Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/it39_g-FyH5gKskITWNmlQskR_c.roa
File:                     it39_g-FyH5gKskITWNmlQskR_c.roa (raw, json)
Hash identifier:          vP6yQPmsaGycw6J2wQYmt6+SAXmMIA+ozuRZq/VDGpU=
Subject key identifier:   8A:DD:FD:FE:0F:85:C8:7E:60:2A:C9:08:4D:63:66:95:0B:24:47:F7
Certificate issuer:       /CN=0bdaba873ee18be547bd935943c0798ddcf70935
Certificate serial:       018CC42522924AD214BE0BB66956D88961C2
Authority key identifier: 0B:DA:BA:87:3E:E1:8B:E5:47:BD:93:59:43:C0:79:8D:DC:F7:09:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/it39_g-FyH5gKskITWNmlQskR_c.roa
Signing time:             Mon 01 Jan 2024 08:30:17 +0000
ROA not before:           Mon 01 Jan 2024 08:30:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210398
IP address blocks:        185.81.70.0/24 maxlen: 24
                          2a12:e680::/29 maxlen: 29
                          2a12:e681::/32 maxlen: 32
                          2a12:e680::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:22:92:4a:d2:14:be:0b:b6:69:56:d8:89:61:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bdaba873ee18be547bd935943c0798ddcf70935
        Validity
            Not Before: Jan  1 08:30:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8addfdfe0f85c87e602ac9084d6366950b2447f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:86:d6:78:3c:09:39:7b:a3:fd:8a:b1:9a:7b:
                    16:8f:b8:03:ee:8d:01:e3:4c:8a:d4:f8:f6:ac:f9:
                    a2:d0:3e:b1:9e:42:05:91:c2:29:e2:a8:b5:3d:2c:
                    d1:f8:3a:5c:f9:cb:9a:9f:b5:4a:c6:9f:86:66:c7:
                    48:5c:68:87:ee:20:69:fa:41:7d:75:44:62:be:bf:
                    e0:11:c3:1f:57:2c:8e:6c:f4:67:f0:2e:06:2c:b8:
                    6c:a3:e6:f5:e6:d9:1e:8f:37:0c:fa:95:bc:1b:68:
                    00:5a:7c:f3:d1:45:c1:d5:df:2d:f7:d1:8c:64:0b:
                    6b:d6:fe:6b:34:da:c0:7f:fe:de:e3:2d:9a:76:32:
                    7d:a6:a5:37:90:a6:3a:9d:75:b4:37:be:15:28:2a:
                    25:7c:45:2f:74:6d:4f:b7:8c:69:22:b8:a8:a5:89:
                    44:54:d2:3e:de:2d:1c:2f:3d:7d:de:aa:d3:57:9a:
                    a4:d4:e2:02:1b:8e:a9:e6:bc:0e:75:18:23:52:82:
                    7b:9c:cd:ac:c5:44:d8:d8:94:0b:13:ba:90:1c:2e:
                    85:bc:8d:5d:02:c1:99:31:fa:e7:43:cd:51:5f:e0:
                    ad:76:23:fe:96:d2:e4:26:0b:ca:bf:12:74:34:9b:
                    03:ce:92:fd:b2:43:a2:f4:61:c7:aa:f4:b0:4f:8d:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DD:FD:FE:0F:85:C8:7E:60:2A:C9:08:4D:63:66:95:0B:24:47:F7
            X509v3 Authority Key Identifier:
                keyid:0B:DA:BA:87:3E:E1:8B:E5:47:BD:93:59:43:C0:79:8D:DC:F7:09:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/it39_g-FyH5gKskITWNmlQskR_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.70.0/24
                IPv6:
                  2a12:e680::/29

    Signature Algorithm: sha256WithRSAEncryption
         01:95:80:6a:d1:fd:1c:34:18:51:6a:d1:c1:82:38:ba:64:a1:
         ec:12:be:ce:68:63:55:df:1c:4f:3d:28:65:ab:ca:85:c9:2b:
         28:2d:39:31:91:ba:1c:d8:7c:82:25:fd:5f:be:c5:97:1e:3b:
         66:99:86:72:d7:b3:42:5a:77:f8:f6:7a:94:bd:1a:9e:b4:51:
         56:b4:29:82:f6:48:3c:ab:57:6d:cb:18:d7:69:57:4b:c1:5b:
         41:e0:93:2e:df:f4:20:4b:66:7c:b3:f1:8f:e6:91:ac:59:63:
         f9:a9:84:12:17:22:2f:60:36:ba:7a:d2:c4:0d:27:d8:d4:35:
         35:34:06:88:24:f2:5a:90:23:d2:3e:d6:07:86:7a:66:3e:76:
         d9:cd:15:6e:dc:2d:d9:f3:54:37:c8:32:c0:57:aa:bb:ac:5c:
         0d:b9:35:45:c3:26:be:75:1c:04:25:0a:e0:a9:76:17:0b:66:
         74:e0:09:0d:39:ef:0e:38:88:50:c6:b5:8d:18:b2:da:ba:2c:
         87:85:d1:f7:e3:71:1e:12:3c:78:43:3f:02:fd:88:44:fd:1e:
         4f:35:9b:a9:17:01:ca:14:02:96:e3:a9:a9:89:72:68:69:73:
         8e:85:50:05:96:82:d4:ac:d4:3d:80:46:b9:38:c5:dc:30:7d:
         bf:97:59:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----