Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b2bf74-d3dc-494f-88e3-7c2f8f71157c/1/j04KVjlWML1iH4WqSkMhWoGBHy0.roa
File:                     j04KVjlWML1iH4WqSkMhWoGBHy0.roa (raw, json)
Hash identifier:          m+FXGK1IqQRR+8BZayJ1zJhmcC850wUfhWeewwzswY0=
Subject key identifier:   8F:4E:0A:56:39:56:30:BD:62:1F:85:AA:4A:43:21:5A:81:81:1F:2D
Certificate issuer:       /CN=f3888234535b52ec875544b66faaa323ee88c2dd
Certificate serial:       01856B77AA7400F231EB3FFB95C43E273B9F
Authority key identifier: F3:88:82:34:53:5B:52:EC:87:55:44:B6:6F:AA:A3:23:EE:88:C2:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84iCNFNbUuyHVUS2b6qjI-6Iwt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/b2bf74-d3dc-494f-88e3-7c2f8f71157c/1/j04KVjlWML1iH4WqSkMhWoGBHy0.roa
Signing time:             Sun 01 Jan 2023 03:54:42 +0000
ROA not before:           Sun 01 Jan 2023 03:54:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41337
IP address blocks:        194.9.2.0/23 maxlen: 23
                          2a07:2fc0::/48 maxlen: 48
                          2a07:2fc0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:77:aa:74:00:f2:31:eb:3f:fb:95:c4:3e:27:3b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3888234535b52ec875544b66faaa323ee88c2dd
        Validity
            Not Before: Jan  1 03:54:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f4e0a56395630bd621f85aa4a43215a81811f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:cc:8b:48:dc:c4:20:74:ab:69:91:6c:65:
                    d1:6c:06:0c:06:1a:8c:77:0c:83:90:ca:03:f9:a4:
                    6b:d4:6d:a9:e6:81:07:3f:bd:ff:ea:cd:c3:b2:96:
                    25:aa:1c:0d:a8:cb:c3:6d:48:01:84:9a:14:37:b2:
                    2b:fc:9d:e6:fc:c0:84:b6:93:d7:19:54:cd:f1:14:
                    6f:b9:93:a0:3b:39:75:3a:5c:58:a1:06:4a:eb:68:
                    c8:29:47:cc:62:2b:ad:a9:4f:91:cb:eb:7f:ca:4d:
                    34:1b:62:42:28:8e:4b:d7:11:ef:84:8c:35:87:8a:
                    4c:2a:af:64:71:26:33:89:8d:ef:42:9a:d6:79:a9:
                    87:a9:f8:68:ed:7b:5c:53:fb:a6:02:ea:14:b1:76:
                    27:5d:66:86:7a:b9:e7:18:ba:69:c2:74:f8:e2:1a:
                    b7:58:3d:6b:83:c7:6e:bf:b7:d0:cf:61:4a:79:26:
                    27:89:d1:b9:b0:84:e2:1f:43:84:81:75:d2:c1:24:
                    d0:31:80:d1:29:66:b8:27:49:f5:81:7d:5c:cd:71:
                    c9:ca:88:9c:35:e9:ac:a0:31:25:b2:0a:34:ef:d4:
                    70:d5:4c:bf:3d:99:b4:af:6a:8b:eb:11:96:04:52:
                    e8:b6:80:88:bf:b4:9d:23:eb:b3:dc:f7:7b:7c:8b:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4E:0A:56:39:56:30:BD:62:1F:85:AA:4A:43:21:5A:81:81:1F:2D
            X509v3 Authority Key Identifier:
                keyid:F3:88:82:34:53:5B:52:EC:87:55:44:B6:6F:AA:A3:23:EE:88:C2:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84iCNFNbUuyHVUS2b6qjI-6Iwt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b2bf74-d3dc-494f-88e3-7c2f8f71157c/1/j04KVjlWML1iH4WqSkMhWoGBHy0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b2bf74-d3dc-494f-88e3-7c2f8f71157c/1/84iCNFNbUuyHVUS2b6qjI-6Iwt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.9.2.0/23
                IPv6:
                  2a07:2fc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         c7:53:42:d1:42:e2:72:ad:6d:8a:be:a8:af:b0:55:47:94:f0:
         b9:84:aa:55:a6:73:90:e1:e1:46:5f:ca:49:3b:8f:9e:e8:22:
         a0:56:b4:3c:98:0c:b3:bd:a7:8f:18:77:76:76:54:03:53:25:
         9b:b3:94:30:08:74:f0:5f:fc:a3:5f:09:c4:9e:64:3d:72:06:
         f2:45:5d:e8:f6:40:d0:3f:18:c8:31:21:2b:b6:6d:50:42:52:
         a6:46:b2:e2:a3:92:e7:d9:d0:3f:66:8d:d7:c5:7b:52:d4:c6:
         a3:86:e9:04:7f:17:3d:13:2c:69:da:91:1f:31:87:09:33:a0:
         0f:7c:29:13:ae:6c:38:27:8e:8e:8e:84:fb:97:b9:0a:4b:a6:
         56:40:55:86:49:23:fb:b5:b2:4c:17:c2:d3:f3:a6:5f:9b:97:
         10:6b:d8:dc:37:d9:75:8f:d9:2a:23:bc:41:63:17:87:b8:92:
         5d:0f:58:20:c7:19:db:36:94:9d:24:95:50:67:c5:45:1a:b3:
         f8:aa:e3:3b:39:90:66:cc:e1:ea:58:e0:6e:14:09:49:8a:ba:
         c6:65:ca:d9:aa:ec:7b:02:d9:af:4e:5c:f8:8f:70:91:e2:c3:
         91:fd:5b:3a:27:a1:05:57:e2:c2:b8:d4:9c:a5:dc:70:38:7d:
         6c:09:da:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----