Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/IL6WQT4jQ4_C4d_P8m9v2yHVI6U.roa
File:                     IL6WQT4jQ4_C4d_P8m9v2yHVI6U.roa (raw, json)
Hash identifier:          9J+kDdJE2+cu7NB25/bKTQ6/hAIRTzrqadiukiS4eVg=
Subject key identifier:   20:BE:96:41:3E:23:43:8F:C2:E1:DF:CF:F2:6F:6F:DB:21:D5:23:A5
Certificate issuer:       /CN=101fdf7c89989242919835759c9b62f8cc69d492
Certificate serial:       019426D9AE5050EE3D2753B5395C2E93D740
Authority key identifier: 10:1F:DF:7C:89:98:92:42:91:98:35:75:9C:9B:62:F8:CC:69:D4:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/IL6WQT4jQ4_C4d_P8m9v2yHVI6U.roa
Signing time:             Thu 02 Jan 2025 11:49:47 +0000
ROA not before:           Thu 02 Jan 2025 11:49:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39648
IP address blocks:        193.93.4.0/22 maxlen: 22
                          195.24.160.0/19 maxlen: 19
                          2a02:17c8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:ae:50:50:ee:3d:27:53:b5:39:5c:2e:93:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101fdf7c89989242919835759c9b62f8cc69d492
        Validity
            Not Before: Jan  2 11:49:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=20be96413e23438fc2e1dfcff26f6fdb21d523a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:6a:da:be:59:4a:85:b3:cc:aa:66:6b:9e:
                    a0:f0:d6:50:9f:1d:3c:c5:3d:a0:1a:6f:cf:9c:7f:
                    15:63:ac:06:a3:96:f1:f2:9b:cd:12:a9:f4:6f:65:
                    6e:24:7c:5f:2f:b3:b3:42:c2:63:be:c4:39:a9:f9:
                    74:37:33:ea:06:ee:c3:d5:61:82:13:81:45:e4:61:
                    9a:cb:73:83:11:81:38:94:97:45:e0:3e:04:03:b6:
                    d9:ea:65:50:3f:0f:bc:63:5a:b3:5b:49:4f:dc:3c:
                    1a:d6:23:96:4d:87:bf:67:5f:40:21:1c:65:61:a4:
                    38:65:4a:55:41:c8:be:ff:69:fb:6e:3a:c9:32:86:
                    ed:d1:1d:b3:0f:ec:b6:c7:5a:28:6a:8b:ba:c9:e2:
                    52:6f:56:f3:d4:ce:b4:6e:92:9a:a1:61:55:6b:cf:
                    2e:4b:8a:2c:da:0f:8a:fc:81:9a:8c:2e:c3:e2:cf:
                    9d:df:3c:a8:86:64:72:b7:c7:c0:f4:de:4f:16:de:
                    cf:46:45:a1:1a:34:3d:70:f5:a2:05:3d:65:23:5f:
                    3e:7d:6a:47:10:fd:35:36:74:bf:c1:20:c7:24:64:
                    1b:f9:11:69:55:01:80:0d:d2:fc:31:a7:5d:f5:60:
                    0c:59:9a:07:03:32:22:7d:02:b8:1f:ec:6d:07:b4:
                    67:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BE:96:41:3E:23:43:8F:C2:E1:DF:CF:F2:6F:6F:DB:21:D5:23:A5
            X509v3 Authority Key Identifier:
                keyid:10:1F:DF:7C:89:98:92:42:91:98:35:75:9C:9B:62:F8:CC:69:D4:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/IL6WQT4jQ4_C4d_P8m9v2yHVI6U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.4.0/22
                  195.24.160.0/19
                IPv6:
                  2a02:17c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:8c:3a:19:2b:34:c8:72:84:7a:b4:d6:99:2e:93:86:95:f1:
         d4:aa:69:cc:02:5b:3f:00:9b:f9:e0:62:dc:7b:f5:2e:a5:68:
         03:6a:57:ee:0e:f8:66:ec:f8:37:99:f0:4d:ea:a1:79:54:a5:
         c5:fe:32:b8:e5:11:90:17:64:2e:f6:f0:dd:6f:7c:83:1e:ce:
         c4:93:3c:9f:4c:10:54:b8:be:d8:a2:5d:8e:a5:98:95:e9:58:
         8b:51:89:d7:75:c4:43:d6:56:80:70:16:a6:06:b4:86:ed:64:
         ad:d4:07:09:6f:5a:9c:49:20:b8:32:ad:4d:f4:93:d7:47:c9:
         22:21:b0:e1:f3:a4:96:03:8a:c5:6f:02:8e:a2:a5:54:2f:b5:
         ad:0b:1c:f0:ca:aa:ba:db:31:69:a3:d6:d2:8e:75:75:21:1b:
         6d:88:58:ee:93:c1:70:2b:a7:65:b4:a8:f1:20:d4:34:8e:58:
         a3:51:8e:05:3e:fd:4b:6d:50:b0:db:68:75:86:7f:9e:9d:2e:
         b4:b4:2a:be:4e:b0:65:8d:a9:fa:b3:c6:25:cb:b5:68:67:29:
         0d:62:e9:a4:ad:8b:2e:e6:35:21:a9:7e:0e:8a:7f:81:21:3e:
         31:34:ae:04:b8:67:83:0b:87:54:e4:d6:74:17:30:de:12:ea:
         f8:44:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----