Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e20393936.roa
File:                     3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (raw, json)
Hash identifier:          ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=
Subject key identifier:   F5:69:B5:32:89:DA:DA:BC:41:2F:0D:D4:A4:04:63:3E:D9:62:04:C5
Certificate issuer:       /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial:       1991B67D052F1B2ADDB8F6C9CE616F502A1591CD
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e20393936.roa
Signing time:             Sun 30 Mar 2025 05:13:40 +0000
ROA not before:           Sun 30 Mar 2025 05:08:40 +0000
ROA not after:            Sun 29 Mar 2026 05:13:40 +0000
asID:                     996
IP address blocks:        194.124.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:91:b6:7d:05:2f:1b:2a:dd:b8:f6:c9:ce:61:6f:50:2a:15:91:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
        Validity
            Not Before: Mar 30 05:08:40 2025 GMT
            Not After : Mar 29 05:13:40 2026 GMT
        Subject: CN=F569B53289DADABC412F0DD4A404633ED96204C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:4a:9a:ef:f6:b1:88:e2:c4:d6:1a:db:d9:
                    f9:9d:25:bd:fb:35:d4:3c:05:8c:7a:49:d3:1b:36:
                    8a:5c:09:9d:14:d3:b2:20:ff:85:b4:2b:f9:5a:ae:
                    4b:d2:fc:b5:04:cc:42:3f:b2:1e:da:f7:53:a5:8b:
                    a9:89:20:22:fb:8d:1a:f4:3a:f1:f8:dc:f5:3c:1e:
                    18:47:b6:fe:02:72:7a:c4:3e:1c:78:71:40:42:13:
                    0e:0e:b9:4a:33:30:9e:47:c4:2d:73:aa:8e:9c:24:
                    c6:56:bd:69:59:64:7a:68:f2:c3:a9:ef:9c:89:ae:
                    2d:f7:4a:23:76:b3:e1:43:80:6e:a8:b7:c6:bc:94:
                    eb:84:69:2e:1a:b5:90:29:bf:03:1a:9a:77:1f:8c:
                    1e:96:05:05:60:9a:16:f0:e0:3d:6e:c6:71:4d:f0:
                    e5:84:ee:80:6b:a7:50:a2:10:43:88:8e:c1:2d:ec:
                    26:5b:4c:bd:4e:c8:b2:81:f3:3c:0d:1d:11:c1:72:
                    38:31:fa:3b:34:f3:5a:71:49:92:c6:4d:45:c5:45:
                    10:ce:1a:b3:5f:d9:5a:ec:0c:8a:80:b9:ee:ca:ec:
                    3d:c0:82:2e:53:1e:d0:2b:1d:a5:52:2d:4a:12:fc:
                    3f:8a:0f:17:56:aa:06:51:b2:44:fc:c8:82:42:63:
                    fd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:69:B5:32:89:DA:DA:BC:41:2F:0D:D4:A4:04:63:3E:D9:62:04:C5
            X509v3 Authority Key Identifier:
                keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e20393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.124.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:bd:c5:3a:39:94:44:d1:41:16:c5:48:f0:7a:37:4c:63:50:
         ca:60:59:5b:35:3d:32:29:d7:fa:7e:c9:68:09:5b:15:ef:43:
         c8:0a:26:9d:a9:18:1a:61:38:bd:88:51:87:25:90:5d:79:7e:
         41:80:1d:1e:3a:c6:89:c0:1f:f5:f9:25:dc:00:55:f3:82:b6:
         2f:78:0d:7b:ec:b9:5f:e9:95:59:ee:75:e3:01:39:ff:0d:a1:
         9d:57:90:24:d8:85:ee:e4:62:eb:7f:63:26:b3:70:66:c0:7d:
         79:89:6e:ce:90:f6:88:57:96:73:21:ba:74:c9:5f:af:95:a9:
         d2:02:37:6d:e8:16:a0:47:d3:e4:04:cb:c9:2b:aa:f3:f7:d0:
         b6:2f:92:86:f6:59:cf:57:71:76:82:d9:6b:47:3b:42:c8:f1:
         8f:1f:0f:ae:b3:de:0c:ac:28:0d:1e:85:32:f2:6b:c8:6b:ad:
         b4:d6:df:0a:31:bf:2b:98:0d:d1:16:1a:a5:85:42:34:0d:27:
         ef:88:fe:09:ba:8e:05:d6:3b:cf:14:e6:a1:c3:a7:88:3f:59:
         0f:6a:9a:8f:23:1c:30:2b:55:33:2f:30:84:56:ac:ed:4d:d5:
         68:0b:98:07:e3:ff:b4:eb:5d:cf:75:4a:85:35:a5:66:79:03:
         08:0a:74:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----