Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/E8OPd8A6_dgzaBqnWV201n06rXs.roa
File:                     E8OPd8A6_dgzaBqnWV201n06rXs.roa (raw, json)
Hash identifier:          hcTcW3JT+mi3CMuGaWLI1AgOOEgBHBo13pVy947r0uY=
Subject key identifier:   13:C3:8F:77:C0:3A:FD:D8:33:68:1A:A7:59:5D:B4:D6:7D:3A:AD:7B
Certificate issuer:       /CN=c4402c55758faee473938f8067a889ad5e271261
Certificate serial:       0194266BCA8939AA57801A7A14483760B96F
Authority key identifier: C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/E8OPd8A6_dgzaBqnWV201n06rXs.roa
Signing time:             Thu 02 Jan 2025 09:49:45 +0000
ROA not before:           Thu 02 Jan 2025 09:49:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8676
IP address blocks:        194.24.162.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:ca:89:39:aa:57:80:1a:7a:14:48:37:60:b9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4402c55758faee473938f8067a889ad5e271261
        Validity
            Not Before: Jan  2 09:49:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=13c38f77c03afdd833681aa7595db4d67d3aad7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b1:6a:91:9a:52:95:76:e6:f2:95:68:91:eb:
                    32:b2:7a:55:68:88:43:d7:1c:fb:21:49:2a:5a:86:
                    fa:1d:22:58:6f:3b:fc:5c:ae:ba:2d:58:e5:e5:2f:
                    10:50:64:ed:95:f5:a4:5b:9e:e7:3b:36:a2:3a:2a:
                    c8:25:ab:8c:c3:69:95:a4:bb:f2:b5:ea:50:7f:01:
                    d4:aa:fe:92:33:17:05:74:71:1b:fa:be:f3:86:61:
                    3c:f0:b9:75:5d:68:ea:78:eb:fb:88:ff:99:63:17:
                    60:d3:f6:05:f1:b4:7c:a7:3d:48:5e:31:e2:92:f2:
                    93:eb:d8:4b:c5:f1:63:5f:64:1e:c4:7a:16:56:57:
                    13:f3:29:2b:c0:1d:5a:27:f5:fa:54:b4:38:7b:2e:
                    28:24:aa:e8:2b:88:2b:a5:55:b9:50:fa:8e:2a:78:
                    07:b0:3b:9a:41:2a:9c:5d:09:2a:53:8e:52:be:11:
                    68:66:c8:bf:65:8b:0f:be:a1:da:97:bb:cb:c2:6b:
                    c0:9c:af:52:33:3f:4a:f1:db:58:f4:fd:27:24:d7:
                    2b:34:a5:38:b2:a3:1d:8b:b2:2a:03:43:d1:f9:9f:
                    7b:a2:f9:b4:20:d2:eb:f8:5e:00:3b:38:18:78:8e:
                    b8:93:fd:66:e3:49:d6:1d:f2:8a:80:ea:c4:49:00:
                    58:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C3:8F:77:C0:3A:FD:D8:33:68:1A:A7:59:5D:B4:D6:7D:3A:AD:7B
            X509v3 Authority Key Identifier:
                keyid:C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/E8OPd8A6_dgzaBqnWV201n06rXs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.24.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:13:49:73:94:b3:71:ef:df:34:aa:f2:c4:4f:aa:ca:f3:7c:
         99:40:d1:d0:78:c1:e3:ae:59:1b:6f:d5:51:05:d0:65:bb:85:
         77:ff:95:62:1f:c3:12:f0:24:9f:34:c7:74:5e:0c:83:fe:04:
         04:01:e3:1a:1e:c6:9b:6b:3e:23:57:ae:b6:63:e8:e3:bc:90:
         30:d8:44:c9:5a:f7:c4:b4:f3:66:fd:5c:ec:c5:f7:78:7a:be:
         f1:33:19:1c:d0:62:61:3b:4b:6f:fa:aa:7c:df:5c:9b:d2:ca:
         3e:c1:d9:31:f6:57:d8:a5:3c:16:51:76:bc:81:ec:16:a5:0e:
         63:fb:d2:f2:e2:5c:5f:58:a9:cd:50:f8:58:b1:2b:35:eb:37:
         b3:05:dc:61:01:96:98:9a:3b:1e:69:70:09:37:27:b4:a5:39:
         a9:d3:67:45:3d:1a:6f:26:14:ba:61:e6:b4:ce:3f:1a:98:28:
         d3:fa:73:57:62:01:f3:a3:25:a5:3a:dd:84:ef:be:af:c3:a5:
         21:cb:cf:8a:42:39:91:b7:c1:b2:71:20:1b:59:f2:15:99:c8:
         c5:00:47:2a:97:69:3d:79:a3:78:6e:0b:5e:ad:02:49:02:4b:
         03:ae:a1:80:30:fb:66:5f:32:b9:77:7c:df:86:f0:48:56:c5:
         fd:85:3d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----