Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f75751-6f33-49f1-896c-ab43d8b96cce/1/AJ44oYNTNuWX6lQ0vP-Qpr15UCA.roa
File:                     AJ44oYNTNuWX6lQ0vP-Qpr15UCA.roa (raw, json)
Hash identifier:          CO0CcWW3VEkKRASE7W/+8bAgix3GOflCGSvrdGq/DsU=
Subject key identifier:   00:9E:38:A1:83:53:36:E5:97:EA:54:34:BC:FF:90:A6:BD:79:50:20
Certificate issuer:       /CN=04b6c6e218ee14cf65c640aadf611ac72a2ba946
Certificate serial:       01856C135195D0D321C2E1D14CB8BAFEB8CB
Authority key identifier: 04:B6:C6:E2:18:EE:14:CF:65:C6:40:AA:DF:61:1A:C7:2A:2B:A9:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLbG4hjuFM9lxkCq32EaxyorqUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/f75751-6f33-49f1-896c-ab43d8b96cce/1/AJ44oYNTNuWX6lQ0vP-Qpr15UCA.roa
Signing time:             Sun 01 Jan 2023 06:44:43 +0000
ROA not before:           Sun 01 Jan 2023 06:44:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60144
IP address blocks:        185.234.218.0/24 maxlen: 24
                          2a12:1680::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:13:51:95:d0:d3:21:c2:e1:d1:4c:b8:ba:fe:b8:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b6c6e218ee14cf65c640aadf611ac72a2ba946
        Validity
            Not Before: Jan  1 06:44:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=009e38a1835336e597ea5434bcff90a6bd795020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bd:dd:20:a4:c0:86:aa:54:85:12:8d:c8:db:
                    ab:2c:03:bd:d7:69:27:ae:4d:6f:64:ca:16:fc:40:
                    5d:a6:a2:b6:37:42:f0:14:4b:7f:8f:5d:29:7a:3c:
                    d3:cc:a9:62:11:16:b9:bb:4e:a4:f8:fe:74:9a:b9:
                    1f:59:c9:f8:09:6b:c2:cd:99:59:fa:64:09:85:21:
                    6d:59:84:61:49:92:0e:f6:e5:82:af:bf:05:31:ea:
                    d8:a8:96:ef:51:25:7b:76:73:9b:f4:fb:cb:3f:4e:
                    ae:ec:57:88:3b:96:df:97:ca:86:93:15:d7:68:a3:
                    72:3f:bf:b5:35:ed:9c:56:92:62:05:3b:21:b8:df:
                    da:20:8b:40:70:d6:77:3e:6d:79:f7:74:a7:8b:17:
                    92:a4:c3:25:ba:2a:7c:21:1b:3a:49:a5:68:86:68:
                    47:a1:5b:34:44:f6:77:40:98:2e:82:89:f2:5c:77:
                    2d:22:00:f4:35:1f:ca:96:f0:1f:16:25:b8:88:cf:
                    8d:8c:ec:d1:dc:62:37:ed:24:77:02:99:68:1c:c4:
                    44:90:65:5e:11:37:43:d5:ac:21:b2:9f:f6:f3:0c:
                    c0:41:d6:2d:d9:f9:6a:9d:a1:91:1f:49:38:69:5b:
                    3a:b4:74:21:c1:48:e3:8e:cc:5d:09:00:1d:39:89:
                    2b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9E:38:A1:83:53:36:E5:97:EA:54:34:BC:FF:90:A6:BD:79:50:20
            X509v3 Authority Key Identifier:
                keyid:04:B6:C6:E2:18:EE:14:CF:65:C6:40:AA:DF:61:1A:C7:2A:2B:A9:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLbG4hjuFM9lxkCq32EaxyorqUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f75751-6f33-49f1-896c-ab43d8b96cce/1/AJ44oYNTNuWX6lQ0vP-Qpr15UCA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f75751-6f33-49f1-896c-ab43d8b96cce/1/BLbG4hjuFM9lxkCq32EaxyorqUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.218.0/24
                IPv6:
                  2a12:1680::/29

    Signature Algorithm: sha256WithRSAEncryption
         78:a4:9f:ae:67:98:85:f0:29:89:71:4c:24:f0:7e:a6:d6:d7:
         97:6d:d2:fb:23:8c:84:02:26:7c:82:0c:e5:25:51:c5:ab:9c:
         55:f3:cf:59:b2:45:4c:9e:66:39:87:f2:2c:41:e5:49:74:75:
         1a:6a:93:0c:80:a0:4c:b2:a7:4e:1a:60:27:39:42:1b:06:53:
         7c:04:18:45:0c:69:4e:e3:74:96:b4:d1:46:40:75:df:8c:9d:
         b7:3b:54:19:e0:f6:68:a9:67:ef:c6:4e:6e:4f:d5:69:d7:8d:
         fa:61:ff:5b:3a:30:96:ee:48:a3:ea:ae:ad:bf:5e:a8:4b:c6:
         3c:42:60:ee:0c:57:8b:b2:c3:b1:cb:a9:ba:cd:a1:be:a9:4a:
         67:10:50:d1:43:03:97:ca:16:98:f6:49:fb:01:c9:79:d5:2a:
         88:6e:d1:82:e3:66:03:e5:e8:29:0a:4d:67:29:57:1f:79:04:
         44:f6:cf:98:1c:06:06:93:42:a5:a2:80:1c:de:74:35:c2:39:
         18:9b:33:ec:b0:89:15:da:5f:44:cf:0c:6e:e1:f7:12:ef:d2:
         5d:06:37:84:a4:59:31:2d:ef:a6:01:af:eb:9e:9d:a5:ba:7e:
         ea:a3:af:d2:b8:e1:53:bf:5d:02:b6:e9:a4:10:7d:d6:84:4e:
         74:00:94:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----