Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/UO_DwrfwHxPAXDtBF1j1XPqLI0c.roa
File:                     UO_DwrfwHxPAXDtBF1j1XPqLI0c.roa (raw, json)
Hash identifier:          HMGUZkUAaCeWZciF66N/ooihghEe83fkPECE8ZYJZxA=
Subject key identifier:   50:EF:C3:C2:B7:F0:1F:13:C0:5C:3B:41:17:58:F5:5C:FA:8B:23:47
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       01866F5D66D09E1F8BC029799FB4BA159A2C
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/UO_DwrfwHxPAXDtBF1j1XPqLI0c.roa
Signing time:             Mon 20 Feb 2023 15:07:17 +0000
ROA not before:           Mon 20 Feb 2023 15:07:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51741
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:6f:5d:66:d0:9e:1f:8b:c0:29:79:9f:b4:ba:15:9a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Feb 20 15:07:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=50efc3c2b7f01f13c05c3b411758f55cfa8b2347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e3:1d:e8:bc:52:dc:17:06:e7:b9:77:18:b0:
                    04:d1:b9:f4:13:f3:79:a6:d2:30:5e:1a:dd:b7:18:
                    cc:13:50:31:f7:03:27:f5:de:aa:5d:69:fd:8e:cd:
                    bb:ac:f6:c0:4d:4f:66:c0:7f:5b:19:a8:bb:bb:bd:
                    83:09:92:79:c4:31:7e:00:19:32:77:c5:d4:19:6a:
                    a1:05:e6:91:14:19:82:82:9f:39:9c:a5:6e:34:d5:
                    52:12:d5:27:0c:32:e1:3e:b8:14:ce:73:1e:87:cf:
                    c8:ab:33:b5:61:db:67:bd:82:0e:11:44:9a:37:5b:
                    9f:38:7f:d1:f0:35:99:fe:df:a2:47:96:a5:92:89:
                    b3:75:20:94:f0:c5:af:c9:c5:67:97:5f:82:ba:45:
                    28:01:ca:ca:42:a1:3a:5a:61:3b:af:64:9f:5f:bf:
                    11:ca:c6:5f:30:82:fa:5a:a6:f3:d7:d5:7c:14:2d:
                    3b:ef:ce:5f:0e:8b:8c:6c:da:3d:3d:96:fb:35:f1:
                    ab:90:ba:7e:af:98:36:93:5f:d8:c9:fd:26:64:f3:
                    de:f4:9c:52:62:1b:ec:b5:66:54:3a:86:2f:b1:b4:
                    40:46:99:09:6f:72:ae:ca:73:30:7e:2d:6b:c6:02:
                    1d:62:7b:12:83:cc:19:12:ad:ec:e5:e0:7a:a9:4d:
                    4a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EF:C3:C2:B7:F0:1F:13:C0:5C:3B:41:17:58:F5:5C:FA:8B:23:47
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/UO_DwrfwHxPAXDtBF1j1XPqLI0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:61:29:87:31:a7:0e:fb:53:63:c7:2f:31:e2:0b:bd:48:4a:
         ff:e5:fb:18:96:de:8d:0f:31:0c:d7:4a:9b:c3:2d:72:97:47:
         76:6a:7c:9f:cb:75:4c:a5:1a:4f:89:34:cf:58:38:38:3d:07:
         27:8e:93:e7:53:5f:d1:dc:76:44:4a:31:1c:bc:25:c4:d4:e9:
         59:b2:42:f9:fc:4a:c5:65:0a:60:46:1c:44:1a:ef:81:cf:5d:
         c7:4c:90:f0:b4:a2:8e:18:29:02:ab:b0:30:ce:46:f7:6d:2e:
         96:a9:7c:43:77:b6:18:8b:11:08:e8:ec:25:a1:54:f3:ea:62:
         a3:70:ed:8a:a2:18:13:70:a3:82:04:85:a7:fa:7d:9c:dc:2f:
         cb:57:f2:b5:1f:90:ae:a4:15:ce:54:8b:1a:ea:6e:0a:e7:32:
         48:cb:22:7f:bc:f3:9c:5c:fa:c8:e9:e4:97:ec:2f:ed:2b:2f:
         f6:c6:87:cf:51:04:7e:84:2b:47:27:5b:fb:a4:33:bf:c2:9a:
         9d:82:a5:89:4f:a3:19:a1:13:fe:c2:b9:97:ee:39:df:1f:95:
         74:07:ad:aa:98:c5:ed:75:c3:76:90:bf:d4:12:3f:39:4a:72:
         38:7e:de:33:96:e1:fe:01:48:9d:30:67:ea:3c:13:a9:9f:b4:
         0f:64:9d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----