Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/5LZSCca0J2TzSinZYqA5NQjQQCc.roa
File:                     5LZSCca0J2TzSinZYqA5NQjQQCc.roa (raw, json)
Hash identifier:          z0sbgeMJFoDHxywMU0zRoEIuWP8/rXbc5c9YaeSPe3A=
Subject key identifier:   E4:B6:52:09:C6:B4:27:64:F3:4A:29:D9:62:A0:39:35:08:D0:40:27
Certificate issuer:       /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial:       019611AF185C57B1384F9FBCE3B2C678FBCE
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/5LZSCca0J2TzSinZYqA5NQjQQCc.roa
Signing time:             Mon 07 Apr 2025 19:16:49 +0000
ROA not before:           Mon 07 Apr 2025 19:16:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213893
IP address blocks:        195.62.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:11:af:18:5c:57:b1:38:4f:9f:bc:e3:b2:c6:78:fb:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
        Validity
            Not Before: Apr  7 19:16:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e4b65209c6b42764f34a29d962a0393508d04027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:53:bc:6f:59:a2:7d:64:09:bb:6c:86:27:7f:
                    e7:e5:0b:af:30:95:ae:16:c1:1e:ff:2f:99:db:ce:
                    6c:05:1c:26:63:c9:07:31:36:d8:2d:eb:c5:63:9c:
                    40:3c:4f:4c:74:2f:98:5d:a8:21:d9:82:97:cd:1b:
                    47:57:3e:0b:60:80:a4:87:26:a1:37:16:59:19:a0:
                    f8:b5:b2:f5:8f:ea:67:12:03:d5:88:7b:41:d0:ff:
                    4a:5e:19:a1:c4:7c:68:ae:44:e7:2a:af:ea:35:09:
                    f4:9d:f6:01:42:37:cc:01:2c:65:24:7b:c5:76:5a:
                    0e:05:c0:67:3d:a7:80:43:1a:ec:47:f6:51:fb:3d:
                    ae:25:bc:30:66:10:01:82:40:de:a2:49:b6:15:4b:
                    42:c7:a8:e4:5a:c4:83:5c:42:c2:35:e1:53:19:a1:
                    34:f3:2e:d1:2d:bf:ec:fb:8d:52:1d:f2:75:4f:3d:
                    97:46:e2:aa:4a:0a:41:ec:26:1e:2f:6c:36:ad:4f:
                    56:56:ff:54:07:e0:98:e4:69:dd:60:36:c2:b2:72:
                    89:57:92:82:7a:2f:4a:20:2e:96:b8:44:90:45:dc:
                    03:d8:21:3b:f2:48:15:96:54:35:6c:9a:59:03:02:
                    78:bf:e7:0f:50:9d:27:f8:f1:97:c2:e5:cf:69:1c:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B6:52:09:C6:B4:27:64:F3:4A:29:D9:62:A0:39:35:08:D0:40:27
            X509v3 Authority Key Identifier:
                keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/5LZSCca0J2TzSinZYqA5NQjQQCc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.62.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:50:31:ec:91:c3:04:47:fd:59:ec:45:ef:bd:f9:c4:95:70:
         7f:6c:79:e2:68:18:37:4e:0e:d8:21:43:b9:4a:81:73:f4:6a:
         c1:c1:db:0d:d4:04:10:72:73:b6:7b:d7:36:e0:0d:5d:51:06:
         14:69:b4:d7:6c:96:1f:bf:dc:25:27:96:95:39:f1:a1:03:db:
         8f:ed:6b:4f:c2:aa:55:ab:ea:0b:70:60:99:5b:33:10:77:f9:
         4e:a7:65:93:0e:85:cb:13:1e:16:1c:4b:0a:6f:eb:4f:9d:55:
         03:74:8d:ff:71:45:b0:0e:86:7d:d2:42:0a:b7:e0:5b:b3:aa:
         5b:a6:6c:c8:17:79:72:3a:31:0e:9e:1c:59:b5:f1:84:fe:b7:
         66:df:e7:f2:40:40:35:67:cf:91:36:79:37:00:90:5b:11:a4:
         f1:77:71:a3:96:0e:b6:57:fc:91:bb:ef:70:7c:74:51:a7:86:
         08:20:27:67:d4:7d:ad:d9:d4:c1:cd:22:ce:8e:99:90:62:56:
         ca:5f:d5:43:46:a5:0b:a9:a1:c7:58:ed:ed:b5:09:25:4b:96:
         a1:50:34:f5:30:3e:13:ca:69:85:72:4c:03:53:0f:a4:c7:9c:
         cc:a8:ee:ff:68:38:6d:dd:12:cf:8e:a4:d5:c6:b7:04:2b:12:
         ed:a7:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----