Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/oenpcHzg8QPV-rJqJOxh7sUU4JM.roa
File:                     oenpcHzg8QPV-rJqJOxh7sUU4JM.roa (raw, json)
Hash identifier:          pI8sI3HGC0XwZjUjUuA9QCNQ3HFZ2jSXO5rE2e12GoY=
Subject key identifier:   A1:E9:E9:70:7C:E0:F1:03:D5:FA:B2:6A:24:EC:61:EE:C5:14:E0:93
Certificate issuer:       /CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc
Certificate serial:       01953DC507D373232CEFD2E2C2D08F93A286
Authority key identifier: FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/oenpcHzg8QPV-rJqJOxh7sUU4JM.roa
Signing time:             Tue 25 Feb 2025 15:41:17 +0000
ROA not before:           Tue 25 Feb 2025 15:41:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     51057
IP address blocks:        109.235.232.0/21 maxlen: 21
                          2a0c:600::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:3d:c5:07:d3:73:23:2c:ef:d2:e2:c2:d0:8f:93:a2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc
        Validity
            Not Before: Feb 25 15:41:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a1e9e9707ce0f103d5fab26a24ec61eec514e093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8b:86:6c:fd:34:b9:0e:8a:ce:5a:d3:f5:a5:
                    6a:50:49:2d:1c:7a:81:fc:0b:e8:a5:fc:7f:dd:c3:
                    e5:af:2a:e9:3e:be:db:0f:7c:94:c8:d9:ee:91:85:
                    84:07:91:a5:67:0d:f4:1c:f5:27:34:ac:4a:80:7a:
                    e8:51:0d:c4:ad:c1:a1:d9:b7:66:dd:ee:e0:4d:f4:
                    a0:ba:09:b4:47:95:75:74:ce:9c:3d:c6:6d:60:85:
                    11:95:80:69:ca:9f:92:54:40:ce:f1:04:d2:46:1f:
                    4c:84:24:83:fb:52:47:c3:1e:17:9f:92:03:51:b2:
                    ea:d8:6e:7f:e6:41:39:dc:e0:9e:f3:e5:8d:85:d0:
                    4e:b6:b6:07:3e:11:0c:b9:6e:bf:33:94:24:3e:95:
                    2f:5e:0f:8d:2e:27:b1:1e:c5:58:99:b9:f6:0c:a9:
                    de:d5:ba:91:b9:df:8a:89:47:a2:dc:3e:48:5e:23:
                    45:e0:5e:26:05:04:84:58:f9:94:4e:d4:e6:ae:8e:
                    93:ac:9f:9a:6c:d9:e6:9d:53:49:89:17:7d:92:3d:
                    e2:7a:fc:f5:17:a1:de:14:8d:e8:a9:3d:e4:f9:ff:
                    44:62:7e:bf:d8:51:d6:16:9c:05:c8:1d:9f:ed:67:
                    f0:f1:c8:87:9e:d7:b1:98:e5:f9:1d:08:3a:6a:8b:
                    96:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E9:E9:70:7C:E0:F1:03:D5:FA:B2:6A:24:EC:61:EE:C5:14:E0:93
            X509v3 Authority Key Identifier:
                keyid:FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/oenpcHzg8QPV-rJqJOxh7sUU4JM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.235.232.0/21
                IPv6:
                  2a0c:600::/29

    Signature Algorithm: sha256WithRSAEncryption
         3c:b0:0d:f1:47:a3:7d:4a:66:31:03:88:b9:ca:b3:10:aa:89:
         fe:f0:1a:e5:86:f7:4f:dd:53:14:4d:9a:e8:93:a4:2f:70:53:
         65:90:15:3c:fa:8f:3d:df:9a:54:90:2a:ec:7a:52:63:80:4e:
         b8:7f:aa:ce:5e:4e:1a:31:00:46:98:5c:9b:46:52:7d:34:6b:
         5c:3e:34:a6:50:97:c2:f2:d8:c5:06:6f:3b:d0:db:b6:ec:0f:
         d2:11:36:15:01:39:03:ca:72:36:65:76:9b:04:b6:30:03:8d:
         e4:2f:7f:32:af:83:6d:bd:ef:20:bd:47:93:da:12:be:b7:98:
         d0:f7:ee:fe:f9:a5:8b:6f:ad:c1:34:29:8c:5f:b4:bf:1d:9a:
         5a:d5:41:af:f2:3f:1c:d1:68:b0:8e:39:97:01:43:19:bc:76:
         fc:7a:a1:1e:c2:9c:1d:bd:d7:b5:21:ef:d4:d4:9f:e9:fd:ba:
         fd:cf:f3:d3:8d:7b:23:c1:19:f8:7c:8a:87:04:0d:f2:6e:cc:
         95:29:01:d4:31:f9:1d:2c:91:ec:31:1b:14:64:a8:66:f9:2c:
         fd:df:2b:af:12:b4:a4:f9:d9:9e:a3:b5:86:8a:27:6c:05:a2:
         46:32:f7:bb:ae:17:bc:3a:47:e7:1a:42:8c:8a:2c:8c:a1:e6:
         69:c5:31:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----