Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/77nHJ74F1fFAwUbmMeRLrxeDdWA.roa
File:                     77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (raw, json)
Hash identifier:          2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=
Subject key identifier:   EF:B9:C7:27:BE:05:D5:F1:40:C1:46:E6:31:E4:4B:AF:17:83:75:60
Certificate issuer:       /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial:       01941FFAB959CA185BD36230D989B31AD2E5
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/77nHJ74F1fFAwUbmMeRLrxeDdWA.roa
Signing time:             Wed 01 Jan 2025 03:48:32 +0000
ROA not before:           Wed 01 Jan 2025 03:48:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     26506
IP address blocks:        83.2.226.0/23 maxlen: 23
                          2a01:1100:b001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:b9:59:ca:18:5b:d3:62:30:d9:89:b3:1a:d2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
        Validity
            Not Before: Jan  1 03:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=efb9c727be05d5f140c146e631e44baf17837560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:3f:5a:ed:4c:7d:ef:87:f6:3b:bf:ad:8b:
                    22:af:8d:4d:55:4d:e9:6c:29:84:e8:35:14:28:54:
                    4a:3b:fc:0f:24:1d:42:41:fc:6a:60:c2:6b:55:37:
                    c2:e9:21:f5:23:1e:79:6a:85:81:75:58:6b:92:43:
                    82:ca:c7:93:dc:5f:c9:37:2b:9a:e6:c2:e3:62:ac:
                    47:f0:17:b2:b4:da:fa:0a:35:62:5d:6b:2a:f4:94:
                    0d:a7:68:ca:cf:e3:90:1f:fe:97:e5:00:9e:ba:e9:
                    a7:f2:fe:28:f2:ef:7e:9b:0b:bd:58:fd:52:40:f4:
                    ad:1b:74:3f:94:71:32:91:34:0f:4a:81:67:d8:79:
                    c9:c0:85:cd:45:d9:48:29:b4:46:c1:e3:a3:98:c9:
                    52:2e:bc:85:04:01:0c:fc:1c:3c:d6:8f:c2:fe:34:
                    81:5e:ee:c6:fd:28:63:aa:50:e2:fc:21:7a:05:52:
                    f7:d5:cb:08:51:8d:62:01:39:f7:3c:87:3b:7a:9d:
                    ea:e1:8b:b2:4f:21:4e:dc:6c:06:fb:a2:f3:fa:77:
                    01:40:f0:b9:23:f9:3a:45:9d:fe:5c:98:61:5a:e7:
                    3a:97:7f:24:fc:ff:5a:b4:3d:17:6e:f1:18:3a:4e:
                    08:c7:4e:5f:3d:84:be:bb:a7:a5:84:18:37:ff:78:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B9:C7:27:BE:05:D5:F1:40:C1:46:E6:31:E4:4B:AF:17:83:75:60
            X509v3 Authority Key Identifier:
                keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/77nHJ74F1fFAwUbmMeRLrxeDdWA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.2.226.0/23
                IPv6:
                  2a01:1100:b001::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:ff:96:d1:6e:96:ee:c3:99:53:a2:fa:29:fa:42:43:fe:b2:
         1e:69:f1:10:f9:b1:e3:c9:ce:ba:91:8a:de:cc:5f:44:1b:26:
         9b:d9:99:a4:ad:17:57:72:6f:6e:ee:46:ea:da:62:13:04:c8:
         ff:89:0a:51:07:99:f4:b2:bd:e3:a2:9a:6c:ef:21:4c:ad:b8:
         a5:5c:d5:f6:b9:2e:ef:26:49:d6:c5:46:65:af:e7:10:d9:c2:
         c4:c5:f4:cc:22:29:3a:4a:cc:a6:34:70:31:d9:07:71:a3:81:
         bd:cc:b0:bd:98:7b:14:b3:14:4a:e1:e8:4d:95:3b:cd:49:22:
         05:70:73:34:eb:a9:37:59:2d:75:6d:f4:79:eb:1d:0f:b4:3c:
         eb:85:3b:fd:df:14:9b:f1:59:14:1f:57:ca:67:1a:b9:04:fd:
         34:5e:6c:07:5a:1e:5a:72:fb:ab:26:60:2f:b3:50:9d:ea:07:
         19:30:37:c6:ce:96:d3:74:ed:f6:82:90:4c:77:65:5d:25:24:
         51:44:95:39:f8:36:50:14:ff:a0:68:39:b9:eb:7c:c8:1a:29:
         08:75:0b:6f:9b:59:77:ee:9e:ba:a7:38:be:2a:12:89:1c:6e:
         49:4e:ff:2e:f2:12:40:d4:e1:a2:28:85:a6:f1:6c:81:f8:71:
         08:1a:74:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----