Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/tG9iM235ErIrFDYdtYwtUlB3iAg.roa
File:                     tG9iM235ErIrFDYdtYwtUlB3iAg.roa (raw, json)
Hash identifier:          w4nCBX33/BPMlhYEWTFzr/15Zy6jd+PRPQ9PoXF0neo=
Subject key identifier:   B4:6F:62:33:6D:F9:12:B2:2B:14:36:1D:B5:8C:2D:52:50:77:88:08
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018B5D66BDCCE6E27A5FA697229102985F74
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/tG9iM235ErIrFDYdtYwtUlB3iAg.roa
Signing time:             Mon 23 Oct 2023 16:38:16 +0000
ROA not before:           Mon 23 Oct 2023 16:38:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51741
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5d:66:bd:cc:e6:e2:7a:5f:a6:97:22:91:02:98:5f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Oct 23 16:38:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b46f62336df912b22b14361db58c2d5250778808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:da:7e:b6:9d:a0:6b:52:b4:ca:ea:ff:21:
                    9f:88:1d:b4:e9:6c:53:b7:6c:71:18:71:5e:22:11:
                    d3:82:52:be:a1:e2:58:71:7c:56:c1:97:88:ad:46:
                    d3:f0:6b:41:9a:b2:4c:5e:57:e7:c5:b9:ae:83:d7:
                    59:e6:a0:ef:13:a5:0c:f9:46:62:2e:eb:93:d3:66:
                    aa:1e:b5:c6:e9:80:9a:ac:b4:63:fd:57:d9:83:f0:
                    06:d9:eb:bc:b1:83:f9:bb:96:e0:96:e1:c9:39:b5:
                    45:3c:7b:a9:fa:6f:63:29:63:db:d3:eb:23:21:aa:
                    d3:a4:a5:59:a7:fa:3d:c1:34:81:4e:44:1c:52:93:
                    ab:c6:6c:63:cc:6e:fb:7c:36:e7:64:ed:c5:a6:b2:
                    39:ec:3e:0b:46:be:c2:c0:2f:35:26:95:a2:5c:35:
                    4d:a5:6b:06:4d:77:c8:9d:ae:4b:6a:60:0a:9c:54:
                    0e:00:88:26:ac:5c:91:dc:4c:a7:e0:3a:72:8a:c0:
                    87:3b:93:89:70:ff:b0:6e:3d:40:0b:c4:04:28:4d:
                    a5:c6:61:0c:58:54:a2:28:06:da:a8:03:bb:e6:6b:
                    37:24:5d:4a:48:04:6b:84:c4:20:33:ef:fa:b7:bb:
                    f8:d8:4e:6d:4d:2b:e8:54:9a:13:0c:ac:ee:bb:fb:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6F:62:33:6D:F9:12:B2:2B:14:36:1D:B5:8C:2D:52:50:77:88:08
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/tG9iM235ErIrFDYdtYwtUlB3iAg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         48:62:83:84:72:aa:ce:5c:43:07:6b:65:b4:05:c1:2c:c3:32:
         b6:b5:f8:7a:3b:f1:aa:52:a7:71:1d:e5:f6:b0:71:b6:01:ee:
         72:14:13:67:5c:00:c7:ce:5f:c0:82:26:08:3c:19:e2:55:80:
         35:d3:c0:88:73:7c:22:a7:0f:3e:5f:9a:7b:2b:b2:e4:85:68:
         b5:a1:59:0b:53:9d:90:70:c2:25:16:02:89:4a:75:7f:a8:c5:
         c1:17:51:5f:f9:e7:39:d6:52:08:c7:54:a9:54:44:d5:5e:38:
         a1:b0:31:ef:79:2d:9a:1f:41:7f:85:4d:f3:2d:7a:1f:f7:2f:
         0a:87:e7:a5:f0:77:d4:0a:9f:41:a9:52:49:0e:43:28:28:21:
         76:85:e3:99:48:f4:fe:c5:15:db:e1:f7:19:2f:69:e3:80:00:
         4a:b8:e0:fc:37:8a:2e:e2:a8:f7:b7:c9:fb:59:c1:f9:b2:cd:
         7b:49:71:52:6f:3d:5e:c2:b7:db:a4:25:04:c0:dc:0a:60:c6:
         00:c9:4e:1f:c5:d8:5e:df:3b:6c:d8:37:bd:27:a8:5e:56:bc:
         bd:c8:5a:9f:a0:f2:f0:fa:10:44:ef:3c:7f:ce:18:2f:10:95:
         aa:fb:be:8a:88:60:d1:26:e5:47:52:de:81:9b:9e:29:14:81:
         c8:7f:00:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----