Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/s09ox-0oucdTFbbwX-BILxORmdM.roa
File:                     s09ox-0oucdTFbbwX-BILxORmdM.roa (raw, json)
Hash identifier:          sTXijC43DmXPAftQmaq4v8VtNPlutWDgemMY0h6wAxU=
Subject key identifier:   B3:4F:68:C7:ED:28:B9:C7:53:15:B6:F0:5F:E0:48:2F:13:91:99:D3
Certificate issuer:       /CN=1b731c9cd1efa389724aa266ff280f4c108c7bec
Certificate serial:       01856FF96317E1E404ADB5F5F19CE6C75771
Authority key identifier: 1B:73:1C:9C:D1:EF:A3:89:72:4A:A2:66:FF:28:0F:4C:10:8C:7B:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G3McnNHvo4lySqJm_ygPTBCMe-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/s09ox-0oucdTFbbwX-BILxORmdM.roa
Signing time:             Mon 02 Jan 2023 00:54:52 +0000
ROA not before:           Mon 02 Jan 2023 00:54:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201106
IP address blocks:        188.93.139.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:63:17:e1:e4:04:ad:b5:f5:f1:9c:e6:c7:57:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b731c9cd1efa389724aa266ff280f4c108c7bec
        Validity
            Not Before: Jan  2 00:54:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b34f68c7ed28b9c75315b6f05fe0482f139199d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:88:bd:46:27:11:db:6b:b6:26:37:09:cf:bd:
                    81:d0:c4:59:ec:d2:83:af:d8:71:ec:8d:78:57:13:
                    d1:4f:29:5d:42:3b:ab:16:3b:fc:57:5d:51:2c:61:
                    e9:47:3f:86:34:97:1b:5e:43:01:12:d9:d2:4a:37:
                    bf:c7:6a:11:17:43:c2:9d:b4:fe:06:65:91:8f:63:
                    bc:80:75:ef:f2:88:46:40:a0:fa:c1:8c:c0:84:b7:
                    a4:96:e7:a1:02:73:3a:80:a4:70:b5:3e:50:5f:d2:
                    79:43:6f:e3:b7:cc:04:bf:4a:2b:73:f4:44:1d:5e:
                    27:3a:23:7c:37:86:0c:1b:99:9d:66:af:77:c7:57:
                    b8:fc:9f:6d:c5:ec:f5:46:f9:57:d8:c8:e9:58:fe:
                    51:8f:63:3a:f9:60:3e:fa:e5:a9:2b:ee:ec:78:b3:
                    a2:4e:b5:9d:1b:d2:af:be:d6:6d:ae:60:6b:24:ac:
                    7a:55:de:7f:48:a0:ce:c1:ed:0f:d4:4e:6f:41:71:
                    06:c5:5b:72:a7:40:42:6e:be:0a:2d:43:5c:b8:ca:
                    42:2e:3d:ce:ba:6d:4b:6a:d3:9d:a7:60:1d:4e:a8:
                    65:b3:e2:65:3a:1a:9e:de:62:58:41:8e:c9:50:a1:
                    58:be:b0:34:da:5a:4f:25:b4:9f:c5:17:88:75:49:
                    e3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4F:68:C7:ED:28:B9:C7:53:15:B6:F0:5F:E0:48:2F:13:91:99:D3
            X509v3 Authority Key Identifier:
                keyid:1B:73:1C:9C:D1:EF:A3:89:72:4A:A2:66:FF:28:0F:4C:10:8C:7B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3McnNHvo4lySqJm_ygPTBCMe-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/s09ox-0oucdTFbbwX-BILxORmdM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/G3McnNHvo4lySqJm_ygPTBCMe-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:0a:58:3e:5c:4b:e2:11:40:89:33:4a:f2:f7:17:36:f7:e0:
         a7:99:95:1f:21:5b:74:9f:ab:5c:db:a1:f6:63:af:37:95:6a:
         22:a4:92:47:30:f9:5a:02:8b:24:62:99:3c:05:74:93:34:74:
         7a:1d:1d:cb:98:59:0d:3b:e2:48:f5:92:71:58:8e:68:8c:a5:
         bc:42:f3:ec:b3:84:fd:c6:cf:7c:31:c1:5a:5f:d9:95:02:68:
         bf:ed:3c:a4:af:8f:0e:88:63:63:de:6e:18:3d:dc:57:1b:92:
         7d:66:e0:29:14:75:26:27:7e:49:8c:08:37:d5:8f:e4:3d:9b:
         34:b6:b1:10:cf:20:6d:52:86:13:fb:96:60:10:42:1d:77:fe:
         96:56:a6:ce:cf:88:56:53:f7:c8:ce:7d:14:93:a1:e7:80:db:
         1d:3a:0d:ca:4e:ff:ac:50:b0:ae:29:9b:55:5d:ea:d7:b5:67:
         dd:b3:b5:48:42:8c:39:4b:5f:5d:76:26:43:b8:73:87:8d:33:
         0e:1b:7f:f6:fd:f8:60:fd:ef:7f:fa:37:3c:7a:21:4d:43:d6:
         cf:05:35:f7:58:75:ca:d4:cd:ce:c8:a8:8e:3b:41:0f:da:d2:
         b1:0b:65:7a:eb:e5:34:16:0b:6a:f9:23:27:42:bd:54:64:da:
         cf:5b:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----