Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa
File:                     k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa (raw, json)
Hash identifier:          JhnVrlDDk0WiXfNjueDV4ScJZ+zIOFgIC2tv2w+Bb00=
Subject key identifier:   93:B6:3E:16:2D:FC:52:E4:45:3F:49:9E:25:27:90:1A:A8:BF:29:A0
Certificate issuer:       /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial:       0194228DC44EACD776C3C9BCA1A16226DFA3
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa
Signing time:             Wed 01 Jan 2025 15:48:23 +0000
ROA not before:           Wed 01 Jan 2025 15:48:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     28995
IP address blocks:        62.140.160.0/20 maxlen: 20
                          2a02:2670::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:c4:4e:ac:d7:76:c3:c9:bc:a1:a1:62:26:df:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
        Validity
            Not Before: Jan  1 15:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=93b63e162dfc52e4453f499e2527901aa8bf29a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:27:78:c6:ab:0a:51:a2:b4:d6:f8:b8:57:
                    f1:fe:f0:41:0f:48:fb:f9:fc:71:d2:16:ff:06:89:
                    65:e7:71:e4:cf:b4:6e:d9:cd:da:2c:81:49:c9:d0:
                    5f:1d:c8:2f:85:0e:e9:cf:bb:b6:d3:c4:ca:11:57:
                    d2:40:b0:5a:85:79:d3:09:98:48:e0:57:c7:ad:21:
                    9f:c9:2b:b0:9e:ba:75:7f:ab:50:81:0b:cf:28:8f:
                    37:77:1f:ac:ab:3b:08:a7:5a:ee:e1:61:27:23:76:
                    da:f4:57:8a:ca:f2:44:79:ca:b0:da:f9:b2:95:80:
                    6b:6d:c4:dd:64:27:c7:f2:fb:86:f8:db:84:38:f7:
                    48:55:24:de:c2:79:f5:44:e3:11:aa:82:f1:d5:dc:
                    ac:05:87:6a:5a:84:0e:dd:57:a9:72:b1:a3:44:b6:
                    a2:90:60:1f:ed:3a:64:f2:a1:af:f9:d5:7b:53:cd:
                    e3:24:48:84:da:bc:38:d7:95:db:5e:03:b2:4a:fa:
                    56:47:71:22:26:81:94:05:35:20:85:47:d6:dd:5e:
                    5b:6c:25:db:c7:36:ed:db:df:30:9f:27:5f:c9:f6:
                    09:48:99:dc:e4:cd:3e:ce:23:05:a5:5f:e3:9a:15:
                    71:ef:fc:bc:e6:3c:63:6c:c8:82:aa:75:e0:34:61:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B6:3E:16:2D:FC:52:E4:45:3F:49:9E:25:27:90:1A:A8:BF:29:A0
            X509v3 Authority Key Identifier:
                keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.140.160.0/20
                IPv6:
                  2a02:2670::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:0d:62:7a:95:59:1a:4a:0a:5d:6e:80:99:aa:b4:f8:4b:e8:
         a6:b0:85:88:2e:d3:92:e7:89:ac:e6:05:25:05:9e:5b:55:1f:
         2e:a4:d0:20:e9:a2:90:42:cf:d8:6f:00:a2:ab:20:22:92:a2:
         3f:99:a3:b6:da:76:15:f2:86:e1:c0:ec:95:71:ee:72:19:c9:
         78:97:c3:95:9c:ed:cd:f0:98:73:31:28:85:d3:6c:1a:53:18:
         f7:85:56:8a:0c:da:7d:5a:e1:9d:fc:f4:1d:bb:41:28:13:68:
         b9:91:ef:80:01:7b:c3:a1:db:9b:07:f0:35:eb:9b:b8:be:4f:
         5c:27:82:ba:54:a9:6b:44:14:37:47:3b:c4:a8:37:23:94:ec:
         ec:1b:a2:86:5b:40:76:12:c4:b6:f4:1b:14:9a:bd:c8:e1:a2:
         bc:fd:01:bd:00:8d:93:4b:2f:57:79:18:c4:4e:d5:bb:a6:81:
         49:ca:01:00:ef:e3:ec:ac:37:6c:01:62:bf:97:4c:d8:0f:a5:
         3d:2b:73:0e:62:58:43:c1:c8:40:b0:4a:9d:6b:8b:df:19:ff:
         a8:12:01:6a:d6:5f:9d:68:2a:d9:ca:7e:bd:92:9b:4d:13:9f:
         65:3c:de:b8:72:7b:dc:39:db:32:bb:c2:eb:fe:f4:90:ca:1f:
         33:ab:93:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----