Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/zlfSgIKTSd0B25zILoq2yKE-9HI.roa
File:                     zlfSgIKTSd0B25zILoq2yKE-9HI.roa (raw, json)
Hash identifier:          Upbi6agJDPWpN7TLiRzvO2mpjIGOoijENF25SQ5Jizo=
Subject key identifier:   CE:57:D2:80:82:93:49:DD:01:DB:9C:C8:2E:8A:B6:C8:A1:3E:F4:72
Certificate issuer:       /CN=58a68af51f23d30901b07c97754b28e92db5435e
Certificate serial:       018BED39ABC56ABC491E2D1CF14DB622467E
Authority key identifier: 58:A6:8A:F5:1F:23:D3:09:01:B0:7C:97:75:4B:28:E9:2D:B5:43:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKaK9R8j0wkBsHyXdUso6S21Q14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/zlfSgIKTSd0B25zILoq2yKE-9HI.roa
Signing time:             Mon 20 Nov 2023 14:54:21 +0000
ROA not before:           Mon 20 Nov 2023 14:54:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56798
IP address blocks:        193.17.33.0/24 maxlen: 24
                          2a10:d440:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ed:39:ab:c5:6a:bc:49:1e:2d:1c:f1:4d:b6:22:46:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a68af51f23d30901b07c97754b28e92db5435e
        Validity
            Not Before: Nov 20 14:54:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ce57d280829349dd01db9cc82e8ab6c8a13ef472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:ce:d3:77:7d:a9:73:37:91:6b:67:f9:16:
                    15:3e:57:2e:ca:a8:54:2d:81:d0:53:88:62:dd:9c:
                    82:3d:56:bb:96:6a:6b:6d:23:c2:42:75:f1:2e:51:
                    b9:c2:af:a0:2e:95:bc:e5:d3:2d:27:02:ee:5d:a7:
                    c8:10:43:0b:c4:eb:27:52:65:35:7f:9b:c7:78:9e:
                    44:f5:5d:b6:4b:43:3c:02:2b:19:65:5d:66:29:35:
                    d8:f1:55:84:82:2f:c1:b1:b4:bb:cc:86:0f:2c:a8:
                    7e:0d:ca:03:ee:04:44:d4:c7:56:1b:bc:06:80:e7:
                    a6:7a:7e:f3:a8:ad:c2:d3:0c:06:ed:46:5e:e0:94:
                    3c:ec:23:35:b9:18:90:9e:15:aa:5d:b9:c1:3a:a1:
                    c5:00:e1:ae:ae:3b:9c:9b:29:ca:19:7f:00:e9:d2:
                    e3:49:4d:38:72:6e:92:77:5c:6e:be:c3:ac:51:6a:
                    90:0e:4f:17:50:c3:5a:b1:81:dd:8f:d9:6b:db:17:
                    ea:47:67:88:c8:99:4f:7d:2f:59:90:87:2d:0e:41:
                    41:69:1d:33:e1:7d:a9:f1:80:a0:1c:b9:62:67:b0:
                    db:6e:f3:6e:50:57:75:3e:aa:72:c3:52:3a:e3:6e:
                    9e:d5:a2:96:53:bd:28:5b:1e:7f:0e:f2:4d:a2:08:
                    d6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:57:D2:80:82:93:49:DD:01:DB:9C:C8:2E:8A:B6:C8:A1:3E:F4:72
            X509v3 Authority Key Identifier:
                keyid:58:A6:8A:F5:1F:23:D3:09:01:B0:7C:97:75:4B:28:E9:2D:B5:43:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaK9R8j0wkBsHyXdUso6S21Q14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/zlfSgIKTSd0B25zILoq2yKE-9HI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8a547c-9a86-42f5-ac3d-d2365b1f2561/1/WKaK9R8j0wkBsHyXdUso6S21Q14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.33.0/24
                IPv6:
                  2a10:d440:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:80:59:df:1c:31:c1:7c:36:f6:23:8d:4c:07:56:6b:96:69:
         df:3b:8b:d3:61:0e:83:bc:ec:1f:9f:9b:fd:6e:27:eb:aa:e9:
         8d:a0:05:bf:7d:84:ae:c7:b2:8b:5e:2d:66:28:6f:76:56:7f:
         0e:e6:f0:4a:29:40:44:7d:18:8a:64:13:6e:b6:65:fb:cf:9e:
         22:29:a9:4a:d8:f9:d8:e9:be:18:3e:a3:43:e4:9b:fc:1e:67:
         2f:ac:fc:82:53:fb:d4:3f:0c:ca:67:0e:26:73:8c:69:8a:6c:
         f8:ab:46:a3:a2:4a:38:5e:a3:0e:8e:83:d5:bf:8d:e9:ee:d3:
         de:d5:7c:f9:4a:0f:39:0a:60:d9:ec:90:75:8c:0d:87:c6:e7:
         08:de:51:bc:36:ba:db:a0:92:71:7d:8b:e1:5b:06:91:67:56:
         ca:b1:69:f7:5f:bb:02:4e:f1:89:76:4d:7d:96:49:91:0b:44:
         17:cd:96:22:e0:f6:60:07:a3:84:b8:60:29:3d:fe:39:ab:7d:
         12:32:b4:95:5a:69:4a:ad:d8:1d:56:36:f6:c3:a1:11:0f:39:
         94:fe:ec:bd:16:5b:cf:e1:b1:c1:17:25:60:1c:83:89:d9:fe:
         fb:d5:37:17:fa:fe:d9:99:35:a2:23:69:7a:87:94:48:28:e7:
         bb:ef:2e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----