Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/Kalap6T2m16JSwDjwLxjNXHdNyY.roa
File:                     Kalap6T2m16JSwDjwLxjNXHdNyY.roa (raw, json)
Hash identifier:          JVJj7fl4hbm6J8kNJ+/MRSc7T2RN3F+EXAgFNtKUtbU=
Subject key identifier:   29:A9:5A:A7:A4:F6:9B:5E:89:4B:00:E3:C0:BC:63:35:71:DD:37:26
Certificate issuer:       /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial:       019420D5E24726A67BBD80263E1AED47532F
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/Kalap6T2m16JSwDjwLxjNXHdNyY.roa
Signing time:             Wed 01 Jan 2025 07:47:55 +0000
ROA not before:           Wed 01 Jan 2025 07:47:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59554
IP address blocks:        5.178.112.0/21 maxlen: 21
                          2a01:9b40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:e2:47:26:a6:7b:bd:80:26:3e:1a:ed:47:53:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
        Validity
            Not Before: Jan  1 07:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=29a95aa7a4f69b5e894b00e3c0bc633571dd3726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:6d:09:3b:21:25:02:e6:f4:cc:ea:fd:d4:
                    c1:ff:56:90:ca:1d:3b:fa:00:66:63:c8:a9:b8:70:
                    39:f0:49:a2:a5:3b:7d:53:e7:29:7c:77:5e:7c:81:
                    33:19:84:f8:f9:96:7a:0d:2d:77:59:c4:97:19:50:
                    f3:33:19:1e:92:81:7d:4a:03:ce:d1:fc:ba:ee:17:
                    63:2a:fb:63:1c:0d:af:b1:ed:58:9e:36:44:7e:85:
                    bf:3a:33:f1:f5:ed:94:b2:7f:b3:01:cc:14:64:61:
                    e1:6e:59:4c:b7:89:20:59:f5:ec:75:83:a5:f2:9a:
                    f3:49:b4:95:22:93:0c:d7:54:44:e7:59:29:b8:b3:
                    9c:65:52:7f:0b:4e:38:54:05:49:ff:02:72:01:ad:
                    06:d1:ea:55:03:4b:17:9b:88:a8:79:b8:8a:fe:e9:
                    b5:00:fc:db:16:7b:e7:4f:63:61:ce:d2:83:c9:7b:
                    8a:cf:d6:f1:d8:2e:a4:1f:95:32:5c:02:3c:ed:53:
                    16:b9:c4:5a:68:07:c3:e0:df:8d:83:8e:9a:08:ad:
                    3b:91:54:f4:54:a4:71:7a:66:b5:f1:ae:23:e1:0d:
                    02:b1:69:b2:9e:57:e9:c2:1a:d3:49:ec:76:27:88:
                    9a:4f:b6:7d:af:80:50:57:50:a6:61:09:26:26:4c:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A9:5A:A7:A4:F6:9B:5E:89:4B:00:E3:C0:BC:63:35:71:DD:37:26
            X509v3 Authority Key Identifier:
                keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/Kalap6T2m16JSwDjwLxjNXHdNyY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.178.112.0/21
                IPv6:
                  2a01:9b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:81:11:54:bb:5b:95:f1:c7:73:88:4d:eb:c5:09:2b:fe:5b:
         e7:3b:6c:b8:66:fd:20:a7:34:1e:7f:23:a7:eb:6b:5a:68:cd:
         60:f2:98:c4:34:08:da:33:21:66:ef:03:f9:35:42:e9:4f:09:
         3d:82:93:b7:4b:36:ae:fe:ce:48:4f:df:34:d2:16:18:8f:9f:
         58:e2:92:6a:c6:f9:d4:a1:f1:b0:2f:13:94:e7:4c:a3:fa:3e:
         03:c7:d1:bd:29:81:ff:47:fb:bf:4d:7b:bc:72:e5:b7:34:2d:
         5b:89:d0:1f:6c:84:cb:39:44:20:99:19:0a:07:9f:cb:a2:ea:
         52:0b:bb:39:8b:ce:86:e6:e1:1a:ce:98:40:b8:be:2e:40:79:
         53:bb:e6:f1:92:a1:2a:7e:49:b4:16:8c:a0:8f:d5:e3:82:90:
         30:db:5a:c5:44:fc:3d:bf:78:91:10:49:a8:75:aa:84:28:b7:
         23:96:a6:14:1b:a5:7e:cf:42:36:e6:91:a2:88:c2:06:73:0a:
         65:50:a0:73:e9:62:50:2c:b5:5c:0d:87:86:9d:cc:03:11:cc:
         42:36:a2:71:c2:98:9d:fe:a8:e4:4f:76:a4:75:20:18:5c:d2:
         10:25:fe:70:2d:43:8f:5c:e0:4b:ce:44:59:db:e6:b4:2d:f5:
         98:53:2c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----