Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/KVIjbEYwlYHNE7SjeBSZ9snwsuM.roa
File:                     KVIjbEYwlYHNE7SjeBSZ9snwsuM.roa (raw, json)
Hash identifier:          jHpTUbyUDvIBB9d7GvdlvIiOW08/ogM82drw/TrRWfg=
Subject key identifier:   29:52:23:6C:46:30:95:81:CD:13:B4:A3:78:14:99:F6:C9:F0:B2:E3
Certificate issuer:       /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Certificate serial:       0194DF65028A0A806EBD7E79E2F07B879769
Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/KVIjbEYwlYHNE7SjeBSZ9snwsuM.roa
Signing time:             Fri 07 Feb 2025 07:52:06 +0000
ROA not before:           Fri 07 Feb 2025 07:52:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207406
IP address blocks:        185.64.4.0/24 maxlen: 24
                          2a10:1f00::/31 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:df:65:02:8a:0a:80:6e:bd:7e:79:e2:f0:7b:87:97:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
        Validity
            Not Before: Feb  7 07:52:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2952236c46309581cd13b4a3781499f6c9f0b2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:94:ab:56:7d:f2:66:c8:54:5e:ac:99:9a:00:
                    c6:45:fe:fb:bc:62:1e:0c:16:3c:63:71:c6:4e:c0:
                    c8:4c:81:13:c1:67:a3:39:6b:21:e0:6c:f9:9d:86:
                    15:fe:d7:1b:5f:5c:f1:06:cf:13:e3:3a:77:5b:88:
                    d7:13:c3:3e:9e:34:db:bc:6c:4b:2b:4e:da:df:6f:
                    ec:34:14:52:ea:05:89:f0:ef:9d:db:46:c3:5a:37:
                    f4:28:68:c1:30:9d:64:6c:aa:46:b8:95:59:65:14:
                    b9:f4:78:c6:b3:e6:7b:1e:5c:d2:46:7f:21:95:c0:
                    25:a6:37:39:9a:4c:64:ce:d2:de:77:94:d5:ba:33:
                    2a:e8:2e:96:48:be:26:42:8c:02:bd:95:33:aa:3a:
                    ab:68:34:f4:be:fe:7b:a5:9b:fc:60:e8:c6:98:9a:
                    13:2e:7c:d7:81:43:2f:56:f7:09:fe:e2:d3:6e:26:
                    89:c1:e5:04:52:9b:7f:b5:35:e5:78:7d:e3:86:d6:
                    3e:40:cd:a7:66:67:eb:cf:21:b9:d3:07:20:f4:26:
                    44:a2:5c:da:b4:3d:c1:79:94:69:7c:b6:d5:f2:59:
                    b6:8e:c8:78:9e:3c:aa:22:d5:6b:c1:1e:0b:31:97:
                    d0:3c:dd:8d:ad:a4:48:5d:b0:dc:be:21:7a:af:6b:
                    3f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:52:23:6C:46:30:95:81:CD:13:B4:A3:78:14:99:F6:C9:F0:B2:E3
            X509v3 Authority Key Identifier:
                keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/KVIjbEYwlYHNE7SjeBSZ9snwsuM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.64.4.0/24
                IPv6:
                  2a10:1f00::/31

    Signature Algorithm: sha256WithRSAEncryption
         53:04:51:ba:c9:3c:a0:0d:68:fe:b2:c3:7a:8b:98:68:4b:ca:
         8e:af:20:5b:20:65:e5:26:6e:50:81:c6:96:52:7a:5c:43:d5:
         65:3d:1a:c7:31:5e:3d:d9:45:ab:6c:82:49:b5:6f:51:e7:6b:
         9f:91:66:62:df:53:30:17:a1:1d:dc:ea:ec:99:e8:64:75:f7:
         49:69:81:6d:ad:83:56:2a:c3:3f:c1:40:8e:03:e8:12:99:09:
         60:5c:2c:5a:b9:ef:50:8d:56:70:56:c2:0b:b6:bb:67:ef:5e:
         bb:b9:bf:90:f2:f2:e6:44:3f:9b:4f:86:ee:3f:cd:60:40:0a:
         40:93:be:79:0e:8f:3f:e9:22:a0:4f:df:08:ad:01:03:90:8b:
         3f:da:9e:ce:1f:b5:b0:06:db:10:ff:a8:d5:03:63:d7:84:47:
         52:ee:5a:33:65:56:d6:45:69:20:5b:36:e5:35:13:cc:e2:d2:
         cd:45:1a:78:5e:e4:c4:68:65:b2:46:87:46:bf:5d:96:2c:22:
         05:dd:5c:70:99:a1:aa:94:af:91:f1:f5:44:60:31:e2:5d:5d:
         bc:f6:c2:d8:03:db:5d:3e:0d:cb:29:f3:b0:1b:61:3f:c8:6d:
         5d:45:e7:8e:fc:56:a6:5a:1c:94:8d:a0:f8:88:b3:b6:01:5e:
         7b:6d:79:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----