Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/1pXmig04odDmQ8aJkv8WWjezBPM.roa
File:                     1pXmig04odDmQ8aJkv8WWjezBPM.roa (raw, json)
Hash identifier:          +x5ch2bC41zhNLCpjjJUB6JzLAf8Imr2gm22Q3WP5jQ=
Subject key identifier:   D6:95:E6:8A:0D:38:A1:D0:E6:43:C6:89:92:FF:16:5A:37:B3:04:F3
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018A99289C70B75C49B0FD33D211CD6A8395
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/1pXmig04odDmQ8aJkv8WWjezBPM.roa
Signing time:             Fri 15 Sep 2023 14:04:50 +0000
ROA not before:           Fri 15 Sep 2023 14:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51741
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:99:28:9c:70:b7:5c:49:b0:fd:33:d2:11:cd:6a:83:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Sep 15 14:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d695e68a0d38a1d0e643c68992ff165a37b304f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:63:4b:54:a5:f7:19:df:5e:15:f9:86:26:
                    5f:ea:26:a9:a9:df:67:ee:06:4b:2a:fc:07:48:76:
                    5b:41:27:8c:50:3b:c7:97:5f:9d:5c:a5:ca:be:83:
                    07:22:b5:3d:68:b0:22:d3:1e:2d:0e:c5:e5:63:26:
                    98:4b:a0:79:35:84:ef:63:b3:f9:18:61:89:d7:67:
                    ac:51:9e:3f:cb:56:90:40:92:fb:f2:d9:0d:96:ec:
                    06:a7:e4:f6:46:ba:69:a7:70:17:b1:84:13:ab:de:
                    93:5c:c2:ac:3c:b1:15:1a:98:bb:cc:b8:9c:d0:93:
                    a3:c6:4f:25:ac:7c:07:d8:c7:07:69:b5:8c:2f:66:
                    04:53:fc:0c:f4:57:6f:2a:5e:bb:fc:c9:ea:b5:7d:
                    03:9d:08:8a:bc:73:6f:34:a2:29:8c:ed:5c:c9:47:
                    68:c2:54:38:9f:c6:2a:f2:39:ca:e8:a5:79:5a:35:
                    73:37:e1:63:7c:36:44:52:12:e9:00:e4:ff:93:6e:
                    e3:ef:41:cf:26:f4:f3:6a:a9:e2:76:7c:a9:d7:6d:
                    66:f2:b5:28:90:7a:a6:18:c3:cb:9c:d2:7a:7e:a8:
                    f7:ff:27:d2:f9:c2:be:3c:d2:ff:fc:43:89:54:1f:
                    5f:78:3e:37:e0:d3:6c:8b:d6:53:3f:3a:d8:69:03:
                    aa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:95:E6:8A:0D:38:A1:D0:E6:43:C6:89:92:FF:16:5A:37:B3:04:F3
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/1pXmig04odDmQ8aJkv8WWjezBPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         11:d5:6e:15:e7:e2:f3:0f:aa:34:90:69:a5:67:cf:65:22:53:
         f4:a0:bd:a2:74:fc:48:0b:8f:9c:7c:06:3f:ec:e1:1c:ff:df:
         79:ac:be:d7:fc:fd:48:dc:94:fb:d3:46:f6:b9:3c:c8:3a:0b:
         a4:a1:72:91:db:4a:3e:62:78:63:15:29:ef:81:c8:02:32:b8:
         d9:e4:ff:96:88:b7:8a:19:2b:09:0c:b5:ab:1e:4b:65:85:58:
         b1:ae:e0:56:81:f2:d0:4a:31:48:3c:a6:5a:c1:ae:76:c6:73:
         6b:59:28:21:6b:6c:1f:dd:a5:70:90:2a:e3:a7:1c:59:e2:72:
         3b:d9:02:f5:df:c7:99:72:61:ef:d7:31:22:3e:e2:75:c5:d6:
         1a:9d:7d:91:19:47:02:fb:22:3d:19:65:1b:bf:ac:6e:1f:cf:
         9a:ef:9a:32:47:e4:f8:83:df:97:ab:5d:85:19:9b:e7:4a:89:
         76:4c:9b:aa:7e:7f:b7:41:74:fd:48:f9:b1:79:4e:ae:b1:c6:
         7a:7c:3e:59:44:d0:82:1b:78:17:be:ed:63:ba:b4:b1:78:39:
         2b:7c:b2:46:40:31:5b:e4:be:f7:b5:ca:d1:0c:1b:fa:d1:ac:
         2b:97:eb:95:01:8a:21:c2:77:04:79:84:cd:db:ed:6d:c5:52:
         7a:ed:b8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----