Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4e8e3d-6593-45a7-a3f5-86af3e3c341d/1/U4CMtgATzuuP-ifvubGFlunMwAY.roa
File:                     U4CMtgATzuuP-ifvubGFlunMwAY.roa (raw, json)
Hash identifier:          Iy/6YV/FdLTpfxLAn4JSdIBB+FpNvdryxJpYmkTy88g=
Subject key identifier:   53:80:8C:B6:00:13:CE:EB:8F:FA:27:EF:B9:B1:85:96:E9:CC:C0:06
Certificate issuer:       /CN=21a1d1ba22e0f9985f4b96e0e81325d538116737
Certificate serial:       018CCA29E124937BF1D8AF947CEBC59C2663
Authority key identifier: 21:A1:D1:BA:22:E0:F9:98:5F:4B:96:E0:E8:13:25:D5:38:11:67:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IaHRuiLg-ZhfS5bg6BMl1TgRZzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/4e8e3d-6593-45a7-a3f5-86af3e3c341d/1/U4CMtgATzuuP-ifvubGFlunMwAY.roa
Signing time:             Tue 02 Jan 2024 12:33:11 +0000
ROA not before:           Tue 02 Jan 2024 12:33:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62359
IP address blocks:        91.242.173.0/24 maxlen: 24
                          2001:67c:6d8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:e1:24:93:7b:f1:d8:af:94:7c:eb:c5:9c:26:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a1d1ba22e0f9985f4b96e0e81325d538116737
        Validity
            Not Before: Jan  2 12:33:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=53808cb60013ceeb8ffa27efb9b18596e9ccc006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:d8:ae:56:95:50:18:15:ec:88:ee:a7:01:
                    95:53:23:8f:5a:65:b9:f8:8e:59:fa:38:57:c2:12:
                    fe:95:46:e7:05:ed:46:c1:40:ad:f9:02:c7:af:2e:
                    3a:1b:b7:be:8a:99:9b:58:15:94:0d:a3:8e:2b:5e:
                    c1:1f:54:51:8d:29:c2:33:a5:c9:5a:0f:22:33:0d:
                    10:7c:b7:7e:14:59:c0:28:fe:57:f4:7f:fa:3e:1a:
                    29:7b:b6:9a:7b:49:fa:ce:de:7e:4c:a7:c9:b1:80:
                    60:1a:9b:63:1d:73:ba:f7:9d:be:1a:98:0c:7e:d4:
                    2d:22:62:01:6a:64:10:cb:a3:8d:c5:73:1f:1a:a2:
                    49:fa:b6:de:bd:10:3b:9a:b8:57:ea:ae:5a:3b:9c:
                    4e:f9:d6:9d:a0:17:0c:6d:18:7d:07:36:c1:d7:d3:
                    35:da:3d:75:2e:10:0e:d6:cb:09:94:d8:a0:1f:d5:
                    f7:e0:99:f9:8d:a6:ef:51:16:52:02:b6:ce:09:d8:
                    04:7e:ab:39:fa:a9:5b:f2:03:0d:72:fa:12:82:9a:
                    28:47:57:58:d6:84:04:14:6a:5a:bc:b1:b7:15:f4:
                    cd:27:1c:b3:eb:b2:40:11:14:29:6a:5e:9b:34:d7:
                    3c:00:5a:67:31:7c:6d:07:c9:08:6b:5f:d9:e2:be:
                    29:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:80:8C:B6:00:13:CE:EB:8F:FA:27:EF:B9:B1:85:96:E9:CC:C0:06
            X509v3 Authority Key Identifier:
                keyid:21:A1:D1:BA:22:E0:F9:98:5F:4B:96:E0:E8:13:25:D5:38:11:67:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaHRuiLg-ZhfS5bg6BMl1TgRZzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4e8e3d-6593-45a7-a3f5-86af3e3c341d/1/U4CMtgATzuuP-ifvubGFlunMwAY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4e8e3d-6593-45a7-a3f5-86af3e3c341d/1/IaHRuiLg-ZhfS5bg6BMl1TgRZzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.173.0/24
                IPv6:
                  2001:67c:6d8::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:64:84:c7:3a:48:eb:b0:1c:75:75:22:08:bd:55:f9:41:
         56:6a:48:a3:f1:90:65:2a:2a:88:02:eb:10:73:1a:de:08:02:
         b6:8a:c7:29:b0:e5:46:93:3d:07:ab:32:cd:9e:8d:9a:05:9e:
         48:10:6e:41:1a:55:52:02:2d:9c:c9:c2:26:0b:30:4e:c2:c0:
         df:3b:81:c6:2f:03:ed:a9:b7:52:98:4c:7b:ab:d6:af:65:25:
         09:fb:ea:34:1c:63:92:9d:1d:b0:ae:b3:d8:ab:6f:d6:81:10:
         3d:2a:07:6d:ea:0d:34:15:5c:05:5d:46:01:df:37:07:57:8b:
         53:fa:93:3a:ee:e0:2b:0d:90:d7:46:57:86:72:11:a4:bc:d9:
         d1:f8:86:88:15:3d:66:2b:f6:73:89:62:cf:d2:85:76:0e:42:
         f5:6f:99:69:f9:53:28:02:f6:3b:cd:09:91:58:8b:66:a6:5f:
         ef:f6:ee:c0:3a:ca:8f:26:c1:08:be:f5:0d:02:89:91:ff:fa:
         d3:81:03:30:aa:15:2b:4d:fb:88:9c:0b:08:b3:24:6a:34:3d:
         bd:60:23:ec:e8:0e:06:c2:67:fb:3d:0f:4f:60:16:a8:3e:fc:
         a3:f0:d2:38:84:65:c5:ee:3f:f2:cf:21:6c:c2:0d:23:a3:3e:
         ff:7f:3d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----