Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c34978-e98d-4455-8183-240ca7301659/1/ahgjjwJeTc2zCcEF1LsKXS8mJT8.roa
File:                     ahgjjwJeTc2zCcEF1LsKXS8mJT8.roa (raw, json)
Hash identifier:          +70dPbINzGkUYED4DqFg4wUnnzKjP9GUBT31fPECOHg=
Subject key identifier:   6A:18:23:8F:02:5E:4D:CD:B3:09:C1:05:D4:BB:0A:5D:2F:26:25:3F
Certificate issuer:       /CN=4aa7df0a05bdf2ab5f060405d78d2fda00fa9cbf
Certificate serial:       0185710301D9458B0E2D2AACF5D330D92912
Authority key identifier: 4A:A7:DF:0A:05:BD:F2:AB:5F:06:04:05:D7:8D:2F:DA:00:FA:9C:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqffCgW98qtfBgQF140v2gD6nL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c34978-e98d-4455-8183-240ca7301659/1/ahgjjwJeTc2zCcEF1LsKXS8mJT8.roa
Signing time:             Mon 02 Jan 2023 05:45:00 +0000
ROA not before:           Mon 02 Jan 2023 05:45:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47787
IP address blocks:        193.107.13.0/24 maxlen: 24
                          2a10:ee40::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:03:01:d9:45:8b:0e:2d:2a:ac:f5:d3:30:d9:29:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa7df0a05bdf2ab5f060405d78d2fda00fa9cbf
        Validity
            Not Before: Jan  2 05:45:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6a18238f025e4dcdb309c105d4bb0a5d2f26253f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:76:2e:47:28:d2:3e:1f:a2:ec:2f:a9:8a:1e:
                    cf:9b:b4:d0:23:38:43:36:db:b4:93:3c:e8:ee:40:
                    ed:71:95:06:23:c5:c8:69:17:67:b3:08:6c:c9:55:
                    a3:8f:50:fa:a7:b1:cc:d9:f5:43:a2:8f:cf:e8:cb:
                    c3:6b:5c:12:b5:47:44:48:ce:11:5e:b7:2f:49:a9:
                    65:97:95:5e:0d:6d:2e:26:c6:bc:c9:92:12:d7:40:
                    e5:80:15:36:e7:9b:60:62:6f:56:b9:ac:64:30:53:
                    3d:04:d7:0e:03:e2:bb:10:53:93:a4:7c:5d:86:88:
                    e5:30:79:8e:26:a3:9b:45:42:30:8b:ed:86:57:18:
                    9c:dc:e9:43:6c:9c:82:82:10:8d:b1:55:3e:0c:55:
                    7a:de:1a:93:e7:b2:b6:69:6e:3a:93:73:ff:06:9f:
                    df:7a:6d:83:05:52:f1:88:2a:17:19:71:c4:36:10:
                    b5:17:4e:8c:62:d9:30:d2:e7:bd:eb:8c:a5:5c:53:
                    36:34:6d:97:72:24:d2:f1:30:1e:d0:6c:10:ac:e0:
                    5a:63:33:86:45:a3:55:ca:a1:bc:bc:46:c2:ca:dc:
                    0c:33:22:16:01:3a:6f:65:ab:65:b8:2c:e7:58:07:
                    34:91:b4:1f:dc:64:a1:cc:9c:6f:6b:37:12:8e:03:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:18:23:8F:02:5E:4D:CD:B3:09:C1:05:D4:BB:0A:5D:2F:26:25:3F
            X509v3 Authority Key Identifier:
                keyid:4A:A7:DF:0A:05:BD:F2:AB:5F:06:04:05:D7:8D:2F:DA:00:FA:9C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqffCgW98qtfBgQF140v2gD6nL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c34978-e98d-4455-8183-240ca7301659/1/ahgjjwJeTc2zCcEF1LsKXS8mJT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c34978-e98d-4455-8183-240ca7301659/1/SqffCgW98qtfBgQF140v2gD6nL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.13.0/24
                IPv6:
                  2a10:ee40::/29

    Signature Algorithm: sha256WithRSAEncryption
         32:fb:81:17:88:86:e4:fb:7c:96:96:b0:2b:b5:be:b8:c6:cb:
         52:58:db:50:84:b8:78:bf:83:d7:6c:00:f0:af:66:56:18:cb:
         22:b5:82:4d:27:51:1f:9e:62:8a:df:e9:48:54:a1:1a:ce:5c:
         00:50:71:9a:2a:40:ae:9e:ee:88:4a:52:77:14:c0:21:f0:6c:
         2f:fc:82:ea:0c:9f:6a:ed:41:aa:c2:95:4d:12:0c:2f:7b:a3:
         54:ab:11:34:36:55:83:04:a2:41:9d:1d:31:9c:bf:47:b2:b5:
         c1:70:9c:ec:a6:dc:93:1c:61:9f:c4:47:42:eb:42:43:b1:fa:
         f3:a0:71:f4:e3:af:e9:4b:b4:c2:de:33:7e:13:b9:6f:92:86:
         12:31:54:e5:87:49:c3:57:a3:74:47:ba:bc:37:87:76:8c:7b:
         e5:9b:5e:f0:91:51:bd:6e:7c:3e:8d:10:1e:47:45:9a:2a:7e:
         2e:95:6a:dc:18:dc:69:15:00:a8:2b:21:e0:0b:07:df:27:5b:
         3c:03:8d:c2:a4:4e:ed:ac:fd:22:d8:6e:a8:a6:b1:a5:a8:20:
         2a:84:bd:43:4a:3d:0a:ea:a8:92:ca:e8:42:aa:76:ca:fe:f5:
         5a:21:4f:f0:3b:de:6e:a2:01:ac:74:82:30:aa:ac:3f:18:2a:
         92:48:ac:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----