Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/_kWdENGz02qFbJgsVzh0I7ssKSM.roa
File:                     _kWdENGz02qFbJgsVzh0I7ssKSM.roa (raw, json)
Hash identifier:          CgY6OFKCaRvJTJIO/HpUioGU0QKLzsGxcD6MJClnWYM=
Subject key identifier:   FE:45:9D:10:D1:B3:D3:6A:85:6C:98:2C:57:38:74:23:BB:2C:29:23
Certificate issuer:       /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial:       019427B50441053F7F593676437FDE01307D
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/_kWdENGz02qFbJgsVzh0I7ssKSM.roa
Signing time:             Thu 02 Jan 2025 15:49:22 +0000
ROA not before:           Thu 02 Jan 2025 15:49:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202108
IP address blocks:        212.227.117.50/32 maxlen: 32
                          212.227.117.51/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:04:41:05:3f:7f:59:36:76:43:7f:de:01:30:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
        Validity
            Not Before: Jan  2 15:49:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fe459d10d1b3d36a856c982c57387423bb2c2923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:d0:fe:82:c6:8c:64:51:43:0f:85:8d:31:
                    24:d4:19:58:1e:8e:d5:fa:5a:d1:b4:2c:37:ce:95:
                    ad:4b:df:63:31:6d:78:29:ff:8f:9a:04:41:38:fd:
                    31:e8:85:e8:de:8f:23:38:97:39:ae:9d:32:4d:28:
                    61:fe:f1:d4:a7:88:9c:02:29:4d:38:65:c9:5b:43:
                    89:f6:2e:99:9c:c7:f2:22:2f:ce:dd:4c:0b:ab:62:
                    7e:fe:e2:2a:61:df:86:9c:15:98:3a:32:15:45:67:
                    3f:96:5e:3d:95:eb:6c:ac:13:ef:d6:6b:93:88:b4:
                    54:ac:6d:8c:fb:4c:a5:23:a0:b2:39:46:ea:64:e1:
                    6b:a1:75:02:62:5b:79:8e:33:fc:80:fd:d3:9a:16:
                    23:79:57:d6:1c:d5:e4:fb:3d:b5:36:b0:ef:db:4b:
                    02:a8:14:f9:5b:bc:da:27:f4:39:a2:8f:78:e9:2b:
                    97:22:ef:f9:a9:c2:75:7c:f3:c3:34:df:7f:e7:5f:
                    20:d9:b2:36:be:1e:08:ea:2a:54:08:3b:85:97:f9:
                    d1:d4:50:d2:62:8d:7d:c1:08:25:5d:b8:81:e7:fb:
                    f4:f9:6b:88:0c:d8:23:2a:63:70:5b:43:a0:ba:eb:
                    59:1c:a0:6b:1b:16:c4:2e:b9:a1:51:c5:14:a3:3d:
                    d5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:45:9D:10:D1:B3:D3:6A:85:6C:98:2C:57:38:74:23:BB:2C:29:23
            X509v3 Authority Key Identifier:
                keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/_kWdENGz02qFbJgsVzh0I7ssKSM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.227.117.50/31

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:cc:78:4d:f6:e9:13:1f:46:9e:05:51:46:4e:73:36:d6:
         5a:c8:43:49:e0:b9:8e:e5:53:e8:e2:f1:c9:b3:2c:6f:c5:b7:
         19:ff:8c:50:17:85:f0:ba:9a:25:41:a4:b8:44:1d:9e:6b:24:
         94:42:ba:dd:de:08:d8:2e:ae:32:b4:a5:bf:41:ec:55:df:b5:
         6b:d5:c2:0e:e7:bf:f7:26:3a:ed:ba:73:23:0a:bf:8e:9c:03:
         5f:47:06:b2:aa:79:ac:ed:58:79:33:69:10:20:fb:a5:0e:2c:
         98:a8:14:5e:69:36:63:5b:c0:a8:23:09:88:ea:3f:70:84:fb:
         eb:53:cb:aa:f0:7b:36:17:ea:cb:6f:fa:34:bf:22:f3:f8:01:
         79:f6:ef:d3:4c:56:44:b0:99:67:fe:d7:1a:80:e6:ef:5e:6d:
         6b:99:2b:4e:28:9d:74:5d:43:65:b0:1e:17:94:1b:fd:b4:14:
         d5:c1:6b:cc:4c:fd:1a:21:ca:dd:7d:c9:53:57:2c:df:37:30:
         52:6c:c4:c2:10:03:2b:32:0b:63:bd:eb:02:a0:d4:eb:9f:95:
         78:fb:40:39:a9:21:32:44:b8:79:58:dc:fc:cd:a7:56:03:8c:
         bb:8a:ac:40:87:9f:88:59:c1:77:f1:d7:7f:cf:ca:7c:79:6d:
         ff:ed:83:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----