Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/lCgKihl6lv9I1HmInNqD60nii-E.roa
File:                     lCgKihl6lv9I1HmInNqD60nii-E.roa (raw, json)
Hash identifier:          +eRiAGt7XlmYsCebRhtIL5+eM1SWrg49PToO3o+8iRc=
Subject key identifier:   94:28:0A:8A:19:7A:96:FF:48:D4:79:88:9C:DA:83:EB:49:E2:8B:E1
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       0195A2AB4B9651A8318843C8A2B675D86E75
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/lCgKihl6lv9I1HmInNqD60nii-E.roa
Signing time:             Mon 17 Mar 2025 05:54:49 +0000
ROA not before:           Mon 17 Mar 2025 05:54:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39232
IP address blocks:        37.114.128.0/18 maxlen: 18
                          37.114.128.0/19 maxlen: 19
                          37.114.160.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:a2:ab:4b:96:51:a8:31:88:43:c8:a2:b6:75:d8:6e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: Mar 17 05:54:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=94280a8a197a96ff48d479889cda83eb49e28be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:14:28:ef:5c:07:c2:6a:1c:cb:15:17:01:3c:
                    e4:0a:84:81:cf:fd:7d:b5:8a:f8:e4:17:6f:8b:6d:
                    14:55:33:92:99:60:02:3c:c8:85:17:34:50:fd:5a:
                    e0:a5:9b:9b:47:12:02:c4:31:2d:2e:85:0b:4c:da:
                    f6:13:ae:cb:3e:9a:b9:29:cc:4f:33:b8:40:13:c8:
                    27:21:e0:ba:24:bf:c3:22:61:b3:39:29:81:eb:8e:
                    f1:bd:5e:96:da:a5:9a:df:05:f7:53:56:bf:fc:c8:
                    68:25:83:a8:cb:ee:96:bb:de:ae:dd:64:7e:60:2c:
                    d1:c0:ae:79:f4:ac:ee:4a:1a:c1:b1:2a:3a:2b:63:
                    b5:91:c9:af:18:63:1b:09:74:95:4b:a9:2b:df:af:
                    85:e7:e1:ca:c9:34:2c:79:56:5d:5a:63:9b:49:5e:
                    bf:2e:be:dc:91:96:ef:2b:69:66:36:7d:a1:0e:f0:
                    41:5f:b0:d1:24:f4:2e:cf:0d:e1:7b:83:b7:63:c9:
                    08:99:36:74:11:32:03:6f:a6:ce:8d:8e:a8:ce:86:
                    ad:8e:ed:fc:37:c4:41:cd:36:f0:5d:71:c8:36:7e:
                    e2:31:e6:4f:81:a3:4e:61:e3:f6:ff:bf:b4:28:16:
                    38:6f:d9:4f:58:3d:38:32:d1:ed:ab:0d:88:53:61:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:28:0A:8A:19:7A:96:FF:48:D4:79:88:9C:DA:83:EB:49:E2:8B:E1
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/lCgKihl6lv9I1HmInNqD60nii-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.114.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5f:b5:68:e0:c3:4f:4d:74:7e:00:18:3a:a6:cf:19:55:60:e8:
         fb:bf:01:b9:6e:b2:61:ae:23:3c:06:37:47:79:34:e4:88:9f:
         06:47:8e:c1:de:66:71:99:92:8e:49:32:ba:68:f6:90:4f:a9:
         38:38:b3:4b:a2:09:f9:8a:25:bb:64:df:57:a9:50:af:fd:ce:
         45:53:99:e0:e3:f8:19:ee:d5:de:f0:70:d3:ba:bd:ed:a1:6d:
         5e:d3:91:34:59:4d:ac:a6:d4:fa:67:89:78:5a:39:62:de:b2:
         4f:43:51:2f:d5:bb:c0:3b:0b:f8:08:a7:bf:33:49:7f:a2:0e:
         7b:76:f4:14:15:10:bb:5a:49:96:d7:f1:01:1c:98:28:b0:9e:
         7d:45:9b:10:36:b9:ca:0f:fd:48:f0:ae:b4:57:b7:8e:65:a5:
         86:50:b5:da:ed:3a:20:df:69:75:2b:a6:8a:64:15:56:37:78:
         af:dc:8c:5a:be:52:3a:6c:a8:1e:dc:bd:be:b9:6e:c5:fa:22:
         9f:d2:bd:ce:cb:07:6b:99:93:a8:ea:78:d1:f2:57:bb:45:dd:
         4b:94:bb:b9:e7:fe:bc:dd:16:ec:a6:5c:2e:5b:78:65:5c:da:
         8b:9c:b2:91:37:f1:32:ac:69:f9:0a:42:28:94:9f:e7:6a:76:
         c8:15:b5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----