Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/mRu8LXAWLbKEXd2jMsYaUjfiBt8.roa
File:                     mRu8LXAWLbKEXd2jMsYaUjfiBt8.roa (raw, json)
Hash identifier:          vzwBIo/oD5jUXOcp1R1dGYgiGMreN0kOSDxtNv+MDME=
Subject key identifier:   99:1B:BC:2D:70:16:2D:B2:84:5D:DD:A3:32:C6:1A:52:37:E2:06:DF
Certificate issuer:       /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial:       0183360794A25FC4DFA50CB8933227FE0E14
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/mRu8LXAWLbKEXd2jMsYaUjfiBt8.roa
Signing time:             Tue 13 Sep 2022 08:46:49 +0000
ROA not before:           Tue 13 Sep 2022 08:46:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.246.4.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:36:07:94:a2:5f:c4:df:a5:0c:b8:93:32:27:fe:0e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
        Validity
            Not Before: Sep 13 08:46:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=991bbc2d70162db2845ddda332c61a5237e206df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:b8:f1:17:b7:a7:b9:02:5e:57:d5:d7:85:
                    f9:b5:c9:be:16:05:7d:0b:34:d2:95:a0:0a:df:d9:
                    b7:43:9c:ea:f0:05:aa:65:e5:f7:e5:cc:06:d4:90:
                    5a:b4:96:b2:5d:49:36:f2:26:ed:91:e2:7e:a8:00:
                    13:c6:da:e3:c3:92:b0:6a:bb:19:7f:18:45:cc:fd:
                    33:78:7f:89:76:38:0d:83:d8:e1:ea:7d:e4:eb:37:
                    02:b3:92:b0:89:b3:24:95:1a:24:1d:04:60:8d:55:
                    45:5c:a5:7b:a9:4e:d5:92:e4:3a:fe:7a:fc:3b:8b:
                    1f:e4:7c:aa:da:a1:2c:a8:04:7e:d0:dd:28:a0:c3:
                    81:71:ce:09:fe:6a:38:a2:f2:5b:7b:ed:01:1a:f8:
                    a9:78:2a:65:72:34:20:6d:91:8e:65:b1:81:7d:49:
                    dc:ad:0c:f3:05:f7:d8:50:81:7b:5c:03:68:21:65:
                    cf:fc:9b:94:fa:71:94:53:f6:08:d8:52:8b:a6:07:
                    ab:96:f4:28:68:b4:51:af:a8:c0:e2:7a:98:62:ab:
                    4b:7c:9b:7b:27:68:a6:29:3e:6a:e4:a6:8d:5f:d5:
                    90:ca:7f:37:77:10:f1:0c:9f:c9:b1:df:75:32:a4:
                    0d:ec:ff:19:7f:d3:a3:88:a1:77:54:97:19:61:a9:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1B:BC:2D:70:16:2D:B2:84:5D:DD:A3:32:C6:1A:52:37:E2:06:DF
            X509v3 Authority Key Identifier:
                keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/mRu8LXAWLbKEXd2jMsYaUjfiBt8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:21:9f:c4:8e:b3:fa:08:b5:e5:33:5b:4c:60:9b:a6:86:f9:
         b7:c5:66:b3:2b:48:a0:fe:3a:9f:79:d8:d7:6e:21:bb:c2:e6:
         20:bb:01:36:d5:06:1f:02:71:2e:6f:81:3e:60:c8:91:f4:b5:
         a3:c9:5f:30:07:3b:2b:f4:c2:5a:48:73:da:f2:8c:02:70:45:
         b0:ec:6d:8a:2a:1f:9e:dc:68:6f:76:4a:bd:ce:ce:25:cb:d9:
         4f:26:b5:d3:82:91:24:a7:4a:b9:3d:e7:f1:ee:dc:bc:2d:ac:
         79:8f:18:b2:e4:86:03:71:ab:25:a7:39:ba:a9:0b:bd:37:d8:
         76:19:53:c5:8d:ca:d0:9c:c2:cc:21:0b:5a:bf:76:7f:c6:ff:
         4a:2c:7b:f7:17:62:df:a9:12:34:f7:7d:e6:61:f4:b4:fd:44:
         e2:55:53:f8:31:b5:b2:b0:b1:d5:b4:77:da:5f:1c:08:84:74:
         1c:c3:3e:91:91:78:39:65:f9:2b:9c:6c:e6:a6:5e:f3:98:9a:
         0e:13:05:fa:b1:98:96:9c:40:97:d0:37:6d:32:c9:02:30:bd:
         d9:ea:29:d3:77:03:36:37:82:69:da:a1:6b:7c:e2:89:35:fa:
         64:4b:00:c5:2f:62:3a:1b:9c:84:8d:25:ce:a7:ec:25:f4:e0:
         e5:68:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----