP address blocks:        45.87.72.0/22 maxlen: 24
                          2a0e:f680::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:a1:2d:94:c1:43:70:45:09:a5:42:2e:9c:ff:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
        Validity
            Not Before: Jan  2 11:49:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f7da2f288b3b0eaa1708580c737b58f839fcd79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:60:81:53:fd:8b:9e:25:4e:22:2f:33:6f:
                    c2:ac:0e:94:91:0f:67:b2:71:fe:f0:35:11:2d:35:
                    25:7e:41:0c:42:e1:f1:a6:30:10:5a:50:07:17:27:
                    ac:8a:16:34:66:1c:17:ad:ff:71:36:61:46:b2:f1:
                    ba:97:2d:e6:b1:8f:5f:95:7d:46:4f:0a:e5:9b:3f:
                    5d:99:30:7e:a0:2f:f6:a8:ba:38:04:46:ff:ed:6b:
                    b6:d3:44:0f:c3:dc:d3:65:06:f8:cf:c7:b8:27:25:
                    a2:21:58:e6:0c:9e:e9:84:05:30:dd:c6:c4:b6:28:
                    c4:0a:b4:ff:80:ab:fe:c8:a9:bf:5b:8d:84:09:57:
                    b5:bf:e5:d7:9a:f2:47:e4:9c:34:25:64:98:78:5f:
                    77:34:c9:50:81:76:95:80:df:8c:0d:a4:66:64:5c:
                    4e:a2:fd:88:18:66:e8:4e:5b:a4:f7:72:e0:62:b5:
                    37:66:f6:b0:56:b9:03:2b:01:76:3f:54:61:84:cf:
                    f3:39:f1:22:36:25:33:4f:02:48:6c:66:8f:4d:fe:
                    c5:d9:18:af:93:8a:39:2c:c1:67:ba:81:40:a8:fe:
                    c5:6d:a7:29:60:06:64:fe:82:75:77:8e:0d:cc:28:
                    3d:b7:d0:b8:98:69:89:28:89:a7:85:de:ee:80:3d:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DA:2F:28:8B:3B:0E:AA:17:08:58:0C:73:7B:58:F8:39:FC:D7:9B
            X509v3 Authority Key Identifier:
                keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/99ovKIs7DqoXCFgMc3tY-Dn815s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.72.0/22
                IPv6:
                  2a0e:f680::/29

    Signature Algorithm: sha256WithRSAEncryption
         c5:48:bb:5d:3d:30:a3:3a:f6:1e:ca:d8:c4:49:b7:1e:fa:90:
         0a:0d:a2:bb:51:31:22:a3:03:16:f2:f3:93:9d:b0:5c:c5:8a:
         05:91:82:4c:87:6b:b9:65:24:14:d7:5b:be:8c:23:7e:21:15:
         73:e7:9f:c0:09:43:e6:17:85:18:c7:f7:93:77:6c:67:9f:73:
         eb:00:0a:63:5d:02:12:f5:72:3c:c6:0c:56:69:59:2b:11:7f:
         be:a0:95:3c:22:9c:64:14:96:64:4b:1e:e5:5c:ec:d0:10:6e:
         8d:9f:fb:13:25:98:89:52:d4:09:dc:12:d4:e2:5c:a6:68:e5:
         69:e9:7e:4f:ce:31:e6:42:00:ae:36:27:27:88:01:0c:ed:3f:
         3a:a1:32:5c:4f:1a:f8:aa:af:18:89:9a:3f:94:0c:e3:99:ce:
         49:f3:60:8c:1c:7f:4f:e5:e0:4b:d6:06:0d:20:c9:5e:8d:16:
         7b:a6:b4:ce:83:f3:5a:3b:92:7e:cc:53:2c:2c:b7:ae:48:ef:
         65:a8:48:d9:34:b8:70:3e:f8:82:f4:4c:5a:e0:4f:95:f6:a7:
         4b:6f:0c:07:45:71:7f:89:c1:5a:22:0c:9f:d1:08:39:8a:ba:
         4d:8b:22:76:72:4c:cf:d2:f5:db:7f:78:fd:76:08:14:8d:9b:
         95:00:44:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----