Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/MFzPuYSZg4k8GblUD-Huo_xTuqQ.roa
File:                     MFzPuYSZg4k8GblUD-Huo_xTuqQ.roa (raw, json)
Hash identifier:          svFqZa2Us3YGwJpwhU7oDXm+wL4epb+cAhLXxkGPdA8=
Subject key identifier:   30:5C:CF:B9:84:99:83:89:3C:19:B9:54:0F:E1:EE:A3:FC:53:BA:A4
Certificate issuer:       /CN=913836859c6ce1869340edf1f273709b8094d9d4
Certificate serial:       018CC64B7E21AA0B2D6AF0D43B716E6C63E3
Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/MFzPuYSZg4k8GblUD-Huo_xTuqQ.roa
Signing time:             Mon 01 Jan 2024 18:31:25 +0000
ROA not before:           Mon 01 Jan 2024 18:31:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     200727
IP address blocks:        185.98.68.0/22 maxlen: 22
                          2a00:7bc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:7e:21:aa:0b:2d:6a:f0:d4:3b:71:6e:6c:63:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4
        Validity
            Not Before: Jan  1 18:31:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=305ccfb9849983893c19b9540fe1eea3fc53baa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:c3:12:e7:98:4d:0f:75:e2:5c:ca:32:6f:
                    98:97:5c:e1:61:02:78:59:e5:08:dc:13:7f:65:4c:
                    e9:9c:8f:8e:ea:24:6b:17:aa:9b:06:af:62:b0:8a:
                    39:47:52:97:6a:7e:36:ee:5a:97:0d:3d:f3:e2:ac:
                    c7:00:73:9f:41:ef:eb:a8:36:6e:cb:09:d4:7a:e7:
                    eb:41:5f:6b:58:79:00:2d:ff:c4:21:e7:e9:d6:8a:
                    c9:80:33:cd:1d:22:19:fb:a6:b2:5e:b2:52:98:e3:
                    a3:4a:65:12:8c:99:a3:15:8e:36:9b:8a:68:51:ed:
                    85:7a:14:80:97:55:a1:d4:93:d1:b8:c6:3b:df:44:
                    7a:52:9b:c6:42:cd:45:e1:77:79:78:de:8c:a1:14:
                    9d:4f:29:c8:84:21:fe:e7:7d:64:68:d3:fb:ff:ee:
                    f4:aa:11:e4:67:1b:5e:a4:fe:d2:1c:7f:a2:fd:bf:
                    40:9c:0f:93:c0:e9:70:5c:24:ce:ff:7c:35:78:c9:
                    0e:ed:0c:62:61:45:26:22:7d:55:8d:b2:b8:7c:a2:
                    5d:33:6c:12:d4:9f:e9:14:be:de:4f:7d:09:c3:62:
                    94:0e:e2:00:c5:fb:35:3e:6e:c2:a2:9f:66:88:59:
                    f0:46:4a:b2:76:dd:6d:9a:a7:1a:9e:be:16:fa:ab:
                    e0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5C:CF:B9:84:99:83:89:3C:19:B9:54:0F:E1:EE:A3:FC:53:BA:A4
            X509v3 Authority Key Identifier:
                keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/MFzPuYSZg4k8GblUD-Huo_xTuqQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.98.68.0/22
                IPv6:
                  2a00:7bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:0a:e0:2e:4b:42:8d:38:c8:a1:63:5b:90:9c:ae:08:d6:
         fe:0c:67:75:df:76:c0:b0:25:68:d6:9c:35:df:ee:d3:0d:d1:
         a6:e2:40:6e:e1:b9:b7:e3:5e:f7:ee:36:f4:8d:4a:4c:42:63:
         16:a0:35:ce:c6:0e:eb:60:95:12:29:c7:bc:50:9e:a9:6d:f0:
         e4:7b:c1:5b:b5:b4:cb:d2:a5:38:dc:aa:4b:a6:b3:de:27:f9:
         bf:ba:08:0f:e4:2a:18:ab:10:86:d9:ee:ba:f9:6a:2b:ae:3b:
         28:ad:66:b4:e3:02:3a:2c:72:52:75:ff:14:7e:a3:09:26:5b:
         4e:4a:79:41:66:a1:9e:d4:e6:85:5b:79:de:f3:c1:e6:c7:12:
         40:16:6a:c6:1a:54:40:e3:86:12:79:58:ad:6d:9e:e2:3c:2b:
         8f:56:9b:47:87:be:c6:23:51:64:4c:86:9a:f2:f1:cf:e9:58:
         cc:fc:0d:b9:7c:7c:f1:35:29:7e:dc:53:80:9c:36:12:eb:32:
         21:4c:9b:71:3d:2f:d0:1e:6d:f9:23:f3:24:89:37:b0:b4:48:
         c1:74:9a:a6:52:ae:78:98:3c:c3:f1:ee:de:0a:ff:e2:8a:5c:
         ee:22:10:4d:b5:66:17:32:68:50:4a:3b:46:b9:53:03:dd:47:
         11:63:12:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----