Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/FOywJKV4DBesS0m-Y84U7P2geIQ.roa
File:                     FOywJKV4DBesS0m-Y84U7P2geIQ.roa (raw, json)
Hash identifier:          T4+VVCes1qcUg97lVc3CYpKGtK7gPtvNeq+L8PbaoPo=
Subject key identifier:   14:EC:B0:24:A5:78:0C:17:AC:4B:49:BE:63:CE:14:EC:FD:A0:78:84
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018A847CDD19C469D6A14F26D05B1210E1FE
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/FOywJKV4DBesS0m-Y84U7P2geIQ.roa
Signing time:             Mon 11 Sep 2023 13:44:50 +0000
ROA not before:           Mon 11 Sep 2023 13:44:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51741
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:84:7c:dd:19:c4:69:d6:a1:4f:26:d0:5b:12:10:e1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Sep 11 13:44:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=14ecb024a5780c17ac4b49be63ce14ecfda07884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:66:4c:5f:4d:ae:16:5e:5d:ba:97:90:46:
                    88:51:32:6d:28:38:73:b0:b9:1f:fb:50:16:70:42:
                    0c:c8:1a:18:64:39:9a:6e:74:00:eb:99:79:a8:3e:
                    0e:a3:89:14:ce:f7:69:79:9a:cc:0e:48:36:62:fc:
                    e3:4b:54:96:8c:de:83:67:60:9e:da:9e:5f:4f:d6:
                    53:54:d4:57:49:b0:51:dc:5b:18:39:82:7e:c9:aa:
                    b2:c0:f7:c9:0d:48:d0:91:94:81:39:d8:ef:61:b3:
                    0b:c1:55:32:2e:5f:2e:4e:bb:f7:1f:fa:aa:95:d9:
                    0f:68:f1:47:19:17:f0:6b:56:4a:45:8f:4d:d0:73:
                    dd:5e:96:8b:c4:d2:08:92:50:65:da:81:d8:91:79:
                    5d:24:e2:42:4d:05:6d:01:78:27:a5:21:3c:80:1e:
                    32:79:c3:ea:3d:86:59:69:34:f9:89:4f:29:b5:47:
                    1d:e0:b0:1c:fd:14:d3:71:02:49:77:0c:d4:68:08:
                    85:8a:64:67:56:aa:d7:af:39:f3:5d:37:74:d0:31:
                    df:4c:7f:3d:01:02:a3:7a:e8:e4:f8:ef:ad:17:65:
                    24:04:3c:79:4f:c5:69:3c:3e:20:d6:d7:20:f9:48:
                    52:09:6f:ca:22:13:e7:32:45:89:f2:da:de:ab:04:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EC:B0:24:A5:78:0C:17:AC:4B:49:BE:63:CE:14:EC:FD:A0:78:84
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/FOywJKV4DBesS0m-Y84U7P2geIQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:7e:34:5f:4b:76:ed:16:cb:93:31:bc:bc:0d:e3:77:ed:f0:
         c8:d2:fd:bb:67:10:ad:4c:9f:41:05:13:f6:0d:14:12:01:8a:
         1f:c5:12:26:9a:2b:19:55:c4:4d:de:fb:20:57:2b:12:61:1c:
         40:b4:fb:5a:fb:04:c1:f9:74:bb:8d:7a:80:80:f9:18:a6:56:
         65:6f:ea:c4:d2:96:bb:a2:4f:66:c3:f9:38:04:b1:6f:a3:04:
         fb:87:ed:22:76:aa:71:93:b5:bb:9d:67:37:48:0a:10:dd:8c:
         74:33:7c:a9:7b:fe:03:70:ca:ff:02:45:81:22:32:13:37:d1:
         97:f1:44:29:89:dd:c5:a0:f1:3c:17:6a:3c:5e:dd:b3:37:58:
         11:88:a1:c1:eb:be:53:57:4d:47:43:7d:7d:4c:00:4d:dd:e4:
         80:37:90:9f:27:cf:ad:ce:8a:fd:31:91:e5:bf:97:17:68:c9:
         05:18:e4:b6:42:cc:b1:24:2e:c8:0f:ab:22:6c:b3:ba:d4:c2:
         b3:da:6a:ad:a1:94:67:d4:86:15:27:02:17:9a:44:a8:be:32:
         7f:0e:ea:5a:d6:79:ad:8d:62:e4:52:ac:e9:18:6c:94:d9:5f:
         16:fa:c1:b8:7a:d0:bb:2a:92:c4:66:4f:13:47:82:07:b7:9a:
         ed:48:00:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----