Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/2c37b4-627f-4157-9b38-71d4651cc9e3/1/Cmby3anHC3PPJqo6fVv47KSc6vo.roa
File:                     Cmby3anHC3PPJqo6fVv47KSc6vo.roa (raw, json)
Hash identifier:          SmqHt+KE+A8HFi5GkykX9lnuRuF0Y25TEJFw1dC47/Q=
Subject key identifier:   0A:66:F2:DD:A9:C7:0B:73:CF:26:AA:3A:7D:5B:F8:EC:A4:9C:EA:FA
Certificate issuer:       /CN=4456921693e31d6c96f671bea7341d0d58dfffe9
Certificate serial:       01856F66CCCDEEC028D3817B8457070594BF
Authority key identifier: 44:56:92:16:93:E3:1D:6C:96:F6:71:BE:A7:34:1D:0D:58:DF:FF:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFaSFpPjHWyW9nG-pzQdDVjf_-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/2c37b4-627f-4157-9b38-71d4651cc9e3/1/Cmby3anHC3PPJqo6fVv47KSc6vo.roa
Signing time:             Sun 01 Jan 2023 22:14:46 +0000
ROA not before:           Sun 01 Jan 2023 22:14:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51679
IP address blocks:        185.253.53.0/24 maxlen: 24
                          2a10:b740::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:66:cc:cd:ee:c0:28:d3:81:7b:84:57:07:05:94:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4456921693e31d6c96f671bea7341d0d58dfffe9
        Validity
            Not Before: Jan  1 22:14:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0a66f2dda9c70b73cf26aa3a7d5bf8eca49ceafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:55:3a:0e:f1:0e:e5:a2:3c:78:e8:0a:e0:
                    c3:5a:30:96:e0:a4:c2:40:13:20:8f:19:0b:4c:0a:
                    16:f5:4b:da:de:c1:f6:e6:f5:be:fc:13:c9:87:08:
                    be:00:b0:03:5a:73:2f:ea:32:0f:4a:f1:4e:15:55:
                    d5:d3:6a:f4:af:e0:82:e0:b6:00:d1:46:16:46:97:
                    a1:35:a8:4a:fd:d7:3c:29:a8:0b:86:40:bb:0d:bc:
                    19:b8:4a:98:d8:32:d4:e8:c7:bb:33:ae:99:1f:29:
                    91:1a:c4:49:69:bc:d0:d8:dd:0f:1f:59:a6:32:8c:
                    80:24:ad:c6:4b:c0:e2:fb:71:3a:e0:23:02:66:a1:
                    64:ae:41:73:77:b7:52:e5:63:e9:bc:27:ba:43:5e:
                    ed:ad:55:18:51:72:27:8e:fb:7b:ad:73:f3:86:b4:
                    74:32:a7:57:09:69:58:0b:16:ec:69:9e:33:db:dc:
                    7d:7f:4e:a3:bc:df:61:fb:d6:7b:6e:9c:c9:b9:99:
                    ab:72:e2:54:b2:01:c8:82:ea:ed:48:be:60:6e:02:
                    26:10:c9:d4:25:f7:ec:b5:72:3c:c6:73:d5:c0:29:
                    f1:25:9b:b9:f3:25:60:11:02:79:b3:52:1e:82:b0:
                    b1:24:95:7d:1d:b8:a7:a3:c4:20:7b:05:45:54:d4:
                    aa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:66:F2:DD:A9:C7:0B:73:CF:26:AA:3A:7D:5B:F8:EC:A4:9C:EA:FA
            X509v3 Authority Key Identifier:
                keyid:44:56:92:16:93:E3:1D:6C:96:F6:71:BE:A7:34:1D:0D:58:DF:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFaSFpPjHWyW9nG-pzQdDVjf_-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/2c37b4-627f-4157-9b38-71d4651cc9e3/1/Cmby3anHC3PPJqo6fVv47KSc6vo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/2c37b4-627f-4157-9b38-71d4651cc9e3/1/RFaSFpPjHWyW9nG-pzQdDVjf_-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.53.0/24
                IPv6:
                  2a10:b740::/29

    Signature Algorithm: sha256WithRSAEncryption
         0a:b8:37:9a:a4:0d:02:87:1e:08:6d:90:4a:b4:e6:dc:0b:39:
         00:c7:73:f7:2b:52:20:4c:1d:39:f9:0b:ed:2c:0d:81:ef:ed:
         f1:02:25:02:f0:0a:c8:c9:74:a1:cd:60:41:40:38:61:fa:4b:
         21:2d:0f:48:77:49:ae:bf:7e:0f:ab:df:3d:38:ca:2e:5f:c5:
         56:b9:86:23:19:c8:be:4a:72:85:da:25:31:2b:6c:ad:b7:22:
         b8:f6:fa:95:69:23:c7:9f:74:dc:70:eb:01:cb:19:64:e3:1b:
         3d:83:da:d8:4b:9e:e1:3e:7a:35:98:84:53:52:18:61:d5:86:
         8d:ce:1a:57:b3:f8:56:9b:a5:dd:2c:5a:31:83:27:2d:e2:dc:
         59:3b:9a:56:87:ac:8f:e5:b4:64:3a:ce:99:90:8c:14:54:72:
         57:b2:e8:e9:93:92:f0:dd:d4:c7:99:e7:88:ab:0c:4b:98:3d:
         c7:e5:d6:3c:31:03:14:bf:6a:a8:6d:9e:1a:77:20:71:1b:77:
         24:eb:9d:96:fb:82:7a:21:f4:33:31:10:f5:48:91:43:47:e6:
         f4:86:cf:53:2d:c3:d8:fc:1f:4b:6a:9f:2e:7a:9f:c5:56:0e:
         20:7b:5b:3c:a0:d0:29:a1:eb:99:1f:88:64:ab:74:45:00:af:
         c9:3e:38:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----