Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/6yWierHc6-jtKrxiykKUNEkEOcg.roa
File:                     6yWierHc6-jtKrxiykKUNEkEOcg.roa (raw, json)
Hash identifier:          XtkszGGH8Wr5cMEzQZCUk/AW3X0LgqE5YxrZ+kPSpZs=
Subject key identifier:   EB:25:A2:7A:B1:DC:EB:E8:ED:2A:BC:62:CA:42:94:34:49:04:39:C8
Certificate issuer:       /CN=e2963b30bb52efd98f0cee6324ff2f98a811b439
Certificate serial:       0185738FEFE5D9DACFCB45A5F34E67FB7F90
Authority key identifier: E2:96:3B:30:BB:52:EF:D9:8F:0C:EE:63:24:FF:2F:98:A8:11:B4:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4pY7MLtS79mPDO5jJP8vmKgRtDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/6yWierHc6-jtKrxiykKUNEkEOcg.roa
Signing time:             Mon 02 Jan 2023 17:38:11 +0000
ROA not before:           Mon 02 Jan 2023 17:38:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57717
IP address blocks:        185.216.140.0/23 maxlen: 23
                          2a0b:b7c0::/30 maxlen: 30
                          2a0b:b7c4::/30 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:8f:ef:e5:d9:da:cf:cb:45:a5:f3:4e:67:fb:7f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2963b30bb52efd98f0cee6324ff2f98a811b439
        Validity
            Not Before: Jan  2 17:38:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb25a27ab1dcebe8ed2abc62ca429434490439c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:ea:60:a5:72:0a:41:b8:0d:0f:8a:a1:9f:
                    82:41:df:69:20:37:8e:29:85:9d:c4:16:8f:66:43:
                    f9:d2:41:1f:0f:e9:c9:6a:60:06:e8:e5:47:52:ec:
                    00:5c:07:25:fb:90:5c:1d:1d:0b:50:6a:1b:00:60:
                    c5:b2:c6:5b:90:79:35:d3:31:63:3b:2d:35:00:f1:
                    21:05:cd:7e:bb:99:76:21:60:7c:bf:a3:37:0e:c9:
                    b8:3b:f8:4a:7b:2c:54:a7:fc:aa:63:5a:7a:c5:e5:
                    3a:e1:83:33:77:a8:79:bf:9b:19:10:82:8a:4b:9b:
                    52:48:7c:66:9c:c2:83:61:f9:8d:0e:7c:d5:66:3f:
                    cb:7d:39:ed:89:22:3e:9b:60:f0:1f:ec:2b:eb:f3:
                    9f:85:7f:6e:6b:3a:a5:db:97:4d:5e:75:73:d9:cb:
                    26:0a:3a:47:c1:4d:b8:b9:77:54:90:32:2b:c7:3a:
                    99:dd:34:f3:2b:34:87:2f:2b:52:a6:eb:a3:5c:bd:
                    c5:ff:59:4d:f6:4e:f4:07:be:91:63:e1:19:96:8a:
                    c7:bf:da:c2:ef:ce:8e:53:ff:93:52:02:58:2b:c8:
                    db:5d:d2:62:8c:32:90:7e:c4:9a:cf:81:ad:1d:cd:
                    13:c7:a9:96:c8:36:c5:99:4c:9e:aa:23:22:53:02:
                    3f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:25:A2:7A:B1:DC:EB:E8:ED:2A:BC:62:CA:42:94:34:49:04:39:C8
            X509v3 Authority Key Identifier:
                keyid:E2:96:3B:30:BB:52:EF:D9:8F:0C:EE:63:24:FF:2F:98:A8:11:B4:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pY7MLtS79mPDO5jJP8vmKgRtDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/6yWierHc6-jtKrxiykKUNEkEOcg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/4pY7MLtS79mPDO5jJP8vmKgRtDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.140.0/23
                IPv6:
                  2a0b:b7c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         83:05:b1:fe:88:3f:bd:76:8e:97:20:cc:01:31:56:12:af:83:
         cc:a5:1e:c4:f9:83:08:09:84:74:02:4f:cb:60:43:6f:3a:8d:
         4b:3c:87:75:42:24:88:00:ed:e2:8f:2a:38:d9:fe:97:31:f1:
         cc:54:c9:b6:e6:c5:3d:e9:a1:4b:6a:c6:ed:42:66:c5:79:8b:
         73:06:60:1c:be:c1:46:d2:b7:e7:4e:84:a4:47:24:67:bc:69:
         aa:22:fd:92:7d:ce:98:06:15:8b:07:bd:2f:e0:55:bf:39:db:
         a6:bd:eb:98:f6:b4:2e:95:11:c0:4d:64:42:0c:09:7c:33:6a:
         0f:6d:04:ec:36:2a:4c:2a:54:18:1b:c6:9e:de:4b:bb:45:63:
         b4:37:8d:0a:2d:4e:22:dc:df:0f:19:2e:5c:d9:9a:a9:f3:2a:
         3e:74:e5:fb:8c:db:92:83:50:43:37:14:71:a7:85:5d:92:5d:
         73:73:6e:99:16:92:95:5e:7a:e5:97:2e:eb:84:d3:52:81:88:
         3c:4f:bf:bb:aa:07:2d:ab:78:17:e1:2d:ab:08:02:3b:fc:e4:
         b4:78:c2:b6:d8:e1:be:ba:fe:4a:19:c4:46:35:b6:7f:5b:56:
         d8:36:a0:12:04:8a:b5:3f:c6:d6:53:83:1e:ce:ae:51:fe:c7:
         23:b0:fd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----