Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/UAj93skAvRYKJZ_iWBUPTEEfzik.roa
File:                     UAj93skAvRYKJZ_iWBUPTEEfzik.roa (raw, json)
Hash identifier:          FbZfoDH+1c95GjoTAZSCaGkMsz7aPSrA/oEjWycOJuE=
Subject key identifier:   50:08:FD:DE:C9:00:BD:16:0A:25:9F:E2:58:15:0F:4C:41:1F:CE:29
Certificate issuer:       /CN=9beaa3f4124ae4fb8d36c416a6b190026a9edb79
Certificate serial:       018CC5DC26FD1214A46B242B94BEF160CF99
Authority key identifier: 9B:EA:A3:F4:12:4A:E4:FB:8D:36:C4:16:A6:B1:90:02:6A:9E:DB:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-qj9BJK5PuNNsQWprGQAmqe23k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/UAj93skAvRYKJZ_iWBUPTEEfzik.roa
Signing time:             Mon 01 Jan 2024 16:29:48 +0000
ROA not before:           Mon 01 Jan 2024 16:29:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207990
IP address blocks:        213.217.10.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:26:fd:12:14:a4:6b:24:2b:94:be:f1:60:cf:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9beaa3f4124ae4fb8d36c416a6b190026a9edb79
        Validity
            Not Before: Jan  1 16:29:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5008fddec900bd160a259fe258150f4c411fce29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:83:f4:bf:ed:d5:0b:c8:d4:e4:57:ef:f3:
                    57:b7:2a:1a:5a:f3:24:43:5a:15:82:1b:42:17:2e:
                    a4:13:49:d7:3d:51:ff:66:a9:06:12:1a:9d:8c:ca:
                    71:30:57:79:74:99:1f:71:28:29:9b:2f:eb:65:a9:
                    97:58:5f:b3:a2:b4:cb:c6:5c:f9:62:d3:64:3a:10:
                    eb:06:74:4c:4f:00:02:dd:06:a9:ad:07:d7:36:6b:
                    30:f5:3b:15:b0:3b:64:69:4d:92:49:64:6d:6f:d6:
                    37:64:f6:f2:0d:6d:a6:98:31:a6:8c:6d:b2:f5:0d:
                    80:2d:47:8e:39:ed:95:52:40:b6:17:d9:2f:5c:5e:
                    85:36:79:60:4c:82:e3:2f:bb:97:31:77:36:52:e1:
                    18:71:20:2a:2f:a1:08:c3:88:95:b3:b3:de:33:59:
                    ba:21:09:59:71:e3:46:7b:e9:84:52:e1:48:dd:98:
                    db:63:24:7f:19:24:cf:80:fe:f2:e7:df:c7:31:b7:
                    b4:9b:e7:ed:81:ed:48:61:49:45:85:04:18:36:7d:
                    eb:df:42:d2:29:69:7b:99:59:48:e9:c3:a4:fb:0b:
                    3a:ed:5c:93:33:47:1a:7c:9b:8c:5b:bf:d8:4a:12:
                    e4:1c:86:57:da:66:52:44:e5:b5:89:8f:de:45:df:
                    95:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:08:FD:DE:C9:00:BD:16:0A:25:9F:E2:58:15:0F:4C:41:1F:CE:29
            X509v3 Authority Key Identifier:
                keyid:9B:EA:A3:F4:12:4A:E4:FB:8D:36:C4:16:A6:B1:90:02:6A:9E:DB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-qj9BJK5PuNNsQWprGQAmqe23k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/UAj93skAvRYKJZ_iWBUPTEEfzik.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/m-qj9BJK5PuNNsQWprGQAmqe23k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.217.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:33:ab:c6:33:b6:04:e7:1c:2e:1a:73:14:04:a6:9b:ba:59:
         a6:f2:13:4a:70:0c:3e:a9:88:5a:ec:4c:1f:0f:9d:ce:7d:f6:
         ff:aa:23:fd:fa:f7:1c:8c:7f:7b:1f:da:08:e3:b2:bc:bd:8a:
         c7:dd:6e:2a:51:2f:94:b1:fe:30:ef:9e:0f:26:25:14:86:56:
         f3:8a:59:21:f5:71:f0:35:89:58:4e:20:e6:08:df:4e:f2:e5:
         c3:18:0c:f7:c9:e2:62:72:46:fc:c6:88:ba:8c:f4:37:05:41:
         64:c4:13:51:84:df:45:a9:bb:3e:87:24:07:96:83:eb:aa:4d:
         01:37:49:6f:18:e2:e0:b0:7e:58:86:21:83:93:7c:1f:d2:28:
         cb:64:76:25:ae:94:6f:5a:42:a8:be:19:5a:e9:d5:64:99:ff:
         8b:ad:8b:25:6b:4e:6b:f9:cf:01:de:cf:85:27:29:03:55:f6:
         a0:7a:82:df:42:66:30:01:e5:ae:c3:b9:e8:a8:9e:ff:ec:92:
         e9:8c:da:8b:c9:68:5d:87:81:53:67:7f:17:c6:11:6b:56:74:
         34:2e:42:cb:cd:f3:9a:d9:eb:5f:89:2c:84:96:7d:d0:e6:10:
         a0:d3:bc:f8:27:f8:06:26:4b:9a:7c:33:05:9a:47:f7:0f:79:
         96:36:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----