Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/ohLhiChAtTtqxHsxd5gP-Q1S8CU.roa
File:                     ohLhiChAtTtqxHsxd5gP-Q1S8CU.roa (raw, json)
Hash identifier:          ETBAjT+YwELYUtRGIvWRUumwvKpJnY/PpSBbQmCFI+8=
Subject key identifier:   A2:12:E1:88:28:40:B5:3B:6A:C4:7B:31:77:98:0F:F9:0D:52:F0:25
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       01881A849D5929477C141D19533D73F3921F
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/ohLhiChAtTtqxHsxd5gP-Q1S8CU.roa
Signing time:             Sun 14 May 2023 13:47:58 +0000
ROA not before:           Sun 14 May 2023 13:47:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51741
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:1a:84:9d:59:29:47:7c:14:1d:19:53:3d:73:f3:92:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: May 14 13:47:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a212e1882840b53b6ac47b3177980ff90d52f025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:6c:13:2c:03:ac:64:23:02:0c:66:d1:1d:
                    d4:b1:3b:fd:1b:16:69:cf:b4:41:4a:14:0c:59:b2:
                    67:23:62:1e:1e:87:fc:92:ae:ff:1c:60:23:6f:be:
                    12:62:fe:ba:e5:c7:7e:d6:78:17:ba:25:ac:c7:d7:
                    23:c0:f9:b7:df:49:88:bc:84:d6:b3:db:af:5d:a7:
                    6b:f2:a4:b3:15:96:e7:c8:2d:10:42:0a:7c:f7:29:
                    ec:a4:db:49:bd:fb:0c:90:63:99:51:9a:58:ed:bb:
                    d5:3c:6f:73:22:76:5f:26:a6:75:43:fb:1f:fb:43:
                    69:82:be:ee:5a:4d:f7:a6:1b:52:92:02:cc:7c:43:
                    69:bf:11:1f:ac:50:d3:3d:0f:49:8e:8f:d7:e4:50:
                    63:36:da:ab:2a:07:e3:2c:c0:72:5c:43:51:f7:d5:
                    a1:a4:d5:c6:1d:48:45:97:d5:b6:04:57:2e:60:b8:
                    ac:aa:92:40:30:9e:4d:e5:9d:e2:58:e6:ae:6b:38:
                    d8:c0:f1:5c:76:fe:1b:41:a4:ce:cf:15:e4:59:e5:
                    db:03:9f:9e:36:90:7e:45:bb:8b:d6:32:03:9c:b3:
                    64:e0:a1:e6:5e:16:a9:3d:d8:e8:cd:35:2b:89:9f:
                    aa:5b:85:b2:c7:39:9c:51:e7:c5:24:c2:c9:26:da:
                    29:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:12:E1:88:28:40:B5:3B:6A:C4:7B:31:77:98:0F:F9:0D:52:F0:25
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/ohLhiChAtTtqxHsxd5gP-Q1S8CU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:28:19:8c:e7:8b:27:e6:b5:35:b8:f5:9b:e6:61:ba:e4:3c:
         16:54:d3:cc:52:0e:61:fa:6e:74:d9:cc:95:70:ba:35:90:f0:
         ca:59:79:73:18:37:fb:77:d9:c4:a0:c6:ed:c5:d6:36:82:eb:
         45:1f:8c:3d:88:ff:21:3e:81:44:07:58:f7:12:2b:cb:b3:1f:
         a4:4c:21:c0:2f:cc:6d:63:0f:7e:d0:0b:4d:f7:f3:38:87:62:
         38:7a:b6:b6:ae:a7:05:ca:68:fc:51:16:43:54:49:da:f3:75:
         fa:38:c4:a4:26:d8:23:f8:c3:87:c2:b8:01:64:56:17:c9:f6:
         f2:23:1d:57:82:78:1b:32:b1:6b:56:9f:97:8f:30:bd:40:1a:
         46:13:a6:fe:ec:2d:db:4c:99:04:8d:47:b6:b2:22:82:20:cb:
         09:62:7e:8e:ab:6e:b7:bb:d2:d3:59:33:71:4b:be:ed:52:36:
         aa:47:28:7a:34:d2:91:af:87:1a:8b:fb:a7:1f:a4:34:38:83:
         80:b4:84:c8:1e:13:7a:f9:b0:2b:eb:7c:84:21:dc:03:79:21:
         75:60:02:14:6c:a9:87:64:6d:ab:4c:ac:a7:a3:2e:e3:01:28:
         b9:75:f3:37:8d:50:40:12:a2:17:41:c0:cd:94:32:f2:71:88:
         97:31:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----