Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa
File:                     r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa (raw, json)
Hash identifier:          lJ1n4OTRsjhQ2vj+G2gNkyHqsFIRt5AG3VU9W6pXzHs=
Subject key identifier:   AF:F1:A0:38:EA:CA:F0:88:7D:33:39:AD:9C:20:3F:0F:1C:42:D0:16
Certificate issuer:       /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial:       01942445856828729751B871DC78518062BA
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa
Signing time:             Wed 01 Jan 2025 23:48:43 +0000
ROA not before:           Wed 01 Jan 2025 23:48:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215435
IP address blocks:        216.87.54.0/24 maxlen: 24
                          2001:678:204::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:85:68:28:72:97:51:b8:71:dc:78:51:80:62:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
        Validity
            Not Before: Jan  1 23:48:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aff1a038eacaf0887d3339ad9c203f0f1c42d016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0d:6d:75:62:8b:1f:c3:ea:8e:f5:8f:30:da:
                    a4:5c:bb:de:48:56:26:30:a3:16:c5:0b:9a:30:4c:
                    84:05:9c:3f:b1:fe:92:fb:28:49:eb:dc:e3:86:1f:
                    21:9e:23:23:64:60:3e:ec:f0:e0:8d:c5:42:c8:83:
                    55:01:8c:a2:ee:20:15:43:38:dc:81:c3:a8:ff:06:
                    10:d8:1a:5a:b0:5e:d8:5d:56:da:91:52:4b:2a:1a:
                    98:c2:ef:9b:90:db:c0:a2:08:05:4b:44:16:30:70:
                    30:78:a4:f3:c7:c9:c3:64:04:13:28:4f:a7:d1:a8:
                    41:35:58:12:01:2a:0b:35:83:b1:d7:ad:f3:bc:26:
                    cc:dd:fa:50:7d:82:ab:da:6b:ba:0c:54:41:54:5d:
                    39:05:c3:c1:0b:d6:37:07:0f:f0:34:51:9f:f3:4a:
                    c2:36:13:29:af:0a:ea:0a:13:24:f6:a8:fd:fb:78:
                    4c:13:2c:7c:17:26:37:cb:bf:e6:b4:8f:cb:05:52:
                    75:28:38:f9:64:70:88:66:7f:ef:6b:6d:1f:38:b5:
                    7c:e1:50:3c:da:22:e9:a0:b5:24:34:6c:5b:71:8f:
                    c9:75:e9:c9:c4:0e:b2:79:5a:65:36:6c:6a:c4:a4:
                    78:a9:eb:4d:67:f0:e9:7c:1f:5f:ef:9d:92:8e:01:
                    a3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F1:A0:38:EA:CA:F0:88:7D:33:39:AD:9C:20:3F:0F:1C:42:D0:16
            X509v3 Authority Key Identifier:
                keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.54.0/24
                IPv6:
                  2001:678:204::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:af:8d:fb:45:0b:51:78:58:9d:b7:1f:8c:48:36:7f:75:b6:
         52:ea:fc:a9:25:0c:0d:9c:7e:98:d7:08:55:20:d8:90:2a:7f:
         57:36:5e:9c:19:31:81:98:a3:25:78:0d:fd:94:4f:a7:b7:10:
         30:4b:57:21:e1:a8:b7:b9:4a:01:8c:e7:ba:75:b9:e0:df:fb:
         59:d2:13:53:5b:d5:08:1f:be:4c:d7:b9:d9:b9:8a:40:6b:59:
         19:d9:d1:bc:99:0a:40:c4:26:9a:9c:d7:d3:75:c0:7d:86:f6:
         d0:ae:f0:20:a2:64:76:d6:55:4b:ff:d9:20:57:42:33:9e:58:
         69:3e:fb:d5:09:b5:de:76:cf:ed:fa:f8:ce:57:95:2d:91:6e:
         13:34:c6:1d:8e:11:cf:69:6c:4b:e0:1d:f9:bb:d9:5d:5a:62:
         cc:3d:f2:80:b4:ab:e1:9e:d3:3e:cd:f9:5e:23:0b:4a:e0:6c:
         4d:0a:3a:a6:17:3e:66:b8:30:f9:02:be:a4:cf:c2:8f:d1:6a:
         85:30:e0:80:11:74:e6:92:67:a0:65:90:a1:a0:c4:31:67:17:
         34:19:ae:bc:00:0a:85:c7:e9:bd:0d:da:aa:ca:31:eb:fe:72:
         14:f1:6b:33:1c:01:3a:02:16:3e:10:e7:20:43:4e:05:ef:7f:
         bd:d4:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----