Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/bXwup2eDRWJRx9GTrYPVFoErhfk.roa
File:                     bXwup2eDRWJRx9GTrYPVFoErhfk.roa (raw, json)
Hash identifier:          UbhOIugJ4oofUAz2tZciGbACV9Kgx7pGWE+kfVDs8E8=
Subject key identifier:   6D:7C:2E:A7:67:83:45:62:51:C7:D1:93:AD:83:D5:16:81:2B:85:F9
Certificate issuer:       /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Certificate serial:       01942521F243CF10A9D134EEDC4C31FE9A84
Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/bXwup2eDRWJRx9GTrYPVFoErhfk.roa
Signing time:             Thu 02 Jan 2025 03:49:29 +0000
ROA not before:           Thu 02 Jan 2025 03:49:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211147
IP address blocks:        185.120.181.0/24 maxlen: 24
                          2a0e:ec0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:f2:43:cf:10:a9:d1:34:ee:dc:4c:31:fe:9a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
        Validity
            Not Before: Jan  2 03:49:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6d7c2ea76783456251c7d193ad83d516812b85f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:57:fa:4a:69:ab:71:5c:a1:a2:ba:92:4f:
                    6f:4b:f1:c7:9b:a7:99:70:d0:52:a3:92:49:71:2f:
                    d9:dc:b9:d2:64:e2:ab:cd:85:04:65:37:b1:05:7e:
                    6e:8f:a3:29:38:03:2e:1d:06:b0:47:dd:66:29:5a:
                    24:ad:88:ad:57:dc:16:1e:19:a6:9f:b0:66:0c:53:
                    dc:49:4a:0f:25:e8:fe:4e:3c:99:1e:16:12:ec:d0:
                    a1:bc:71:91:da:fd:98:b0:39:ab:85:ed:eb:1e:78:
                    3d:a1:8d:5a:4f:b0:a0:87:1c:dc:f0:3b:e7:e2:b6:
                    e3:3e:85:54:b1:7b:3e:1d:a8:e1:79:b4:ce:2c:90:
                    f0:a5:9f:22:1f:13:41:ce:e4:30:d0:6e:2b:66:e9:
                    42:97:12:8f:a5:dd:54:8f:35:ea:4c:c7:76:9f:28:
                    bf:e0:64:01:95:35:52:9c:84:78:8c:e6:72:dc:e7:
                    a0:bc:6c:80:8f:30:7b:e2:c1:6c:31:b9:0c:f2:7d:
                    d1:bb:31:5c:49:aa:12:73:d1:cd:43:17:99:a6:ab:
                    0e:33:f9:b7:41:c8:d2:05:01:b0:8f:18:3d:57:0c:
                    01:47:c9:e5:b0:75:1c:c8:c8:ed:1b:7b:be:01:2a:
                    59:12:ad:d6:ee:d0:38:c7:44:8c:d6:8e:58:0e:95:
                    ed:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7C:2E:A7:67:83:45:62:51:C7:D1:93:AD:83:D5:16:81:2B:85:F9
            X509v3 Authority Key Identifier:
                keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/bXwup2eDRWJRx9GTrYPVFoErhfk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.120.181.0/24
                IPv6:
                  2a0e:ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         49:1c:8c:a6:71:0b:2a:91:69:5b:27:8d:d2:e6:f5:65:ff:dc:
         ed:2e:b4:4a:4c:9e:7a:46:63:95:05:b5:d2:3e:ba:d8:d6:56:
         00:41:7c:bc:48:b0:d9:9d:23:5e:a6:0b:6e:dd:d9:6c:dc:09:
         92:92:55:27:7f:58:25:04:14:32:23:d2:da:4b:d7:a0:a6:d4:
         13:d6:3c:83:0e:e3:2d:a1:56:00:a3:cf:bb:d4:75:27:1c:19:
         97:9c:ee:4f:8e:b6:61:8a:1a:80:6a:21:7d:2c:e4:06:45:50:
         90:25:18:6c:77:da:24:0c:4e:fa:95:e4:19:93:89:27:1a:62:
         ad:72:19:30:3a:25:02:da:78:bf:26:73:fa:74:e8:3e:6d:d6:
         4c:38:db:97:60:36:85:7e:8b:2a:65:d3:4b:df:c7:66:4b:a0:
         87:30:1c:bd:e4:a4:82:82:4d:5c:dc:ab:64:56:d3:9d:25:20:
         ce:cc:9c:f5:b4:b9:29:5d:9f:4c:dd:a8:03:d4:e8:fa:40:0e:
         81:93:54:28:d9:f2:41:b1:5e:1e:df:08:f9:7f:fe:8a:4f:7b:
         56:71:00:ac:0f:23:1f:0d:37:af:9c:6a:62:3c:b0:f8:07:77:
         82:57:d1:e9:c1:30:32:d5:8b:4a:fb:74:43:24:00:2e:a3:6e:
         7f:89:eb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----