Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/r97tKQr7JjbyCHWHUFqOxhuR3KM.roa
File:                     r97tKQr7JjbyCHWHUFqOxhuR3KM.roa (raw, json)
Hash identifier:          SgSu0UkV3mU+GdquaM0MRD4Q+rxh1diMxvd4zSGG46k=
Subject key identifier:   AF:DE:ED:29:0A:FB:26:36:F2:08:75:87:50:5A:8E:C6:1B:91:DC:A3
Certificate issuer:       /CN=3950303615aca6e5f6f5b5691c7c2c8dca5f234d
Certificate serial:       018CC7274FE100A057D9A374A75F62782AE6
Authority key identifier: 39:50:30:36:15:AC:A6:E5:F6:F5:B5:69:1C:7C:2C:8D:CA:5F:23:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OVAwNhWspuX29bVpHHwsjcpfI00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/r97tKQr7JjbyCHWHUFqOxhuR3KM.roa
Signing time:             Mon 01 Jan 2024 22:31:31 +0000
ROA not before:           Mon 01 Jan 2024 22:31:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59729
IP address blocks:        217.12.202.0/23 maxlen: 23
                          2a02:27aa::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:4f:e1:00:a0:57:d9:a3:74:a7:5f:62:78:2a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3950303615aca6e5f6f5b5691c7c2c8dca5f234d
        Validity
            Not Before: Jan  1 22:31:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=afdeed290afb2636f2087587505a8ec61b91dca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c4:a4:91:ae:3f:25:50:07:c3:18:23:2a:70:
                    f9:83:56:ad:96:db:ca:c2:3c:68:99:6d:77:d8:84:
                    3b:cc:0f:18:7d:6a:26:a8:aa:7e:cc:66:5f:57:93:
                    da:f2:3c:47:e2:9d:9a:f2:67:3d:f0:5a:11:64:89:
                    d4:78:6f:4c:cc:f0:31:70:90:68:2b:2d:7c:cd:9a:
                    fd:1f:db:e2:ab:67:98:2a:e2:93:1a:4f:e6:51:6a:
                    07:26:31:b7:f1:1e:e5:f3:64:40:4f:4a:76:5f:e3:
                    df:1c:b4:11:c8:89:ec:04:45:df:ad:84:f5:12:15:
                    8a:8f:e2:ed:e5:6b:1c:45:c2:4c:7b:62:ca:3f:e1:
                    2f:b4:e1:68:1b:b9:34:f4:09:8a:86:b6:6d:38:f7:
                    81:d6:cc:ec:74:45:46:de:13:99:ff:ad:15:3e:0b:
                    86:ba:78:78:e5:16:5e:ed:49:f1:94:53:37:0b:44:
                    fe:23:c7:81:09:86:a6:29:f3:69:01:30:00:dd:47:
                    06:94:54:e5:1e:6f:d4:a6:3b:ac:f4:4e:d5:46:4d:
                    78:5e:4b:38:22:d9:36:1a:cc:53:d4:f6:42:22:05:
                    a5:94:d9:1b:80:5a:53:64:47:00:b7:72:7b:90:c2:
                    da:03:36:a6:ff:9c:4c:58:f1:ca:04:86:1a:41:d8:
                    7f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DE:ED:29:0A:FB:26:36:F2:08:75:87:50:5A:8E:C6:1B:91:DC:A3
            X509v3 Authority Key Identifier:
                keyid:39:50:30:36:15:AC:A6:E5:F6:F5:B5:69:1C:7C:2C:8D:CA:5F:23:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVAwNhWspuX29bVpHHwsjcpfI00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/r97tKQr7JjbyCHWHUFqOxhuR3KM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/OVAwNhWspuX29bVpHHwsjcpfI00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.12.202.0/23
                IPv6:
                  2a02:27aa::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:c1:6a:5f:d5:ab:cf:ca:39:b7:ea:06:7f:6a:2b:ce:ce:a5:
         5b:8c:0c:d6:b3:6f:c4:3e:bd:51:59:36:1e:b0:38:bf:92:3c:
         57:31:e1:73:61:54:e0:33:7a:da:42:6c:67:ce:79:38:71:7c:
         a2:7b:75:5c:17:cb:9d:d4:99:94:0a:76:08:8f:00:b1:75:61:
         c9:cd:d8:28:ef:63:05:03:a2:c2:a8:16:81:63:b8:00:7b:25:
         fd:63:f2:56:44:44:ac:88:f8:c4:d2:e9:7c:f4:ee:16:83:22:
         2a:9e:77:12:b0:1b:36:81:f5:a0:2a:8e:9a:d8:d0:d0:fb:a6:
         ff:30:a9:fd:15:25:62:4c:32:be:a8:78:fb:6f:78:63:86:5b:
         16:8f:4c:d6:33:6a:2c:55:35:f4:f3:5d:b0:65:a9:40:9b:3c:
         76:ce:cc:72:09:f9:cd:f1:18:e0:52:be:4a:d4:e0:00:73:05:
         a7:73:d1:d2:ff:dd:51:22:4d:0c:84:a1:b1:e4:bf:ff:ef:79:
         0d:79:72:05:77:8f:f1:1c:b0:4c:8b:c4:a8:aa:81:60:15:51:
         a9:ff:97:25:47:4d:9a:dd:46:7a:d1:96:2b:55:cd:2c:8e:af:
         cf:14:81:38:50:26:ba:25:17:7f:65:3d:f3:d9:f0:f2:e9:a3:
         2d:fb:a2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----