Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/lxW4zSYAimUluowH0s8gP36GI8E.roa
File:                     lxW4zSYAimUluowH0s8gP36GI8E.roa (raw, json)
Hash identifier:          ACOT5wzA2KcUFV8Qgc3AQN3HAUIG6x6Guns6Pzhv5rk=
Subject key identifier:   97:15:B8:CD:26:00:8A:65:25:BA:8C:07:D2:CF:20:3F:7E:86:23:C1
Certificate issuer:       /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial:       019427B41C5B7BD3C4A083E7B9A49B242758
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/lxW4zSYAimUluowH0s8gP36GI8E.roa
Signing time:             Thu 02 Jan 2025 15:48:22 +0000
ROA not before:           Thu 02 Jan 2025 15:48:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209295
IP address blocks:        193.228.229.0/24 maxlen: 24
                          2001:678:ea8::/48 maxlen: 48
                          2001:67c:1788::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b4:1c:5b:7b:d3:c4:a0:83:e7:b9:a4:9b:24:27:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
        Validity
            Not Before: Jan  2 15:48:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9715b8cd26008a6525ba8c07d2cf203f7e8623c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:0e:ed:b3:84:3f:5e:05:1f:81:4f:9a:e4:
                    76:2d:48:5e:07:93:8b:86:6f:87:21:ca:f6:91:98:
                    8b:a4:06:9e:80:3d:cd:d9:f6:f2:65:b0:85:31:c0:
                    57:18:1a:f0:56:84:c8:f9:fc:99:e0:06:3b:9f:a9:
                    7b:81:ca:08:75:e4:ff:15:20:07:2b:02:c6:16:c5:
                    91:cd:9f:ab:7a:ff:e2:1d:ab:f0:21:e0:d3:6f:a6:
                    ab:ed:85:70:e3:39:0e:3b:d1:14:59:b6:60:5b:8b:
                    9b:fc:4e:77:4e:2c:1a:8e:be:7a:14:c3:77:64:31:
                    7e:88:fe:07:7a:51:94:de:be:e4:6a:e3:7f:99:22:
                    12:2e:d2:04:a9:2e:79:1a:42:a4:65:dc:7c:13:5a:
                    38:c8:60:c4:1b:2e:57:8f:99:af:43:c9:6d:e0:c9:
                    7d:6e:e4:9f:02:37:56:87:0e:ea:b5:32:05:de:f2:
                    ef:b5:3b:d5:4a:da:e7:c1:5b:1b:22:fc:36:d1:ad:
                    8c:32:a8:67:fc:1f:bd:94:8a:e0:fe:cc:79:5f:1d:
                    23:cd:27:93:d4:e3:f8:de:15:c0:2a:a2:c7:00:17:
                    2a:cc:31:a1:78:11:3c:28:db:0d:0c:2b:3d:e0:ac:
                    07:2c:f9:e7:20:d0:c4:ac:c3:c6:54:6b:34:46:51:
                    74:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:15:B8:CD:26:00:8A:65:25:BA:8C:07:D2:CF:20:3F:7E:86:23:C1
            X509v3 Authority Key Identifier:
                keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/lxW4zSYAimUluowH0s8gP36GI8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.229.0/24
                IPv6:
                  2001:678:ea8::/48
                  2001:67c:1788::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:89:e7:bd:1d:f7:45:8c:2b:50:e1:af:3d:a2:2f:70:fa:
         e3:91:49:5f:1c:19:63:87:78:05:04:3d:e5:ac:d5:07:a4:1b:
         7a:fa:a5:28:63:84:36:7b:1b:e0:75:f4:75:9d:15:ee:11:fb:
         c9:79:69:2f:ba:b5:48:89:91:9d:92:7a:5c:09:54:af:6a:99:
         9e:95:61:7b:73:5d:cb:dc:97:7f:e6:3f:da:5f:0b:6a:60:97:
         78:c1:32:9a:ce:27:15:1f:9e:14:7f:21:6f:54:4f:d6:94:b8:
         c3:cf:ae:05:f9:de:32:91:e7:87:a9:b7:af:2a:ec:15:2f:58:
         8d:f6:84:e9:59:03:98:ca:ad:3a:d6:e6:f1:d6:fc:e9:cf:11:
         80:b0:9d:9c:55:38:6d:d1:75:23:0b:5c:23:6e:31:84:0e:40:
         6a:03:b8:6d:cc:38:0a:3f:c7:45:6c:96:be:a3:be:83:18:ef:
         2b:4f:14:8e:dc:11:c9:fb:1e:93:e4:7f:c1:b0:2e:da:a4:3c:
         de:a2:20:3d:d1:f2:04:ec:97:5b:2b:fb:da:30:b1:32:57:a4:
         da:bf:f3:17:3d:79:95:d0:68:17:47:1a:f5:93:87:39:eb:0a:
         0b:cd:12:bc:4b:2b:ec:14:fb:a9:b4:70:1f:ed:0d:3c:8d:5a:
         c1:85:7b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----