Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/dWwErd_mokXXmN_P8kENBCE0PMw.roa
File:                     dWwErd_mokXXmN_P8kENBCE0PMw.roa (raw, json)
Hash identifier:          ueFTlBSG5L4FgExCeEcGiYqa4Qs9VKvoJjX2L/pdPVc=
Subject key identifier:   75:6C:04:AD:DF:E6:A2:45:D7:98:DF:CF:F2:41:0D:04:21:34:3C:CC
Certificate issuer:       /CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Certificate serial:       018CC492CB8EB0F5180D20E6C68740E1DEC3
Authority key identifier: 89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/dWwErd_mokXXmN_P8kENBCE0PMw.roa
Signing time:             Mon 01 Jan 2024 10:30:03 +0000
ROA not before:           Mon 01 Jan 2024 10:30:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202625
IP address blocks:        185.158.196.0/22 maxlen: 22
                          2a07:af00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:cb:8e:b0:f5:18:0d:20:e6:c6:87:40:e1:de:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
        Validity
            Not Before: Jan  1 10:30:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=756c04addfe6a245d798dfcff2410d0421343ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:95:a7:09:cd:bc:43:79:76:24:bd:e3:4d:
                    b5:54:4e:09:dd:64:bb:63:ac:7c:57:3c:cb:8e:a6:
                    06:da:a6:71:0f:63:d5:82:97:6f:f0:ab:8a:7d:5b:
                    7d:2d:63:4e:cd:0d:5b:62:ea:d2:22:1e:ca:70:d0:
                    55:35:c1:9c:6b:4a:0c:f0:f9:78:53:36:69:c1:1e:
                    c8:5b:d7:b5:a3:53:61:8e:14:d6:07:d2:53:af:ad:
                    53:c4:da:c0:11:7a:73:55:48:b2:a5:b5:b6:8d:d7:
                    1c:d0:8e:63:a8:8b:56:8c:98:98:e5:26:1f:24:cd:
                    87:39:f7:ac:d1:de:0a:7f:cd:b4:b0:c7:0b:6a:04:
                    ba:7f:08:d9:39:a1:f4:da:ea:e0:9b:f3:a1:53:18:
                    9e:51:80:56:1c:df:00:f0:9e:b1:56:45:12:9f:64:
                    3b:42:7d:d2:02:9f:55:8e:c9:c9:83:6c:c1:32:82:
                    6e:b5:6c:1c:f9:67:46:f6:48:d9:b5:f9:dc:2f:2d:
                    53:ed:2b:a9:29:32:53:11:b5:33:b1:e8:f1:fe:7f:
                    e5:06:b7:b9:b2:a1:5f:f9:07:00:ec:71:ad:a1:84:
                    1e:49:1b:d5:0c:0c:68:eb:d1:17:e0:16:7a:9f:7f:
                    34:36:0d:92:87:8e:ca:fb:f4:ea:b4:94:26:83:42:
                    5f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6C:04:AD:DF:E6:A2:45:D7:98:DF:CF:F2:41:0D:04:21:34:3C:CC
            X509v3 Authority Key Identifier:
                keyid:89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/dWwErd_mokXXmN_P8kENBCE0PMw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.158.196.0/22
                IPv6:
                  2a07:af00::/29

    Signature Algorithm: sha256WithRSAEncryption
         56:fa:07:2c:bf:52:aa:70:05:5b:e0:38:01:16:de:a1:a3:54:
         70:d5:5b:06:29:64:54:ab:56:b0:78:a2:75:5b:c7:83:b6:8a:
         97:a1:df:4b:59:6b:54:da:7a:a1:61:b9:a3:a9:ec:fb:cb:1d:
         0f:9f:3f:30:0a:ce:1c:b0:2c:ea:8e:e7:94:6c:f6:41:0d:91:
         16:81:99:fb:03:26:ec:7e:cd:e7:0b:e3:fb:af:54:9b:22:21:
         9f:e8:4c:f3:a0:06:42:15:70:52:aa:f7:fc:07:fe:e1:a5:77:
         6a:29:6d:cd:3e:5e:35:eb:de:fc:bb:14:55:e1:50:dd:53:70:
         f4:51:fb:72:c4:5e:18:e2:af:8c:00:1f:d5:88:0a:5e:b7:be:
         99:6a:7c:7d:09:a6:99:25:a7:22:bf:be:38:ae:2b:60:6e:70:
         72:79:e5:46:60:64:4f:79:69:f9:55:bf:f4:3c:f8:2b:52:18:
         ae:4b:78:86:6c:0d:0a:67:05:fb:27:38:85:2f:b7:0e:61:f9:
         1a:9a:c6:58:da:00:22:5d:fe:ba:b6:26:79:95:7d:cf:cd:c8:
         4d:2c:af:5f:8d:22:65:e3:f3:1f:33:b3:d8:78:0f:c5:e2:c2:
         80:4f:a3:a8:bb:fc:40:09:6f:67:42:d1:08:f7:81:d1:fb:15:
         1c:ea:0c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----