Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/muuJi1VdiXZZEsVnfkSMCgo8AdA.roa
File:                     muuJi1VdiXZZEsVnfkSMCgo8AdA.roa (raw, json)
Hash identifier:          RV8C8rfSq70k09HRUmJ6d7w5nFgphIHDRVJYbJs+zIQ=
Subject key identifier:   9A:EB:89:8B:55:5D:89:76:59:12:C5:67:7E:44:8C:0A:0A:3C:01:D0
Certificate issuer:       /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial:       019424B25DBC6430CAD6380332B52420AF61
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/muuJi1VdiXZZEsVnfkSMCgo8AdA.roa
Signing time:             Thu 02 Jan 2025 01:47:36 +0000
ROA not before:           Thu 02 Jan 2025 01:47:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203235
IP address blocks:        185.141.140.0/22 maxlen: 24
                          2a07:24c0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:5d:bc:64:30:ca:d6:38:03:32:b5:24:20:af:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
        Validity
            Not Before: Jan  2 01:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9aeb898b555d89765912c5677e448c0a0a3c01d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:33:50:73:1f:3c:ae:16:d3:3f:3a:56:4a:
                    bc:80:a4:45:32:3d:01:b0:4c:62:da:e2:22:b5:dd:
                    03:a4:35:cf:52:45:7d:51:e0:15:06:36:0e:ee:f9:
                    1a:d4:5b:05:da:a9:04:c6:10:89:6c:ad:5f:bf:bc:
                    99:03:fb:af:7e:e3:6c:57:4c:b4:33:31:39:f0:d6:
                    0f:d5:02:03:c1:ea:13:63:32:47:30:1a:19:fd:22:
                    10:b5:5a:b1:c7:b6:9f:21:0f:ff:95:f4:41:83:cd:
                    1a:ee:16:7e:f4:f2:58:d7:2f:74:07:b0:73:1c:88:
                    5f:c3:92:93:3d:d7:8a:da:5f:b3:02:ae:fc:69:2d:
                    b2:1b:d6:b6:ac:98:23:59:00:a9:e4:6b:1e:e8:b9:
                    92:59:d7:27:9f:12:c4:df:73:a1:29:59:fa:ed:0d:
                    f6:8f:ee:3e:d9:f7:4c:c1:96:bf:9f:d1:e9:b2:5c:
                    b5:cb:b8:79:3e:58:cd:e0:f2:ec:b7:9d:63:f7:a1:
                    bc:42:06:14:34:cf:67:74:43:f9:40:9b:ff:10:e5:
                    7e:20:ff:1e:8f:cb:95:4f:3b:54:58:06:31:46:5f:
                    9d:83:15:b2:5b:d2:d2:8a:cd:2e:3a:19:b0:40:71:
                    b8:22:00:e5:b7:66:0e:8a:1b:0b:cb:9a:c2:79:8f:
                    4d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EB:89:8B:55:5D:89:76:59:12:C5:67:7E:44:8C:0A:0A:3C:01:D0
            X509v3 Authority Key Identifier:
                keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/muuJi1VdiXZZEsVnfkSMCgo8AdA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.141.140.0/22
                IPv6:
                  2a07:24c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         06:79:6f:ca:61:a7:52:af:d9:85:68:78:11:ab:cd:56:5d:72:
         fe:e6:27:59:e7:3f:ca:0d:2c:31:b3:ae:4a:22:be:a4:ff:f5:
         2a:37:be:34:35:31:76:43:25:3d:b5:d3:8b:61:84:84:f4:82:
         5b:ff:17:97:78:fb:53:01:31:34:c7:56:29:e0:f5:6b:16:75:
         25:19:30:2f:d3:bc:bb:c3:6b:bb:d4:6d:51:a9:24:7b:68:41:
         93:c7:44:9d:b2:9f:cf:67:26:b9:99:11:64:70:f8:fc:be:9e:
         e2:46:08:64:41:c6:45:c6:64:b9:6a:7f:16:78:17:a2:d4:5f:
         db:81:9b:23:3c:6b:09:6f:aa:2a:d6:68:6a:37:9c:a8:bc:a9:
         f0:58:2e:c4:b0:6f:fb:22:60:2b:37:30:08:0a:a9:c6:3c:f3:
         ca:06:46:7f:e5:ce:cc:4b:e4:91:da:55:3e:74:26:3f:c3:df:
         67:ff:19:40:a2:77:5d:52:3a:54:e4:1d:55:c8:f1:44:f8:15:
         cf:fb:65:c8:fd:ed:2f:d9:2c:02:b2:be:42:aa:89:87:6c:8c:
         b7:19:62:f1:d8:83:f7:6e:38:3c:76:98:1d:b2:f5:df:3c:d9:
         2c:ab:c5:e9:11:22:c6:c6:b7:dd:74:eb:7c:60:2d:1f:10:a5:
         87:d0:0c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----