Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cdfae4-ad99-493e-ab15-154d2a0a3b2d/1/tB9YnW8s2mse6cuKYlCVAtLUVlw.roa
File:                     tB9YnW8s2mse6cuKYlCVAtLUVlw.roa (raw, json)
Hash identifier:          kWTzNJB11tVLxgjqQ8UjVlNzwaVSJNJmBKhFQAS7qD8=
Subject key identifier:   B4:1F:58:9D:6F:2C:DA:6B:1E:E9:CB:8A:62:50:95:02:D2:D4:56:5C
Certificate issuer:       /CN=c3b4c04312c4dd3b4c1f296b594f4a8f07502888
Certificate serial:       0185703077F4BF70CE3348FC7C56B99DAC87
Authority key identifier: C3:B4:C0:43:12:C4:DD:3B:4C:1F:29:6B:59:4F:4A:8F:07:50:28:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7TAQxLE3TtMHylrWU9KjwdQKIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/cdfae4-ad99-493e-ab15-154d2a0a3b2d/1/tB9YnW8s2mse6cuKYlCVAtLUVlw.roa
Signing time:             Mon 02 Jan 2023 01:55:02 +0000
ROA not before:           Mon 02 Jan 2023 01:55:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212559
IP address blocks:        193.107.15.0/24 maxlen: 24
                          2a10:ef40::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:30:77:f4:bf:70:ce:33:48:fc:7c:56:b9:9d:ac:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b4c04312c4dd3b4c1f296b594f4a8f07502888
        Validity
            Not Before: Jan  2 01:55:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b41f589d6f2cda6b1ee9cb8a62509502d2d4565c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9c:12:f0:72:3e:ea:53:72:b3:84:27:30:20:
                    16:c5:5c:99:33:72:4c:80:c2:da:38:e3:fb:38:bd:
                    4e:51:b2:39:5c:b8:82:59:69:96:bd:e8:3a:00:50:
                    ce:0b:34:73:a4:95:46:2f:75:50:d4:1a:76:0e:b4:
                    c7:5d:40:d7:bc:ca:d1:06:bc:51:2c:21:b0:39:76:
                    23:ce:54:ea:f1:ce:e7:44:94:cc:d7:42:ba:96:2a:
                    93:51:66:57:3a:d7:d6:2d:60:8d:9e:9c:8d:b2:32:
                    06:d5:80:31:c1:b7:7c:43:a5:67:7f:31:c0:b7:3c:
                    03:cd:a0:d9:29:7c:e4:3a:11:d1:9e:d2:c3:41:bc:
                    e5:ea:0d:12:50:f0:f5:20:4c:7a:49:73:11:8d:9d:
                    66:b3:ed:a6:72:38:92:10:3b:74:04:84:f2:72:cb:
                    c0:9a:e7:e4:89:96:be:67:42:05:13:0b:c4:49:ea:
                    3b:eb:f8:17:e8:5b:25:1d:04:be:f0:cf:98:5d:1e:
                    6c:2b:c6:ef:58:e7:7b:d9:52:f2:e9:c2:6b:14:c2:
                    5b:a6:79:36:3c:62:5c:94:57:5a:a2:38:89:ab:a5:
                    81:e2:2c:1f:1c:9f:22:8e:90:16:a8:59:7b:47:b9:
                    96:5b:6c:93:32:c7:4f:3a:48:dd:92:51:64:d3:7b:
                    8b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1F:58:9D:6F:2C:DA:6B:1E:E9:CB:8A:62:50:95:02:D2:D4:56:5C
            X509v3 Authority Key Identifier:
                keyid:C3:B4:C0:43:12:C4:DD:3B:4C:1F:29:6B:59:4F:4A:8F:07:50:28:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7TAQxLE3TtMHylrWU9KjwdQKIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cdfae4-ad99-493e-ab15-154d2a0a3b2d/1/tB9YnW8s2mse6cuKYlCVAtLUVlw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cdfae4-ad99-493e-ab15-154d2a0a3b2d/1/w7TAQxLE3TtMHylrWU9KjwdQKIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.15.0/24
                IPv6:
                  2a10:ef40::/29

    Signature Algorithm: sha256WithRSAEncryption
         49:07:6e:77:a8:92:b9:01:46:5c:5f:1d:f2:62:b7:78:d6:ea:
         36:c4:c8:c2:78:a3:f8:04:2f:6e:25:c2:4f:76:a7:16:3f:31:
         1b:3a:cb:f0:45:df:b8:8c:7b:62:4c:7b:62:ed:76:b0:fd:58:
         98:46:00:7b:c5:23:29:4f:20:57:e6:b4:62:54:2e:06:c5:65:
         01:e7:f2:fe:26:c2:89:25:4c:85:61:1a:d2:ed:3d:0e:f4:c3:
         f5:59:fd:f8:85:0c:98:bd:ac:89:47:0d:44:f6:e8:7e:e9:08:
         ab:b9:2d:77:bb:2d:a7:1a:a6:eb:c1:27:a9:79:e6:f3:8b:e2:
         e1:5f:13:05:ec:5e:14:2e:4c:f6:6c:c8:9f:26:54:6e:e5:47:
         d8:08:97:69:dc:8e:a3:f4:fa:c4:40:d1:ca:96:f4:b4:0c:eb:
         17:4f:d4:7a:1f:62:7c:68:db:b3:a9:66:44:6f:52:89:c9:f1:
         6f:71:14:0e:1a:7b:97:a7:38:10:ef:e7:91:06:23:11:f6:9d:
         32:57:c6:f3:1c:98:b0:6c:28:fe:7f:71:6c:45:c3:c3:f5:b8:
         70:f2:e2:29:a4:76:02:89:d3:62:f3:95:84:ad:be:d8:69:8b:
         1b:59:85:a5:a2:a0:75:9f:45:e3:1e:1a:7b:b0:40:2d:b5:e0:
         d6:58:d7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----