Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/mXq5imVatjJhnnG6SsoqA-p0UNQ.roa
File:                     mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (raw, json)
Hash identifier:          8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=
Subject key identifier:   99:7A:B9:8A:65:5A:B6:32:61:9E:71:BA:4A:CA:2A:03:EA:74:50:D4
Certificate issuer:       /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial:       019423D782B9D6EA0F9734B5693B639D6F25
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/mXq5imVatjJhnnG6SsoqA-p0UNQ.roa
Signing time:             Wed 01 Jan 2025 21:48:33 +0000
ROA not before:           Wed 01 Jan 2025 21:48:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34863
IP address blocks:        185.163.64.0/22 maxlen: 22
                          2a0a:7400::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:82:b9:d6:ea:0f:97:34:b5:69:3b:63:9d:6f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
        Validity
            Not Before: Jan  1 21:48:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=997ab98a655ab632619e71ba4aca2a03ea7450d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:79:ee:1a:df:3a:5c:89:56:41:f8:1e:ac:
                    df:84:e9:72:82:b3:7f:3b:07:32:bd:66:af:6d:1b:
                    dd:ff:e5:47:0b:21:42:fa:a0:55:52:03:61:f3:f4:
                    19:b5:15:7d:a0:79:05:5e:a8:b6:56:52:0e:d0:a3:
                    a9:95:a6:99:ed:6f:f7:00:3b:3a:d6:60:01:a0:06:
                    5f:93:f5:e7:5c:f9:2f:d4:fa:c4:d1:73:9e:26:27:
                    6d:5f:cd:0e:da:81:aa:e0:8a:30:de:d2:81:f8:7b:
                    e1:0a:3e:bd:b5:90:fd:8a:97:a7:48:fe:4f:b3:3b:
                    8d:00:55:d7:45:14:c2:f2:7e:6e:61:d0:1c:29:19:
                    42:8c:aa:47:8d:9c:e6:15:e3:86:71:be:e4:a0:b3:
                    67:b8:95:69:b8:df:f1:ad:21:b3:f6:e9:24:2c:a0:
                    5a:a8:54:ff:25:d0:98:e0:62:44:2d:53:0d:32:b0:
                    eb:20:ee:c6:1c:c6:01:54:96:05:2b:60:8a:0b:d5:
                    9a:e8:06:12:bc:ad:9c:41:5c:dd:b7:de:04:c1:3f:
                    b5:7c:58:a2:99:cc:b2:bf:3d:a9:b9:43:30:5a:a2:
                    f0:d8:b8:bd:ef:88:99:c3:aa:29:03:af:2d:2b:25:
                    54:27:7d:f5:7f:88:27:1e:1c:aa:89:09:35:a1:36:
                    9a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7A:B9:8A:65:5A:B6:32:61:9E:71:BA:4A:CA:2A:03:EA:74:50:D4
            X509v3 Authority Key Identifier:
                keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/mXq5imVatjJhnnG6SsoqA-p0UNQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.163.64.0/22
                IPv6:
                  2a0a:7400::/29

    Signature Algorithm: sha256WithRSAEncryption
         13:c8:06:fc:07:b3:73:ad:c0:cd:73:60:db:a4:fb:04:82:53:
         36:fc:31:ff:bf:41:6b:0d:83:ed:37:6b:54:7f:d3:67:c4:0b:
         54:8c:d0:64:b7:8c:ad:95:fd:4f:cc:20:f0:f0:1b:d1:0a:dd:
         00:1d:9f:04:06:58:07:33:bb:ad:3f:6e:5f:8a:e3:ca:20:5f:
         d0:c1:70:8b:b4:d2:9e:ea:9e:bf:1d:a0:7d:8f:5e:0b:be:16:
         ea:95:48:5d:e4:a8:e3:a4:56:04:f6:00:15:9a:c8:ee:90:52:
         55:0c:80:d6:96:31:9a:c1:10:6a:00:ac:c1:fa:3f:2d:13:26:
         cf:9b:f2:71:33:79:77:ce:1a:22:f7:99:81:e2:3c:70:51:42:
         1e:b3:e1:b4:c9:13:22:08:cf:71:d9:89:b4:b5:93:7c:bf:49:
         6e:15:a4:7e:cd:7c:66:b4:d0:27:c9:f6:17:5c:3e:af:3b:97:
         f3:08:a4:ba:44:01:0a:ed:60:3c:98:ef:fe:90:84:fc:04:25:
         cb:b6:ab:ea:34:f0:43:12:95:49:b0:ad:29:a4:8c:1c:8a:7b:
         a6:ea:02:93:25:69:e5:b8:32:54:03:a9:d1:9e:69:4b:a1:64:
         27:9e:9d:4e:68:84:0a:c2:7d:89:57:56:d2:46:1d:94:b6:6a:
         89:3c:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----