Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/mblfFy3mNdc1SwdAwOx5WQVE19A.roa
File:                     mblfFy3mNdc1SwdAwOx5WQVE19A.roa (raw, json)
Hash identifier:          C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=
Subject key identifier:   99:B9:5F:17:2D:E6:35:D7:35:4B:07:40:C0:EC:79:59:05:44:D7:D0
Certificate issuer:       /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial:       0194206861CEA2C0A4CA1403AC59060B1DF4
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/mblfFy3mNdc1SwdAwOx5WQVE19A.roa
Signing time:             Wed 01 Jan 2025 05:48:19 +0000
ROA not before:           Wed 01 Jan 2025 05:48:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206112
IP address blocks:        80.92.237.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:61:ce:a2:c0:a4:ca:14:03:ac:59:06:0b:1d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
        Validity
            Not Before: Jan  1 05:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=99b95f172de635d7354b0740c0ec79590544d7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ff:8a:24:3f:5d:94:b5:a2:f8:95:52:55:c6:
                    c8:8e:b9:c1:d1:da:a2:66:56:22:69:c2:69:53:7c:
                    a4:0d:4c:37:c2:f2:22:91:76:e9:f6:32:a4:95:c1:
                    f0:15:b8:31:9d:60:97:37:01:ae:ee:4c:37:97:27:
                    b4:9f:1a:18:9e:31:f1:07:e6:f2:20:20:16:ee:63:
                    82:a9:7d:b6:33:f0:94:d8:24:15:f5:94:38:1f:94:
                    c0:19:dd:0c:eb:09:f3:99:3f:67:c4:8f:27:5b:ee:
                    db:6d:37:19:71:86:21:6b:6d:78:2e:25:e2:59:65:
                    0a:94:01:6d:bf:73:fe:e7:08:6d:c5:cc:22:34:20:
                    60:c7:c2:7f:7d:8e:2c:c4:d0:9b:0b:27:6c:41:79:
                    58:dd:23:b0:48:42:73:8e:c6:7f:bc:75:0b:a2:93:
                    ed:1c:15:d6:e4:74:6a:1d:e8:19:de:31:61:72:b3:
                    a9:eb:18:6d:33:4c:b8:b7:5a:f9:19:e9:be:69:1e:
                    ff:f5:52:c2:bc:8a:cb:7a:c9:0a:71:1a:68:ba:6b:
                    57:51:3f:7c:e3:04:31:72:f0:53:a3:84:e5:c6:36:
                    d7:ad:f4:6f:73:8c:2a:b7:de:e8:2f:6b:7d:56:0f:
                    05:27:79:5f:ab:6e:e7:0b:85:c2:fc:d8:4a:21:fc:
                    1a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B9:5F:17:2D:E6:35:D7:35:4B:07:40:C0:EC:79:59:05:44:D7:D0
            X509v3 Authority Key Identifier:
                keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/mblfFy3mNdc1SwdAwOx5WQVE19A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.92.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:c7:67:5b:4d:6a:2d:8c:f7:22:f8:5e:95:a0:8f:08:cc:bc:
         8d:33:d1:64:be:6e:ab:6a:52:b0:87:7f:cd:40:21:4d:02:09:
         80:32:fd:14:8c:04:bd:1c:ab:02:3f:28:1a:ba:ff:66:f3:f8:
         26:db:31:fa:36:6f:0a:8d:18:6e:db:09:1d:87:2a:c3:18:94:
         c7:21:16:e9:08:0d:7f:b1:a3:1a:91:94:35:32:63:72:97:a3:
         3c:3e:ef:23:87:b6:f8:25:4a:4c:59:8f:a3:da:31:2a:e8:82:
         6f:27:8d:68:62:2c:d8:2a:af:ab:ae:ae:dc:92:d5:14:ab:f9:
         f9:4f:f7:ec:2d:f9:76:2d:23:af:3b:38:36:bb:7d:ec:90:a5:
         ab:42:da:f8:1c:dc:da:41:b4:d5:00:da:bc:92:1e:c6:37:f3:
         f9:2f:2b:a6:5e:c7:08:f6:ca:a5:31:03:77:44:56:4c:9d:70:
         f6:7b:53:32:57:3d:46:4f:89:13:ef:f9:b3:fe:65:1b:96:b4:
         a9:36:d0:2f:10:85:d9:5b:68:aa:08:f0:b2:cc:5a:b7:0c:6f:
         d4:77:b7:1c:88:f5:af:17:9d:af:05:a4:1e:55:a8:3c:18:81:
         16:a7:31:8e:5b:74:6c:ef:07:00:f3:d6:9c:af:54:58:d4:48:
         54:f8:21:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----