Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/DoB_m3bO3Alfh3XsJ5IDWGGLpH4.roa
File:                     DoB_m3bO3Alfh3XsJ5IDWGGLpH4.roa (raw, json)
Hash identifier:          T+z8kpd7f2yzPGuk4FQyQ0yuOUjnjlq7Qbhdx2xLUgg=
Subject key identifier:   0E:80:7F:9B:76:CE:DC:09:5F:87:75:EC:27:92:03:58:61:8B:A4:7E
Certificate issuer:       /CN=d8a711b135dfd5f34bbb98c10036f8d8f0c1731f
Certificate serial:       018AEF45BE1E34DBAFEB9FDDBB36144D5EBD
Authority key identifier: D8:A7:11:B1:35:DF:D5:F3:4B:BB:98:C1:00:36:F8:D8:F0:C1:73:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2KcRsTXf1fNLu5jBADb42PDBcx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/DoB_m3bO3Alfh3XsJ5IDWGGLpH4.roa
Signing time:             Mon 02 Oct 2023 07:23:59 +0000
ROA not before:           Mon 02 Oct 2023 07:23:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204916
IP address blocks:        194.26.210.0/24 maxlen: 24
                          2a12:7c00::/32 maxlen: 32
                          2a12:7c01::/32 maxlen: 32
                          2a12:7c03::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ef:45:be:1e:34:db:af:eb:9f:dd:bb:36:14:4d:5e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8a711b135dfd5f34bbb98c10036f8d8f0c1731f
        Validity
            Not Before: Oct  2 07:23:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0e807f9b76cedc095f8775ec27920358618ba47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9a:cd:66:5f:5e:15:a3:01:d3:2d:94:d7:6d:
                    0d:c3:56:d8:ee:56:9f:eb:7e:27:34:0b:66:47:e6:
                    e3:ce:82:ac:db:70:d7:88:56:da:77:8f:61:12:d1:
                    3f:d0:7f:1d:af:38:2f:c4:f5:5a:0a:20:af:51:c0:
                    c0:06:c0:87:2c:68:14:75:a3:44:81:83:7a:5a:6d:
                    ea:c7:bd:3d:64:cb:d8:c2:ff:76:f1:48:76:4b:01:
                    1d:50:96:9b:a6:42:e1:78:c9:f3:e1:2b:bc:05:f9:
                    6a:b7:da:ec:a6:06:1c:21:3d:b7:47:13:e2:34:1b:
                    c0:38:c7:a4:2d:aa:07:da:ac:4a:51:fd:08:a2:31:
                    21:24:e5:d4:c6:25:0d:1e:05:19:17:87:95:8e:a4:
                    9b:47:61:b5:4b:bd:89:2c:59:53:cb:f3:7a:79:9e:
                    41:53:c1:16:46:51:5a:68:42:ac:cf:0b:78:1e:c8:
                    db:44:4c:cc:16:8d:50:c9:22:68:40:59:22:87:17:
                    74:a7:97:bf:82:40:d1:92:df:cb:12:be:72:dd:df:
                    0e:c7:14:f0:49:55:aa:ea:6f:09:43:5b:dc:3c:42:
                    e6:11:34:df:0c:80:44:40:bc:94:50:d4:8c:40:c7:
                    a3:a8:fd:5e:4d:2f:64:c8:6c:e5:5a:fe:1c:22:53:
                    33:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:80:7F:9B:76:CE:DC:09:5F:87:75:EC:27:92:03:58:61:8B:A4:7E
            X509v3 Authority Key Identifier:
                keyid:D8:A7:11:B1:35:DF:D5:F3:4B:BB:98:C1:00:36:F8:D8:F0:C1:73:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KcRsTXf1fNLu5jBADb42PDBcx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/DoB_m3bO3Alfh3XsJ5IDWGGLpH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/2KcRsTXf1fNLu5jBADb42PDBcx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.210.0/24
                IPv6:
                  2a12:7c00::/31
                  2a12:7c03::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:73:4e:63:df:41:b1:bb:62:17:11:e4:a9:9e:53:da:58:86:
         1c:02:f8:f0:52:5a:3c:c4:6e:4c:64:17:6b:1a:13:b3:2b:0f:
         12:b7:1e:5e:71:86:3f:19:50:43:fc:4b:18:1e:37:5d:3a:44:
         1b:fa:fd:1f:e8:ea:e9:e6:21:1f:97:e6:9d:5a:2f:9c:ef:8b:
         1f:82:17:ce:79:f9:27:3f:13:a8:08:0f:aa:6a:b5:be:86:41:
         31:7b:74:76:e4:c3:27:be:e5:7e:0e:52:b2:3d:bc:a2:87:ae:
         1c:c5:32:a5:b7:d9:4e:01:41:88:b7:3a:b0:60:2f:1c:8c:0c:
         8d:ea:98:d3:f4:75:db:73:8e:19:7c:18:48:7d:64:9d:55:b1:
         d8:f7:f8:70:99:9b:78:3a:ca:30:7b:5b:b6:62:bd:f6:dc:3b:
         7e:2f:f8:86:64:0e:f3:7e:bb:fe:c7:64:8e:91:2c:5c:cd:6e:
         16:87:99:b7:d8:d5:83:9a:74:7c:55:b2:d7:15:69:f2:e0:db:
         72:ed:03:a2:d6:04:f3:ed:03:b4:6d:be:2b:ac:d6:24:26:7c:
         d2:4e:3a:c6:9a:8b:52:9f:b1:19:cf:65:ec:04:74:d5:04:39:
         a3:fd:35:62:2d:12:35:cd:af:14:06:93:01:8a:be:2d:68:1d:
         63:6d:45:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----