Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/CS45ol94FSh_Y9jvauVA2QKhr9Y.roa
File:                     CS45ol94FSh_Y9jvauVA2QKhr9Y.roa (raw, json)
Hash identifier:          t7+G1e511BkNswCIOIpGI7nXenT7KEeztvYMCep9OgI=
Subject key identifier:   09:2E:39:A2:5F:78:15:28:7F:63:D8:EF:6A:E5:40:D9:02:A1:AF:D6
Certificate issuer:       /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial:       019422FBE50EA4C97357337438B237E85EE4
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/CS45ol94FSh_Y9jvauVA2QKhr9Y.roa
Signing time:             Wed 01 Jan 2025 17:48:41 +0000
ROA not before:           Wed 01 Jan 2025 17:48:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34538
IP address blocks:        193.239.158.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:e5:0e:a4:c9:73:57:33:74:38:b2:37:e8:5e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
        Validity
            Not Before: Jan  1 17:48:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=092e39a25f7815287f63d8ef6ae540d902a1afd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:a2:ce:57:73:74:55:f0:b7:56:0d:9e:fa:
                    e0:5d:cb:b9:9f:73:0a:06:fd:51:6e:27:30:d4:3d:
                    e4:e5:cf:06:8f:8f:70:b0:7d:e7:1c:73:9d:d2:9c:
                    f1:ca:fc:9b:56:4a:40:d5:a9:bf:99:0f:f4:78:d9:
                    54:fa:70:ad:f4:6d:a8:46:77:87:23:a9:08:57:4e:
                    49:2a:1d:9b:bb:bf:67:ff:90:5f:9d:05:fd:16:3d:
                    eb:60:b6:78:7d:10:7a:f9:e7:e3:98:58:38:ac:d7:
                    f5:2e:e2:ec:e4:2e:e0:4c:aa:ea:cd:cf:3b:1e:5e:
                    1b:5d:cf:5c:1f:7a:d2:f0:bf:6b:88:90:af:4a:fb:
                    30:d3:cf:39:f7:ad:f4:bf:c9:09:45:99:8b:bd:60:
                    c4:dd:37:fb:f9:4c:96:2c:c2:b0:3d:df:4f:d4:26:
                    df:d1:65:34:c3:44:f2:77:46:33:76:7b:cb:be:b4:
                    a2:b6:b7:a6:61:25:a2:3b:20:ae:f1:b0:09:35:07:
                    e0:7c:3b:ab:73:1d:63:02:1f:ba:b0:0a:39:06:52:
                    1c:6f:47:d1:63:98:05:fc:30:f3:66:a7:77:ba:fa:
                    a7:da:7f:3f:58:02:75:77:6a:9d:c8:80:01:5c:ea:
                    03:d2:1b:7e:1e:23:aa:8d:24:58:b2:a2:44:26:49:
                    82:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2E:39:A2:5F:78:15:28:7F:63:D8:EF:6A:E5:40:D9:02:A1:AF:D6
            X509v3 Authority Key Identifier:
                keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/CS45ol94FSh_Y9jvauVA2QKhr9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.239.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:bb:2c:cc:73:42:17:71:11:4e:64:b9:c7:e4:29:0f:bb:38:
         55:b8:57:15:e5:e0:e8:a9:97:fc:90:a9:9a:ce:42:12:1c:e7:
         95:f3:8a:e4:f9:5e:9c:b5:c9:06:c6:16:de:02:18:f7:45:d0:
         04:00:e6:aa:4a:20:d8:34:cb:8d:f2:4e:a3:e4:a3:95:c0:9d:
         56:b1:63:f4:f7:3f:19:1a:78:4b:2b:8a:4a:92:48:4b:f4:91:
         15:5d:b8:6e:f0:a4:fb:8c:77:46:b4:98:b9:b8:bb:ee:90:4d:
         01:99:3f:c9:55:c9:90:35:80:53:8a:94:86:5c:4b:5f:aa:ac:
         1b:21:4d:08:c9:13:9b:1c:10:40:c5:f7:33:c9:2b:ff:26:b2:
         ca:3b:7e:ea:ed:df:c8:11:31:b3:0e:5f:f5:bf:af:12:33:87:
         57:6e:51:5f:24:40:20:70:66:fb:ce:a9:f6:e2:de:4e:03:04:
         fd:94:91:57:16:e8:76:da:82:dc:05:a7:99:1f:ca:26:5e:f9:
         c7:2b:12:49:55:56:bf:ba:14:17:16:14:6d:2a:33:e6:d8:91:
         e5:3c:ab:76:39:ec:89:70:6f:c9:14:be:97:d3:8e:2a:34:bf:
         d5:55:0d:b0:ec:3e:fe:24:70:ec:df:d7:46:d2:34:3c:1a:bb:
         33:52:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----