Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/CD7IKjj95ceaaGx4TcDqt1fkQc4.roa
File:                     CD7IKjj95ceaaGx4TcDqt1fkQc4.roa (raw, json)
Hash identifier:          oxsQoGQf4JCs0jHOtVvW5S1Lv1+lG/cf2ySUnlP6Tng=
Subject key identifier:   08:3E:C8:2A:38:FD:E5:C7:9A:68:6C:78:4D:C0:EA:B7:57:E4:41:CE
Certificate issuer:       /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial:       01913256F3F6420DF68A43C8C1D68B4C1F44
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/CD7IKjj95ceaaGx4TcDqt1fkQc4.roa
Signing time:             Thu 08 Aug 2024 14:14:04 +0000
ROA not before:           Thu 08 Aug 2024 14:14:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215435
IP address blocks:        216.87.54.0/24 maxlen: 24
                          2001:678:204::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:32:56:f3:f6:42:0d:f6:8a:43:c8:c1:d6:8b:4c:1f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
        Validity
            Not Before: Aug  8 14:14:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=083ec82a38fde5c79a686c784dc0eab757e441ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:2c:bf:f4:07:75:ed:a7:11:a2:48:9b:de:
                    29:1a:0e:05:73:b4:dd:66:9a:1f:74:a0:d0:ac:28:
                    92:47:46:50:b6:5e:3d:4d:88:28:81:35:8b:ba:22:
                    5e:8a:c1:31:cc:73:7d:34:36:b9:ac:f5:a0:bb:6d:
                    ed:4d:a5:d3:0a:00:ff:8f:d0:9f:1b:9b:1a:30:e7:
                    24:9a:8b:1b:c4:b7:b1:13:c9:a8:61:38:bb:f6:b9:
                    39:b5:83:ef:65:b4:77:23:b3:bc:41:13:75:8b:da:
                    93:53:6a:db:07:2b:8c:50:88:09:34:a1:3f:f0:9a:
                    34:6f:68:c3:bf:f9:ba:6a:ef:cc:0e:6c:c4:0d:c1:
                    1e:87:71:28:2f:c1:ee:0a:91:33:0a:23:a0:23:d6:
                    2d:a3:6d:15:e8:68:c7:e2:97:57:19:83:36:f5:ce:
                    57:50:6b:e4:12:e2:9c:4b:24:8e:38:98:a8:1b:22:
                    aa:aa:a9:25:b2:75:2b:cb:6b:65:60:17:99:ed:f8:
                    ca:4d:08:69:5a:1d:55:84:19:1d:bc:ab:fb:c7:02:
                    d7:70:c9:a4:ca:04:15:ef:14:99:3a:4f:fd:08:8b:
                    8f:b5:ed:30:a2:4a:2c:c2:ac:59:07:2e:b2:52:a4:
                    37:ae:69:29:29:7e:2e:ed:df:aa:e6:72:7a:db:45:
                    98:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3E:C8:2A:38:FD:E5:C7:9A:68:6C:78:4D:C0:EA:B7:57:E4:41:CE
            X509v3 Authority Key Identifier:
                keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/CD7IKjj95ceaaGx4TcDqt1fkQc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.54.0/24
                IPv6:
                  2001:678:204::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:20:ac:b6:3d:5b:dc:2c:a9:29:a7:00:f5:3c:8c:cb:4a:d7:
         b8:b5:7b:53:6b:04:fc:6f:36:76:08:8d:80:94:7e:ce:bd:f0:
         48:09:c9:ee:0f:d4:62:1a:50:45:25:8d:5d:d2:5b:21:a9:b0:
         ec:06:5d:29:4b:b1:f7:07:30:e9:7c:69:92:c5:52:93:f6:7c:
         45:e4:96:94:40:86:ee:26:a8:60:26:0e:03:8c:04:96:6b:b9:
         23:fb:fa:79:7a:f5:85:5a:da:4d:da:64:c5:e8:fc:2e:4b:a1:
         bc:18:05:d0:18:82:49:60:20:b1:37:c4:c2:66:6f:94:e6:c6:
         f2:e7:19:ca:08:43:a7:e5:55:35:03:1e:45:b8:8e:40:6d:54:
         9e:8b:40:59:c8:bc:aa:a7:22:8d:73:f4:77:7d:6c:13:79:2f:
         37:a6:6b:a9:34:6f:af:79:b1:69:b7:bd:e6:91:60:ca:40:32:
         eb:ed:2b:6b:77:9b:11:6f:71:35:7f:b9:2e:e6:a8:8d:09:01:
         f6:60:ae:72:a2:5c:0d:0c:39:33:c3:05:e7:c7:e4:38:e2:3c:
         f3:94:52:31:b9:60:b1:88:8d:c9:f9:d7:50:80:c4:31:2a:dd:
         8e:06:7e:a0:11:9b:c8:11:3b:c1:c4:cb:92:64:ef:6a:d6:60:
         e6:f3:1f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----