Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/qJCRilc3Ebh9B_aySeVMKldeveM.roa
File:                     qJCRilc3Ebh9B_aySeVMKldeveM.roa (raw, json)
Hash identifier:          ioODI+aP1jwlezBm9lY+fz3m5yXxE8s++45dvu8zDyU=
Subject key identifier:   A8:90:91:8A:57:37:11:B8:7D:07:F6:B2:49:E5:4C:2A:57:5E:BD:E3
Certificate issuer:       /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial:       019427B5391893BDDF6721525ECA7DCEAE30
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/qJCRilc3Ebh9B_aySeVMKldeveM.roa
Signing time:             Thu 02 Jan 2025 15:49:35 +0000
ROA not before:           Thu 02 Jan 2025 15:49:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215405
IP address blocks:        195.60.80.0/26 maxlen: 26
                          2001:7f8:116::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:39:18:93:bd:df:67:21:52:5e:ca:7d:ce:ae:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
        Validity
            Not Before: Jan  2 15:49:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a890918a573711b87d07f6b249e54c2a575ebde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:aa:ff:84:75:9a:69:07:e6:2f:ff:ee:f1:
                    20:b5:cd:f0:9b:d5:ca:52:07:f4:53:95:76:ac:09:
                    4d:56:94:3e:3f:27:a7:44:60:0c:d8:ac:72:4d:fb:
                    df:e8:f9:f2:e8:78:6e:17:10:f9:69:c4:16:ab:f1:
                    60:13:bd:88:ea:6b:d1:d1:ef:44:a6:66:18:45:82:
                    90:df:e2:e4:1f:06:e6:d5:f2:d2:9d:5f:6b:18:ec:
                    a8:ea:30:bc:cc:99:59:fe:12:f8:89:ee:03:f4:ae:
                    3f:a0:13:e6:04:d9:5c:5f:1b:dd:09:2a:49:5d:c7:
                    64:a8:30:c4:2d:c7:55:1f:ab:10:12:ad:9c:4b:0f:
                    83:83:b8:c9:58:08:35:2a:d3:db:b3:33:29:b1:a1:
                    64:e2:54:5b:40:b7:7c:f9:36:f6:ed:03:23:43:07:
                    ec:92:88:2b:41:44:81:df:58:48:c7:f8:ea:e4:eb:
                    6c:d5:30:8d:83:67:c3:d5:de:d7:a3:4a:5a:1c:61:
                    1c:ee:35:a2:10:28:e3:ef:ef:fc:ba:cc:ac:44:2e:
                    94:7b:31:bc:16:d2:8a:ce:87:49:50:1a:68:04:61:
                    b8:cf:50:44:88:1a:e9:5c:53:8d:dd:fa:55:2a:08:
                    0e:55:b3:10:61:79:09:c7:c4:ec:da:d9:c7:62:58:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:90:91:8A:57:37:11:B8:7D:07:F6:B2:49:E5:4C:2A:57:5E:BD:E3
            X509v3 Authority Key Identifier:
                keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/qJCRilc3Ebh9B_aySeVMKldeveM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.60.80.0/26
                IPv6:
                  2001:7f8:116::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:e7:fd:86:13:c3:16:6e:c7:a8:69:c1:00:5a:31:62:38:b0:
         c2:c1:af:91:63:5e:c7:d9:ec:25:71:88:90:2b:e1:a4:95:07:
         1d:6c:8f:95:5c:08:f8:1f:7d:9e:69:e0:06:19:9f:a0:9f:8d:
         45:18:12:f7:c2:3a:6b:a6:54:56:40:34:9c:02:c2:0b:75:75:
         c1:e0:e7:fd:25:c6:30:cb:1b:a5:72:36:a1:08:2d:b4:3c:fc:
         79:5b:9f:03:fe:67:ae:91:25:1e:45:d6:34:55:15:9a:9a:92:
         3e:7a:55:32:6d:3a:74:20:e4:e5:86:15:29:2c:6e:80:19:86:
         fc:d8:8b:14:f1:3c:f7:fb:f3:aa:14:e1:7c:1b:cc:bc:82:4b:
         dd:1e:ba:97:e0:a6:2d:54:d5:c8:da:73:87:00:67:76:37:34:
         09:db:bd:16:42:93:0b:f2:cf:39:db:51:e4:b4:9e:2d:26:8f:
         8e:8e:b3:68:df:60:02:b6:db:e6:2a:1e:4d:8e:cb:a1:49:93:
         c6:5f:2f:f0:cc:e6:cb:57:81:20:8d:05:01:d1:bd:2d:e3:20:
         56:1b:6b:8e:d6:9d:ea:8d:0e:17:a9:68:0f:b5:94:54:27:c2:
         c2:b9:d3:99:0a:4e:54:0c:b5:0d:7d:29:b6:ba:3b:17:15:31:
         a9:73:5a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----