Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/6cUCUormNPlcrsfTdQmKSokRe1o.roa
File:                     6cUCUormNPlcrsfTdQmKSokRe1o.roa (raw, json)
Hash identifier:          3rkORDaJHMA8Ha/wA6Jx+n8Lg0zKvo6Q3x0f2ux8el4=
Subject key identifier:   E9:C5:02:52:8A:E6:34:F9:5C:AE:C7:D3:75:09:8A:4A:89:11:7B:5A
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018C1CA3BB124392C2A2EAF9C4593C925440
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/6cUCUormNPlcrsfTdQmKSokRe1o.roa
Signing time:             Wed 29 Nov 2023 19:52:21 +0000
ROA not before:           Wed 29 Nov 2023 19:52:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51741
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1c:a3:bb:12:43:92:c2:a2:ea:f9:c4:59:3c:92:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Nov 29 19:52:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9c502528ae634f95caec7d375098a4a89117b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7d:07:79:b4:3f:93:38:c0:d2:57:ff:42:34:
                    03:ec:7c:2a:ec:9a:89:ad:22:18:bc:da:ba:49:70:
                    f8:43:b7:98:27:a0:77:33:49:d0:12:67:06:07:ba:
                    40:63:ba:ed:ba:d4:a5:d4:7e:7c:80:dd:3a:eb:ac:
                    f9:51:13:54:76:e3:89:cd:7e:3f:1a:9e:c6:fb:a3:
                    c5:a2:8c:07:1c:b7:ff:03:52:f4:ee:06:13:3e:c5:
                    83:1a:3b:ac:fc:57:5f:5c:9d:0e:14:4d:b3:41:99:
                    de:82:f5:e2:2d:a7:6e:05:48:4c:fe:c3:5a:19:3d:
                    5b:c8:32:87:a2:40:fa:38:57:32:2c:1e:eb:d2:b1:
                    b1:b1:31:ba:9a:cd:37:49:e5:5c:af:89:6d:26:c0:
                    54:f6:d0:f9:f3:67:22:6e:2d:34:7a:58:6e:94:13:
                    38:ef:fb:0d:d0:e2:ff:a1:ee:db:a0:e8:cb:64:ff:
                    5f:16:7a:93:27:3f:b6:08:2d:ac:b5:2a:c6:10:18:
                    7b:73:8e:52:33:7a:b8:23:fc:be:37:0e:f1:dc:36:
                    38:fd:18:33:45:7f:fe:a6:01:60:0e:8d:62:ad:11:
                    d9:85:26:93:35:8e:71:7f:63:48:7d:07:e5:12:6c:
                    3e:9b:4f:30:be:e6:87:35:1a:85:d0:ef:e0:61:13:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C5:02:52:8A:E6:34:F9:5C:AE:C7:D3:75:09:8A:4A:89:11:7B:5A
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/6cUCUormNPlcrsfTdQmKSokRe1o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         3f:c0:df:d1:8f:74:87:42:f3:86:dd:46:c1:32:ad:fa:4f:3a:
         4b:f4:26:75:86:a2:67:1d:c3:29:8e:db:6c:95:0d:1b:a7:3c:
         9b:48:46:a5:49:dd:0d:12:e2:c5:7a:1b:de:4f:58:45:5c:80:
         c7:0e:22:1c:b4:36:5a:1f:b3:18:1f:42:8c:80:f5:ce:ca:23:
         67:bc:e3:ce:4e:3e:1c:05:45:f4:73:2c:80:6c:55:df:76:4b:
         79:52:2e:0e:7d:2d:40:21:8b:3c:9b:95:f5:e8:95:3d:35:44:
         76:66:c4:b9:f1:48:5b:75:bf:02:03:dc:e4:5f:5d:54:f9:9d:
         4f:9c:0f:bc:cd:dc:d1:73:a7:78:e1:22:b2:e4:2e:49:07:bb:
         7b:94:d0:40:2e:f3:59:2a:f7:7e:54:74:39:ee:8c:3f:93:24:
         dc:11:80:97:8e:e4:b6:d0:7a:a7:36:d3:c5:ff:0c:ec:43:39:
         4b:e8:54:90:b1:78:b8:88:39:72:b2:55:8c:14:08:b6:ca:2e:
         ef:21:75:00:15:f4:1c:a5:92:ed:77:d7:c1:5e:14:42:99:df:
         48:80:f9:4a:2a:18:c5:4e:02:f5:08:95:f8:58:92:19:86:74:
         b5:44:4b:23:31:83:bc:37:4a:22:d8:5f:95:7f:1c:23:cb:79:
         88:cb:46:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----