Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/nWEpQ9tMu3IYrjyqd3HtqLvWU-A.roa
File:                     nWEpQ9tMu3IYrjyqd3HtqLvWU-A.roa (raw, json)
Hash identifier:          wwS9+KsTKir/8OnMx32iVNp93DFZwQvKtSaLqsEGJXw=
Subject key identifier:   9D:61:29:43:DB:4C:BB:72:18:AE:3C:AA:77:71:ED:A8:BB:D6:53:E0
Certificate issuer:       /CN=07e444d42853df4a8be332908ee18dcdcf3b7109
Certificate serial:       0186B6D16155437F107073743EBB9AA7B4FF
Authority key identifier: 07:E4:44:D4:28:53:DF:4A:8B:E3:32:90:8E:E1:8D:CD:CF:3B:71:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-RE1ChT30qL4zKQjuGNzc87cQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/nWEpQ9tMu3IYrjyqd3HtqLvWU-A.roa
Signing time:             Mon 06 Mar 2023 12:07:00 +0000
ROA not before:           Mon 06 Mar 2023 12:07:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206446
IP address blocks:        194.62.42.0/24 maxlen: 24
                          2a11:7e05::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b6:d1:61:55:43:7f:10:70:73:74:3e:bb:9a:a7:b4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e444d42853df4a8be332908ee18dcdcf3b7109
        Validity
            Not Before: Mar  6 12:07:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9d612943db4cbb7218ae3caa7771eda8bbd653e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:59:ab:98:a2:bd:80:be:b1:f4:cc:5c:0e:
                    b7:5e:71:b9:f2:73:c6:57:a8:f6:9c:b6:a9:e4:33:
                    59:fe:16:03:a5:be:4a:0c:fc:56:cd:ea:5a:fb:1f:
                    7f:f5:59:f5:38:ee:6b:8a:82:52:eb:f0:a7:64:42:
                    be:58:ea:dc:ac:85:ac:c0:f2:3c:b0:91:ac:5e:ed:
                    c0:43:ae:1c:86:40:9c:b2:72:b4:1f:44:1a:17:24:
                    7e:d6:ca:3c:5a:dd:59:ba:2a:e5:c8:9b:17:2c:72:
                    36:43:a7:bc:71:99:5d:d5:c9:a4:5a:7e:36:86:69:
                    22:6a:3f:1e:7c:8f:7e:4f:bf:07:3e:eb:9f:25:84:
                    e7:65:04:0e:bd:0c:66:86:15:a1:4b:39:fa:ea:2c:
                    64:43:68:ed:a5:8c:af:fc:1f:d9:3f:7f:cd:8e:6d:
                    6a:38:8d:a9:6d:96:87:50:e5:cd:4e:ac:44:dd:50:
                    20:f3:8c:07:89:dd:6f:e1:9a:39:af:a1:36:0f:dc:
                    1e:e2:15:f0:36:5f:21:49:ae:0d:01:5d:90:59:0c:
                    b6:9c:17:1b:da:74:d8:71:44:63:62:c9:f9:b7:63:
                    0a:48:6e:57:ce:a3:c9:51:e1:e0:6b:01:77:bd:6c:
                    2d:24:1a:02:ab:2e:05:5e:9b:e5:9e:18:21:06:7e:
                    4a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:61:29:43:DB:4C:BB:72:18:AE:3C:AA:77:71:ED:A8:BB:D6:53:E0
            X509v3 Authority Key Identifier:
                keyid:07:E4:44:D4:28:53:DF:4A:8B:E3:32:90:8E:E1:8D:CD:CF:3B:71:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-RE1ChT30qL4zKQjuGNzc87cQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/nWEpQ9tMu3IYrjyqd3HtqLvWU-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/B-RE1ChT30qL4zKQjuGNzc87cQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.42.0/24
                IPv6:
                  2a11:7e05::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:e6:36:dc:34:f7:b9:07:11:ab:ab:bf:2c:77:03:3d:83:dd:
         0b:32:98:25:6d:77:dd:e0:dc:31:c8:e2:61:42:80:f5:76:07:
         a2:c6:af:b3:0b:a6:8c:54:cd:b1:39:1c:47:d9:10:9b:d0:2c:
         8d:1c:98:ba:6b:e1:2e:81:71:33:af:f3:3c:6a:bf:2e:6b:8b:
         79:9a:02:51:92:d8:e2:5b:90:bb:79:dd:dd:c2:e9:07:f2:67:
         6e:8e:84:58:cf:64:ac:90:7f:d5:89:6a:63:9f:67:17:19:b2:
         54:e9:eb:36:64:02:98:6d:db:8f:89:7b:0d:b9:92:ca:66:f7:
         3c:cb:c3:dd:4b:68:26:a2:78:a3:15:96:37:33:6b:03:0c:e0:
         d0:89:75:6d:87:dc:9e:a8:a4:3a:27:93:70:51:dc:5d:48:a5:
         f5:e2:34:aa:00:55:ef:49:7d:d4:62:99:e2:2a:9e:fd:b8:d5:
         7c:21:31:f0:08:ff:c1:12:ef:09:4b:7e:e1:0f:a8:0b:46:95:
         7a:f2:b3:34:e2:9f:f4:2e:42:55:8f:b1:12:b0:e3:c6:74:0c:
         a8:d0:0b:49:d7:a2:c8:2d:04:43:68:48:e3:e2:c5:e5:76:b6:
         ca:46:e1:16:01:8a:98:15:17:30:fd:55:b1:01:9c:fd:ed:ad:
         03:7c:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----