Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/YJ__Jpr1denKLIU4A4wwpaBEGuM.roa
File:                     YJ__Jpr1denKLIU4A4wwpaBEGuM.roa (raw, json)
Hash identifier:          HQMvWJSgBySt+TDaIiCe+VSZte2lW30WZtz1IJWSvxM=
Subject key identifier:   60:9F:FF:26:9A:F5:75:E9:CA:2C:85:38:03:8C:30:A5:A0:44:1A:E3
Certificate issuer:       /CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Certificate serial:       01941F8C4C471CF898A2C77AE3490A6D0637
Authority key identifier: 72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/YJ__Jpr1denKLIU4A4wwpaBEGuM.roa
Signing time:             Wed 01 Jan 2025 01:47:55 +0000
ROA not before:           Wed 01 Jan 2025 01:47:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207297
IP address blocks:        193.135.29.0/24 maxlen: 24
                          2a10:1c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:4c:47:1c:f8:98:a2:c7:7a:e3:49:0a:6d:06:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
        Validity
            Not Before: Jan  1 01:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=609fff269af575e9ca2c8538038c30a5a0441ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:49:54:d2:10:c6:1f:ce:eb:a3:f5:92:0e:81:
                    d9:a8:35:12:a6:92:09:1e:3c:62:f5:7c:5a:45:38:
                    51:6c:07:a9:58:85:20:79:fd:ec:00:b3:75:ea:b1:
                    d0:ff:1f:0f:f7:8c:15:10:eb:2f:0b:6f:1c:47:55:
                    99:dc:e5:fd:44:bf:2b:76:69:9b:d9:5e:06:50:d2:
                    22:b7:9d:9d:5a:36:11:f8:06:01:9b:46:a8:2e:18:
                    58:5e:2a:dc:52:3c:6c:85:7a:76:5b:47:26:fb:85:
                    3e:3d:a2:39:12:42:bb:01:37:fa:75:b0:c2:54:6f:
                    ea:89:ae:e1:d2:98:d8:d5:6e:c4:73:3c:cc:09:f5:
                    13:46:92:27:41:28:ef:e3:2d:df:95:41:c7:75:12:
                    52:dc:ba:3f:68:83:ed:a1:48:66:a0:f1:8a:fc:4f:
                    90:3b:95:e1:bb:99:41:2e:b7:03:e9:37:05:3e:cd:
                    62:3d:bc:78:0a:4a:c7:29:d4:73:d9:22:6c:78:f6:
                    44:ee:0a:80:c8:ad:22:a4:ad:a5:be:08:cc:fe:c3:
                    4e:14:46:2d:4e:e0:32:99:f1:cc:fc:31:fc:24:23:
                    11:52:63:33:42:28:c0:9f:b9:3b:e4:dd:cb:07:0a:
                    97:31:49:28:c1:be:e2:00:06:3f:d6:58:20:ec:4e:
                    b3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9F:FF:26:9A:F5:75:E9:CA:2C:85:38:03:8C:30:A5:A0:44:1A:E3
            X509v3 Authority Key Identifier:
                keyid:72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/YJ__Jpr1denKLIU4A4wwpaBEGuM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.135.29.0/24
                IPv6:
                  2a10:1c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         d1:f0:16:c6:19:b0:8f:4e:1c:f5:79:c1:b6:0a:06:b8:1e:36:
         05:13:c0:70:b8:32:14:00:1f:66:a9:43:8e:8e:08:09:c3:cb:
         26:2c:d4:95:3e:dd:06:fc:4c:40:2a:aa:08:ff:d6:f7:34:9f:
         e8:a3:06:df:f7:38:0a:1f:da:04:80:89:bd:4c:2c:59:38:c7:
         19:e2:c4:33:51:8d:3e:fa:1d:f0:23:65:41:14:21:b9:d7:db:
         94:e0:14:e3:08:fb:d3:aa:89:34:42:ee:e7:8d:32:f4:a0:48:
         3b:8e:67:7c:24:97:ed:c0:60:40:36:62:d0:b7:92:d8:77:03:
         35:d8:0e:0f:03:34:38:45:d3:8d:0e:1e:4a:4c:c4:ce:67:03:
         8f:c7:70:ac:77:e7:63:ff:d0:cc:cb:0f:ae:9e:e7:63:c2:e7:
         fc:57:e9:38:bb:6f:c9:80:c1:27:a9:82:3b:5f:e4:4a:d2:73:
         c1:36:90:4d:18:9e:8a:32:e4:79:4d:b9:f0:c7:16:cd:53:62:
         82:28:90:15:e2:c4:bc:b9:8d:15:7c:15:37:6f:52:a5:0a:e7:
         34:51:e0:d5:26:c4:5b:e3:6e:e6:e9:72:b0:1c:51:c2:f5:85:
         d4:97:8e:36:fc:6a:91:94:34:5a:b2:79:14:26:b7:44:9a:37:
         ab:03:37:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----