Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Pudu/0/39312e3139332e3131342e302f32342d3234203d3e203437363839.roa
File:                     39312e3139332e3131342e302f32342d3234203d3e203437363839.roa (raw, json)
Hash identifier:          +4wCGcsJhsVqUE71h51EDc4lNdRuFiLK26T79DloNqA=
Subject key identifier:   85:5F:E9:3D:93:74:CF:D9:50:93:ED:49:B7:A5:51:FB:73:7B:A6:A4
Certificate issuer:       /CN=ead264c4a27c6bf24ae80e57c50bd86d4b72b06e
Certificate serial:       0FF4826E8335F8EEF6AF98D80F396F129190D619
Authority key identifier: EA:D2:64:C4:A2:7C:6B:F2:4A:E8:0E:57:C5:0B:D8:6D:4B:72:B0:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tJkxKJ8a_JK6A5XxQvYbUtysG4.cer
Subject info access:      rsync://rpki.co/repo/Pudu/0/39312e3139332e3131342e302f32342d3234203d3e203437363839.roa
Signing time:             Sun 23 Apr 2023 07:23:34 +0000
ROA not before:           Sun 23 Apr 2023 07:18:34 +0000
ROA not after:            Sun 21 Apr 2024 07:23:34 +0000
asID:                     47689
IP address blocks:        91.193.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f4:82:6e:83:35:f8:ee:f6:af:98:d8:0f:39:6f:12:91:90:d6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead264c4a27c6bf24ae80e57c50bd86d4b72b06e
        Validity
            Not Before: Apr 23 07:18:34 2023 GMT
            Not After : Apr 21 07:23:34 2024 GMT
        Subject: CN=855FE93D9374CFD95093ED49B7A551FB737BA6A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ee:8f:ce:80:4d:62:5a:bf:8c:67:a7:f4:86:
                    61:bc:3e:fb:74:46:ee:62:99:7c:eb:d4:9d:87:24:
                    a4:ca:8f:97:a9:0b:cf:93:5a:96:a8:98:00:6b:9a:
                    45:73:39:94:5f:32:69:42:d1:55:41:d4:e9:19:70:
                    34:8e:29:c2:33:64:eb:1b:2f:30:d4:bb:81:c6:01:
                    28:d1:a1:2a:d3:c9:8b:47:b8:21:69:fb:fb:83:b6:
                    f3:bc:59:0c:f2:9a:61:8e:a5:02:7d:0b:4d:86:66:
                    b5:9a:59:9f:37:f8:c6:ab:a7:05:a3:e4:2c:c9:80:
                    62:bd:63:23:f7:8a:17:55:ee:37:bc:8e:38:e8:03:
                    f4:21:70:28:3f:8d:0d:37:e1:44:10:ca:7f:70:f0:
                    e9:6a:52:36:27:3f:c8:54:f0:a1:53:2b:71:22:50:
                    ba:0f:9a:b2:38:8f:47:44:16:b1:37:7b:58:6c:5a:
                    31:70:de:a4:e1:28:cd:77:a1:2b:c4:21:74:f4:c4:
                    5b:48:cf:4d:9e:83:f6:31:83:74:05:06:ac:59:a2:
                    77:e0:4d:63:59:7e:29:8f:ff:71:10:f2:59:5e:5e:
                    4b:fa:15:38:61:7c:4f:be:45:03:f4:af:68:6d:6f:
                    b9:28:3e:3c:79:43:92:94:be:b8:1c:3a:20:f9:f8:
                    17:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5F:E9:3D:93:74:CF:D9:50:93:ED:49:B7:A5:51:FB:73:7B:A6:A4
            X509v3 Authority Key Identifier:
                keyid:EA:D2:64:C4:A2:7C:6B:F2:4A:E8:0E:57:C5:0B:D8:6D:4B:72:B0:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Pudu/0/EAD264C4A27C6BF24AE80E57C50BD86D4B72B06E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tJkxKJ8a_JK6A5XxQvYbUtysG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Pudu/0/39312e3139332e3131342e302f32342d3234203d3e203437363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.193.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:e6:59:8d:06:9c:f4:55:d7:19:3f:44:75:12:3f:89:53:8a:
         26:44:54:9f:69:c6:b1:2b:34:1f:94:51:88:53:bd:6c:a4:98:
         2d:c3:28:a4:a5:fb:1e:6b:22:32:85:15:34:5a:f0:7d:65:d3:
         d9:62:19:21:85:fe:33:a6:f8:f9:92:8a:4f:83:4e:6d:3c:53:
         bf:36:34:ec:25:73:c4:78:dc:88:67:98:2f:df:b4:9e:7f:13:
         41:22:96:5b:a8:e5:37:2c:f9:5e:a9:cb:58:74:2f:1d:c0:e5:
         69:ad:a5:04:ea:56:84:df:22:f8:07:dc:6d:6e:cb:df:36:6e:
         be:6c:be:a8:65:bc:0c:88:89:51:03:69:e1:89:f0:f9:e3:bb:
         84:d3:ef:76:de:dd:34:bb:58:0d:f4:b8:5a:35:a8:09:34:3f:
         f7:54:16:5a:c0:66:ab:de:13:fd:03:02:21:e5:f1:9c:a6:20:
         3e:29:dc:ae:59:b1:22:0d:5a:7e:66:7d:cb:c2:d7:d7:b6:bc:
         67:11:f7:94:b3:b0:e3:f2:f7:66:87:08:d2:bc:a2:2a:31:6c:
         2d:c0:12:b9:22:55:c1:c4:96:c6:ab:f5:cf:d3:66:e5:40:7b:
         ad:46:b1:6a:bc:ed:28:c5:57:0a:ae:2a:47:56:d0:43:27:fa:
         e4:0d:cb:8e
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgIUD/SCboM1+O72r5jYDzlvEpGQ1hkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWFkMjY0YzRhMjdjNmJmMjRhZTgwZTU3YzUwYmQ4NmQ0
YjcyYjA2ZTAeFw0yMzA0MjMwNzE4MzRaFw0yNDA0MjEwNzIzMzRaMDMxMTAvBgNV
BAMTKDg1NUZFOTNEOTM3NENGRDk1MDkzRUQ0OUI3QTU1MUZCNzM3QkE2QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7o/OgE1iWr+MZ6f0hmG8Pvt0
Ru5imXzr1J2HJKTKj5epC8+TWpaomABrmkVzOZRfMmlC0VVB1OkZcDSOKcIzZOsb
LzDUu4HGASjRoSrTyYtHuCFp+/uDtvO8WQzymmGOpQJ9C02GZrWaWZ83+MarpwWj
5CzJgGK9YyP3ihdV7je8jjjoA/QhcCg/jQ034UQQyn9w8OlqUjYnP8hU8KFTK3Ei
ULoPmrI4j0dEFrE3e1hsWjFw3qThKM13oSvEIXT0xFtIz02eg/Yxg3QFBqxZonfg
TWNZfimP/3EQ8lleXkv6FThhfE++RQP0r2htb7koPjx5Q5KUvrgcOiD5+BcLAgMB
AAGjggHEMIIBwDAdBgNVHQ4EFgQUhV/pPZN0z9lQk+1Jt6VR+3N7pqQwHwYDVR0j
BBgwFoAU6tJkxKJ8a/JK6A5XxQvYbUtysG4wDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL1B1ZHUvMC9FQUQyNjRD
NEEyN0M2QkYyNEFFODBFNTdDNTBCRDg2RDRCNzJCMDZFLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNnRKa3hLSjhhX0pLNkE1WHhRdlliVXR5c0c0LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vcnBraS5jby9yZXBvL1B1
ZHUvMC8zOTMxMmUzMTM5MzMyZTMxMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDM0MzczNjM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBABbwXIwDQYJKoZIhvcNAQELBQADggEBACbm
WY0GnPRV1xk/RHUSP4lTiiZEVJ9pxrErNB+UUYhTvWykmC3DKKSl+x5rIjKFFTRa
8H1l09liGSGF/jOm+PmSik+DTm08U782NOwlc8R43IhnmC/ftJ5/E0Eilluo5Tcs
+V6py1h0Lx3A5WmtpQTqVoTfIvgH3G1uy982br5svqhlvAyIiVEDaeGJ8Pnju4TT
73be3TS7WA30uFo1qAk0P/dUFlrAZqveE/0DAiHl8ZymID4p3K5ZsSINWn5mfcvC
19e2vGcR95SzsOPy92aHCNK8oioxbC3AErkiVcHElsar9c/TZuVAe61GsWq87SjF
VwquKkdW0EMn+uQNy44=
-----END CERTIFICATE-----