Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/TfaBzD6iBgL20amR7YnXNOl0TBI.roa
File:                     TfaBzD6iBgL20amR7YnXNOl0TBI.roa (raw, json)
Hash identifier:          guCopOnOtWdYmfPKcKiXgh2Al7fiyGSm8rKaixmbZuc=
Subject key identifier:   4D:F6:81:CC:3E:A2:06:02:F6:D1:A9:91:ED:89:D7:34:E9:74:4C:12
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018CD13B85A4A793968B638564768E928E88
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/TfaBzD6iBgL20amR7YnXNOl0TBI.roa
Signing time:             Wed 03 Jan 2024 21:29:48 +0000
ROA not before:           Wed 03 Jan 2024 21:29:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     51741
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:d1:3b:85:a4:a7:93:96:8b:63:85:64:76:8e:92:8e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Jan  3 21:29:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4df681cc3ea20602f6d1a991ed89d734e9744c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:a3:82:df:10:5a:7b:87:6e:92:6d:0d:dd:
                    ff:30:4a:65:04:3a:93:64:9c:4a:4e:5e:a2:e2:21:
                    2e:c4:4f:ce:6e:1e:49:13:53:67:d7:a2:5f:80:56:
                    7f:50:ec:ff:b3:1d:47:8b:d6:bc:08:0a:9a:69:53:
                    62:76:b3:eb:1e:bf:65:cc:a9:09:a8:9f:3b:9a:fe:
                    c0:38:d8:79:2b:36:db:98:a8:fe:63:c4:dc:2e:92:
                    fd:47:ae:0e:e7:b8:8a:51:6e:e7:16:e0:a0:d6:d8:
                    c4:f9:fe:5a:06:c8:fa:11:17:85:ad:71:e7:65:c2:
                    6c:96:7a:f2:6c:9a:3f:80:b3:e7:ef:2f:7e:79:ed:
                    5b:3e:20:e2:2d:fb:4c:00:b4:d9:93:55:03:b8:96:
                    3e:17:36:a0:af:05:49:45:46:a4:f3:08:21:bf:4d:
                    a3:bb:de:0b:32:35:af:77:d2:ec:06:1c:76:89:1f:
                    e5:e2:0c:ad:8c:39:bb:5d:cf:95:57:47:31:87:de:
                    32:3d:95:10:6d:25:47:fb:b8:91:44:8c:b1:81:97:
                    c5:bd:9a:dc:1b:14:23:6f:ac:6f:58:ad:f5:48:cf:
                    78:1e:5a:d7:8d:89:f2:fe:e3:81:20:70:d8:f1:37:
                    6f:9d:f7:70:78:96:49:92:63:6a:8d:5f:b1:b6:c7:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F6:81:CC:3E:A2:06:02:F6:D1:A9:91:ED:89:D7:34:E9:74:4C:12
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/TfaBzD6iBgL20amR7YnXNOl0TBI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         32:54:af:61:07:ba:5e:26:dd:65:25:5d:4a:88:c8:2a:3b:c9:
         67:de:6b:d0:b6:e1:71:84:30:09:1a:85:6a:d1:15:54:1f:a8:
         9f:4b:6c:6c:32:c8:80:b6:27:df:84:58:78:c2:a6:35:86:4e:
         31:3e:5d:d5:f9:9d:7b:bb:64:28:1e:27:7e:fa:4e:b0:4c:97:
         69:de:06:77:83:50:76:32:86:8a:98:2d:6a:5b:c3:c8:98:cb:
         ad:b9:f2:bd:0f:d2:d0:ff:13:82:3b:62:ad:76:94:7e:1f:35:
         98:b7:c7:5e:92:04:94:db:6f:b9:78:f1:77:65:8e:e2:34:f3:
         ea:31:d3:50:af:03:3a:f7:f6:42:c8:63:e7:ca:5d:50:fe:8f:
         f5:2e:a8:08:b5:d5:d2:39:ae:e5:9b:52:75:36:6b:4e:d8:51:
         5e:8e:54:ea:41:40:06:21:18:65:42:c0:18:0a:4f:fe:7b:20:
         3f:f7:2b:75:c6:ac:8a:ea:dc:71:c1:88:db:4d:5f:f3:49:df:
         06:64:45:21:c7:d7:44:8a:d8:3c:6a:33:41:31:31:ef:be:61:
         cb:18:26:12:58:dd:49:47:a6:c7:25:f8:d6:cd:fe:bd:53:8d:
         fa:c9:d1:28:36:2f:13:2d:e9:d5:d6:57:5f:77:29:ff:3f:83:
         67:bc:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----