Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/3SdRiqHIA4M8isEFgmqm8QcfIRA.roa
File:                     3SdRiqHIA4M8isEFgmqm8QcfIRA.roa (raw, json)
Hash identifier:          Bg82hgHyXjtm6Z4lZD/nZYTynTCSpd5tkMD1+pcD/os=
Subject key identifier:   DD:27:51:8A:A1:C8:03:83:3C:8A:C1:05:82:6A:A6:F1:07:1F:21:10
Certificate issuer:       /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial:       01918EF7610F3AC8CBA077B917FE8B63F571
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/3SdRiqHIA4M8isEFgmqm8QcfIRA.roa
Signing time:             Mon 26 Aug 2024 13:54:22 +0000
ROA not before:           Mon 26 Aug 2024 13:54:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211974
IP address blocks:        195.5.76.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:8e:f7:61:0f:3a:c8:cb:a0:77:b9:17:fe:8b:63:f5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
        Validity
            Not Before: Aug 26 13:54:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=dd27518aa1c803833c8ac105826aa6f1071f2110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:71:0f:ed:90:13:08:51:20:9c:8e:5e:62:
                    4f:28:78:8e:c7:f8:db:3a:40:bd:b2:75:1f:91:71:
                    10:76:f8:50:69:1b:3a:df:b9:db:9f:67:c4:c5:e6:
                    46:4b:47:bc:2f:e9:19:e0:12:5c:85:09:a2:ba:3b:
                    52:95:17:46:fc:bf:d1:d6:81:5d:72:c4:cb:61:b0:
                    aa:a3:89:33:6e:59:5b:ba:a8:1a:85:1f:20:3b:67:
                    b2:16:0e:8d:af:5f:9d:93:59:37:c9:56:fe:c7:9f:
                    2a:e4:3b:7a:64:23:67:a0:50:4d:dc:96:9d:1e:7f:
                    0f:fa:39:87:be:01:a1:36:8a:2d:2f:21:b5:c8:55:
                    c8:db:6c:2f:10:81:d4:d5:aa:9b:da:65:7a:15:4a:
                    47:7c:0a:f9:17:fa:8f:1f:3c:64:27:7d:ea:23:dd:
                    8c:e6:0b:b8:c0:24:03:dd:c6:cc:f9:8a:89:d8:a2:
                    86:c5:d4:2f:19:7d:29:a9:f7:65:19:58:0e:69:1f:
                    fa:8a:b3:b2:2c:70:ec:1a:94:a1:10:0b:7d:51:57:
                    da:47:7c:24:64:d2:bd:1d:9c:ea:76:6f:83:b1:68:
                    26:f9:38:ca:f2:55:35:24:d3:50:11:61:1c:ba:b4:
                    fc:a7:10:f1:51:82:01:4b:03:65:ce:fe:22:02:ba:
                    25:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:27:51:8A:A1:C8:03:83:3C:8A:C1:05:82:6A:A6:F1:07:1F:21:10
            X509v3 Authority Key Identifier:
                keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/3SdRiqHIA4M8isEFgmqm8QcfIRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.5.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:da:1b:af:a2:a3:20:8b:36:31:d6:b4:0a:df:0d:07:6b:3e:
         59:11:8c:2d:d2:60:c4:eb:31:84:c7:b2:53:08:6f:ec:90:39:
         d9:9d:b9:6a:a2:3b:95:10:fc:70:63:d3:90:94:ee:05:cd:ae:
         ed:11:92:06:21:cd:f4:2f:25:51:55:5d:cc:a3:a5:e4:b6:cb:
         25:6a:d5:8d:ff:6b:2a:9b:f2:8a:06:0f:fa:3d:fd:30:00:35:
         12:e5:27:3a:f0:a3:e8:35:92:03:37:40:40:91:95:a2:71:32:
         eb:05:8d:be:5a:22:4c:05:f6:7c:33:93:14:05:93:1a:8a:ea:
         7b:4e:18:60:40:29:54:d9:37:6f:54:e8:2a:dd:7b:f3:02:a0:
         78:b9:d0:06:78:83:4a:6c:c2:2b:fe:ab:61:52:3e:9c:9c:33:
         39:da:df:c2:22:81:3f:6d:90:f2:2f:c4:71:c0:0f:c2:a3:8b:
         a0:ff:fb:3c:c3:0f:57:4b:fb:c5:dd:1e:b1:e6:f8:5e:0b:c7:
         ec:f8:b2:89:5f:a1:94:4e:e7:9f:38:9e:9a:89:65:5e:a4:12:
         f7:79:9e:3d:4b:11:55:e1:84:31:0f:89:db:38:2a:ae:20:29:
         e4:fa:52:64:85:e1:5e:1a:e2:df:63:70:bd:bc:f5:73:81:8a:
         81:87:eb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----