Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/212ee6-874e-431d-85d1-b366f53e2891/1/Jq6LsUrW2VdK0HKraRYI_8IxhWQ.roa
File:                     Jq6LsUrW2VdK0HKraRYI_8IxhWQ.roa (raw, json)
Hash identifier:          3/e4tYm7boiG8rVFcWnL/8R072t3jKg/xaXZBCf2Ksg=
Subject key identifier:   26:AE:8B:B1:4A:D6:D9:57:4A:D0:72:AB:69:16:08:FF:C2:31:85:64
Certificate issuer:       /CN=310ae8948408280d47a84fde24058ad3b3c19e65
Certificate serial:       01856CE63A1BB752EAF11B10EE3FC9B7F05E
Authority key identifier: 31:0A:E8:94:84:08:28:0D:47:A8:4F:DE:24:05:8A:D3:B3:C1:9E:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MQrolIQIKA1HqE_eJAWK07PBnmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/212ee6-874e-431d-85d1-b366f53e2891/1/Jq6LsUrW2VdK0HKraRYI_8IxhWQ.roa
Signing time:             Sun 01 Jan 2023 10:35:05 +0000
ROA not before:           Sun 01 Jan 2023 10:35:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2914
IP address blocks:        193.29.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:3a:1b:b7:52:ea:f1:1b:10:ee:3f:c9:b7:f0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310ae8948408280d47a84fde24058ad3b3c19e65
        Validity
            Not Before: Jan  1 10:35:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26ae8bb14ad6d9574ad072ab691608ffc2318564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a9:d4:9b:0f:53:17:e0:e0:04:1b:17:89:04:
                    02:84:9d:86:2d:8d:f7:39:7f:09:35:78:66:c1:9b:
                    b8:d7:22:fa:97:6b:5c:cb:a1:64:72:93:0b:ae:24:
                    4c:84:3c:14:c8:ce:2a:4b:e1:60:ed:0d:1b:58:99:
                    81:fe:8b:90:63:bf:13:b0:d7:a3:c0:9e:40:1e:6b:
                    e4:41:b6:ee:bc:87:60:c4:f9:07:df:31:c9:a0:ad:
                    09:32:e3:e9:01:d7:44:6f:17:e1:16:bf:f7:2d:b7:
                    33:61:f4:aa:63:41:d0:f0:d0:d0:82:46:e6:5e:2f:
                    63:00:50:45:95:03:e4:11:d2:b7:60:34:df:62:22:
                    6f:bb:b1:11:07:2d:34:c6:30:86:3f:9a:e2:bf:77:
                    83:d1:47:94:a7:8d:07:5c:ee:0c:b7:d7:85:e6:cb:
                    b6:57:60:9e:3e:aa:da:e0:94:ad:84:5c:15:9c:f9:
                    28:56:bb:51:f1:44:3a:99:68:b2:fb:a9:59:a5:d4:
                    ed:e3:7a:1d:28:6e:ae:7c:23:2f:0a:93:21:50:97:
                    d7:ef:af:21:f6:f7:f1:da:b3:7c:84:81:37:a0:79:
                    e9:f1:fc:1c:11:05:94:26:bd:f5:37:00:db:4b:5b:
                    7b:d8:71:d8:1d:59:f3:34:b6:3f:01:61:28:af:82:
                    fc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AE:8B:B1:4A:D6:D9:57:4A:D0:72:AB:69:16:08:FF:C2:31:85:64
            X509v3 Authority Key Identifier:
                keyid:31:0A:E8:94:84:08:28:0D:47:A8:4F:DE:24:05:8A:D3:B3:C1:9E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQrolIQIKA1HqE_eJAWK07PBnmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/212ee6-874e-431d-85d1-b366f53e2891/1/Jq6LsUrW2VdK0HKraRYI_8IxhWQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/212ee6-874e-431d-85d1-b366f53e2891/1/MQrolIQIKA1HqE_eJAWK07PBnmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:77:1e:88:6e:7c:ff:ee:f5:50:85:e4:7e:2d:f8:87:86:53:
         b7:8c:73:7a:d5:fa:30:d5:91:a9:ba:d4:b5:56:1a:11:05:fd:
         ec:f0:ad:ea:84:9a:3d:f3:78:4f:52:88:de:25:bd:06:a9:e2:
         74:50:7a:5f:ea:5e:34:0d:66:01:44:f4:34:74:f3:84:08:ee:
         9d:4c:af:2f:f0:b6:7a:8a:2a:2e:c8:e3:fd:9f:a4:2e:0a:2f:
         39:68:98:f2:9c:08:ea:df:db:c6:a2:da:d9:36:1e:10:1e:ef:
         b0:0a:4e:ec:90:6b:6a:b6:a0:e8:9f:bc:d2:03:ea:6b:3e:c3:
         f7:f5:f0:75:e3:e6:f2:4d:1e:6c:e7:10:35:25:fa:1d:17:48:
         a8:fe:a2:bc:94:64:25:28:e1:14:80:8f:4c:61:4a:16:d8:80:
         5b:21:02:8f:71:1a:91:8e:61:ce:8c:4a:32:e1:c1:5c:ac:81:
         85:ef:e8:34:d9:fc:c8:d7:c5:f7:7b:7e:69:0f:0d:09:0e:46:
         2d:72:21:22:aa:49:8f:82:45:46:30:cb:78:24:29:96:67:9e:
         2b:ad:6d:21:19:82:87:9c:89:1e:94:e2:b4:2b:20:52:b1:36:
         61:5f:14:87:4b:db:f7:f5:4f:aa:94:9f:80:f7:91:b1:83:31:
         5b:22:33:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----