Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/xUuoRLZz6P0hjZTSLrBUP2KNvJI.roa
File:                     xUuoRLZz6P0hjZTSLrBUP2KNvJI.roa (raw, json)
Hash identifier:          kVaCTxCwWJKZJW6iPuWHKqeS9Dijd+CoLpCCPHQaXH4=
Subject key identifier:   C5:4B:A8:44:B6:73:E8:FD:21:8D:94:D2:2E:B0:54:3F:62:8D:BC:92
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       0183CBD3275FCB834B6DC4F986168BF8C811
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/xUuoRLZz6P0hjZTSLrBUP2KNvJI.roa
Signing time:             Wed 12 Oct 2022 10:52:36 +0000
ROA not before:           Wed 12 Oct 2022 10:52:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51741
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:cb:d3:27:5f:cb:83:4b:6d:c4:f9:86:16:8b:f8:c8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Oct 12 10:52:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c54ba844b673e8fd218d94d22eb0543f628dbc92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:a0:bd:61:cf:c5:c2:08:19:44:b0:9f:e2:
                    28:a3:f2:ef:70:32:dd:9d:86:da:29:5c:17:a5:63:
                    8a:9b:96:b3:5b:a5:3c:6e:2b:ca:17:ca:17:1f:67:
                    41:9c:02:1d:86:8b:38:eb:a9:8c:b1:2e:ff:94:b3:
                    a5:4b:49:e9:c3:04:a3:75:f2:d5:46:74:2f:04:2d:
                    b2:29:4c:e5:bd:e6:54:c1:7b:72:cc:03:d4:b2:09:
                    ca:dc:14:5b:5e:ff:be:fc:d4:31:e0:63:45:16:3b:
                    78:b7:49:22:9d:ee:c5:70:de:12:72:f9:f0:64:a9:
                    61:c4:77:21:ea:47:49:68:ce:d4:32:9d:82:9b:ab:
                    15:3a:72:86:c1:54:b3:03:c9:83:16:3a:c5:17:95:
                    6d:b0:3e:25:c5:7e:5c:90:33:b5:0b:3d:bd:35:df:
                    73:28:10:94:6f:06:59:80:ed:12:ef:f3:5a:5b:32:
                    31:28:7b:3d:34:20:6f:1a:bc:be:6a:dc:40:1e:60:
                    6c:2f:0f:d2:bf:3e:6b:fa:9f:54:6c:7c:ef:55:4f:
                    74:f1:da:62:ba:f2:2f:f2:f8:ad:4a:22:04:70:44:
                    03:bb:5b:83:dc:2f:0d:cb:e4:b4:bc:15:95:db:b7:
                    71:d2:c7:c3:77:56:0a:21:24:d2:e1:e1:46:27:80:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4B:A8:44:B6:73:E8:FD:21:8D:94:D2:2E:B0:54:3F:62:8D:BC:92
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/xUuoRLZz6P0hjZTSLrBUP2KNvJI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:8b:58:b1:b4:ff:f3:cd:1c:2e:21:d0:d2:c5:f9:ef:6e:f9:
         6e:4e:60:1a:a2:41:26:07:6a:81:7a:08:0b:b3:56:b0:10:83:
         d9:76:bf:2b:ab:f0:08:cc:05:17:cb:77:de:24:c5:dd:7d:b5:
         99:ce:04:39:22:f1:a3:9b:6d:19:cc:02:f8:a3:9c:5c:34:9b:
         ee:f5:cb:d8:2f:26:39:c7:f3:ad:c3:5e:8c:ba:d4:8a:ff:0d:
         bd:5e:96:04:41:d0:3e:a2:cd:95:ed:b7:3f:ea:ac:29:10:7a:
         d2:43:d7:6c:b6:81:7f:ba:03:cb:77:3c:e4:32:7a:5b:f0:32:
         31:ec:dd:2c:d3:a3:8f:01:18:cd:51:85:ca:9c:cb:4a:ee:ff:
         07:c3:79:6e:cd:01:a3:29:47:a7:67:23:fa:74:c9:8e:8a:d3:
         8d:a8:78:93:1b:c7:c6:53:61:8a:fd:86:3e:db:7b:ff:25:2f:
         48:c6:0f:f4:db:4a:2c:07:54:ac:70:5b:07:42:54:dd:7f:7b:
         f9:0f:7c:fe:a3:73:28:8e:a2:1a:30:c6:5a:82:f2:34:35:93:
         12:5d:43:b0:91:d3:bf:a9:ca:21:3f:b4:bd:81:92:cf:b1:19:
         98:1d:e6:2c:f9:88:8b:7b:e9:af:7c:f5:3e:ad:91:62:c3:41:
         80:c1:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----