Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/jSllur9I8o7Hg6K_-r1MZv7Q8g0.roa
File:                     jSllur9I8o7Hg6K_-r1MZv7Q8g0.roa (raw, json)
Hash identifier:          A1Y+mvoBZlg+GF/eFCTzuH9cKq429Mi+eg6vTWZfY4M=
Subject key identifier:   8D:29:65:BA:BF:48:F2:8E:C7:83:A2:BF:FA:BD:4C:66:FE:D0:F2:0D
Certificate issuer:       /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial:       018C4AD6CDCAEA8103E43F4E08BD590CB1D7
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/jSllur9I8o7Hg6K_-r1MZv7Q8g0.roa
Signing time:             Fri 08 Dec 2023 19:10:40 +0000
ROA not before:           Fri 08 Dec 2023 19:10:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202685
IP address blocks:        2a13:ef41:b000::/39 maxlen: 39
                          2a13:ef43::/32 maxlen: 32
                          2a13:ef42::/32 maxlen: 32
                          2a13:ef42:b00b::/48 maxlen: 48
                          2a13:ef43:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:4a:d6:cd:ca:ea:81:03:e4:3f:4e:08:bd:59:0c:b1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
        Validity
            Not Before: Dec  8 19:10:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8d2965babf48f28ec783a2bffabd4c66fed0f20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:6b:51:d7:90:14:0d:85:17:19:18:cc:e6:
                    a6:d5:76:08:82:e0:fb:56:3b:52:2b:25:de:ef:73:
                    d2:a1:a9:83:af:2e:63:1d:e5:71:16:08:e8:0b:ee:
                    5a:83:fb:1e:f4:c3:55:1f:d9:1e:7e:77:e3:5f:56:
                    e7:94:23:58:69:bd:93:84:1b:3a:e0:dd:36:df:88:
                    9c:ec:20:04:ba:d2:2a:55:ee:ee:54:8f:5c:e5:c2:
                    4d:b9:94:a5:47:a1:a8:e8:c3:3b:ef:45:a6:3c:8f:
                    21:93:a3:56:26:0c:c7:c0:8f:10:9e:bd:55:3a:c4:
                    64:6e:f5:f2:d4:fe:d4:e5:8e:31:47:e3:07:a1:4f:
                    3c:5a:4a:76:ed:10:84:15:a9:f3:8f:cc:b4:f5:22:
                    d5:b0:9e:8a:40:f1:ea:7b:b9:d3:d6:0e:7c:e8:b8:
                    93:3f:b9:75:c3:63:26:67:e9:5b:8e:8f:1c:a1:62:
                    0a:87:90:25:1f:6a:47:65:7d:f8:5c:83:c8:c0:65:
                    50:07:c9:0e:2f:53:3f:54:c7:53:8d:fd:1e:5d:bb:
                    88:8b:fb:dc:0b:c3:d9:b9:f1:65:43:4d:ef:d7:00:
                    6e:79:25:94:95:c7:a7:1c:67:d5:39:dd:ff:4c:4c:
                    b1:c5:fa:e9:c4:b7:b5:bc:f3:c0:7b:27:ed:81:ac:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:29:65:BA:BF:48:F2:8E:C7:83:A2:BF:FA:BD:4C:66:FE:D0:F2:0D
            X509v3 Authority Key Identifier:
                keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/jSllur9I8o7Hg6K_-r1MZv7Q8g0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef41:b000::/39
                  2a13:ef42::/31

    Signature Algorithm: sha256WithRSAEncryption
         61:db:a8:34:3b:72:94:46:66:40:91:6d:51:6d:a4:9e:86:ae:
         60:a6:96:54:84:de:1c:fc:1a:23:cf:0f:4f:28:c7:cb:fe:37:
         1c:ef:36:d1:0e:fc:32:77:4a:9e:a4:b8:51:89:0f:0d:08:d0:
         16:b0:6d:26:1b:73:f3:7d:7a:ef:58:bc:b9:c6:ab:6a:66:49:
         98:59:66:e1:fb:2b:47:8d:10:35:d0:09:aa:69:09:4f:1e:25:
         b9:79:fe:e9:a2:1c:f5:91:78:c6:a0:8d:c6:5a:25:ac:4c:ce:
         22:fc:4b:38:48:84:23:5a:b5:b6:f6:78:a9:04:61:c7:72:18:
         c8:75:05:1e:e8:ce:52:c2:46:86:ec:c6:e2:1a:8b:e3:c5:ab:
         62:a7:15:28:41:69:40:62:1f:0b:5f:69:8a:c5:39:4c:f1:5c:
         d3:18:99:61:2b:33:4f:10:41:0d:e7:19:cf:80:8f:ae:eb:5d:
         c1:62:37:73:3d:29:f8:92:78:78:0f:c8:b7:07:cd:67:5e:bc:
         d8:6c:48:c0:4d:b1:21:38:7c:c3:fa:ae:56:98:7b:9f:5f:2d:
         d0:60:d9:c9:e5:9e:86:db:40:f4:f1:c3:b4:24:ea:e8:b9:f2:
         7b:2f:a5:04:87:d6:b8:08:bb:af:60:e6:71:d1:b4:da:9e:af:
         58:ea:51:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----