Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/Me61TctcMFdyopOA-TH8vhTo1Ic.roa
File:                     Me61TctcMFdyopOA-TH8vhTo1Ic.roa (raw, json)
Hash identifier:          +m7Rg6WduucEj4qPhfec8CnNDdD8TeO+NDt91eukUiA=
Subject key identifier:   31:EE:B5:4D:CB:5C:30:57:72:A2:93:80:F9:31:FC:BE:14:E8:D4:87
Certificate issuer:       /CN=650c592db1fdfc8b4e6a0e7ba7564686373a6b5f
Certificate serial:       01856D01AE73DF674E30C5256AB3EEE4AB31
Authority key identifier: 65:0C:59:2D:B1:FD:FC:8B:4E:6A:0E:7B:A7:56:46:86:37:3A:6B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQxZLbH9_ItOag57p1ZGhjc6a18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/Me61TctcMFdyopOA-TH8vhTo1Ic.roa
Signing time:             Sun 01 Jan 2023 11:05:04 +0000
ROA not before:           Sun 01 Jan 2023 11:05:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207306
IP address blocks:        91.240.92.0/24 maxlen: 24
                          2a0a:d880::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:01:ae:73:df:67:4e:30:c5:25:6a:b3:ee:e4:ab:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=650c592db1fdfc8b4e6a0e7ba7564686373a6b5f
        Validity
            Not Before: Jan  1 11:05:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=31eeb54dcb5c305772a29380f931fcbe14e8d487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c8:a5:87:06:e9:53:47:da:af:36:8e:ff:2d:
                    19:e7:ea:19:3b:f6:67:02:31:ec:14:43:71:c7:23:
                    92:17:00:4c:bf:fd:6d:92:66:d5:fb:29:d3:51:26:
                    db:fe:2b:de:cb:a5:12:6c:52:f5:1a:3b:4a:19:2f:
                    cf:b2:c0:b4:4b:46:94:d0:12:50:22:6e:ef:d5:1a:
                    da:ed:52:28:f9:ce:d2:c9:0e:22:61:ae:38:65:b9:
                    3a:48:5a:fc:2f:27:0d:b9:1b:2a:bf:62:f4:59:49:
                    4b:53:3e:ab:99:2a:8a:b7:67:58:a6:ad:ec:1c:c5:
                    5c:85:f3:cb:15:69:5a:bc:75:ce:30:61:2f:92:b2:
                    2a:25:f2:0e:1c:9e:06:fc:d4:09:bf:a4:3e:12:b9:
                    94:b5:3d:27:e3:2d:80:61:49:c8:c7:bc:fb:aa:cf:
                    bc:0b:a9:42:98:45:66:15:42:31:14:6c:4f:d5:ef:
                    db:75:1d:61:d8:c3:49:33:6f:07:98:6d:30:63:7a:
                    b8:07:1e:80:40:28:f6:a0:1d:29:04:77:68:14:8a:
                    fa:1f:ec:95:a7:c4:5c:34:1e:7f:73:78:89:61:a9:
                    0e:5a:dd:59:1d:eb:6d:3f:ef:e4:5a:53:06:eb:34:
                    94:f8:1d:22:3f:2f:e6:a7:c0:e8:3d:5a:57:30:f0:
                    5c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EE:B5:4D:CB:5C:30:57:72:A2:93:80:F9:31:FC:BE:14:E8:D4:87
            X509v3 Authority Key Identifier:
                keyid:65:0C:59:2D:B1:FD:FC:8B:4E:6A:0E:7B:A7:56:46:86:37:3A:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQxZLbH9_ItOag57p1ZGhjc6a18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/Me61TctcMFdyopOA-TH8vhTo1Ic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/ZQxZLbH9_ItOag57p1ZGhjc6a18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.92.0/24
                IPv6:
                  2a0a:d880::/44

    Signature Algorithm: sha256WithRSAEncryption
         68:61:a4:5d:d1:37:91:57:e7:8b:a3:d8:e5:53:d6:37:30:f2:
         03:56:c8:72:cb:69:c5:55:a6:4b:54:78:b9:74:76:9d:ad:a5:
         5c:55:ef:7b:f0:18:cc:7f:61:a0:5d:84:f8:c0:3d:6e:f3:a7:
         be:1e:97:e2:97:4f:ee:7c:f3:fd:be:a9:c0:e8:f3:3d:4a:06:
         34:f6:5e:0c:dc:ad:31:5d:64:a4:3d:da:31:41:59:e8:a4:a8:
         5d:dc:09:1c:86:08:c3:8d:07:e2:e2:c8:5b:c6:71:5f:b1:dd:
         ee:ad:3d:5b:f0:6e:e6:0a:e9:56:5e:05:5f:2c:97:01:65:a6:
         ee:31:ba:da:35:6f:71:66:c5:93:04:3b:85:d4:0e:75:7c:78:
         02:ce:fb:bd:d0:2a:36:8a:91:ab:48:32:02:e4:07:6b:a7:ce:
         8f:ad:d0:2e:b1:d6:ed:46:38:e6:6c:5b:30:43:c7:3e:f2:4a:
         19:da:56:db:2d:54:6d:a8:98:7b:bf:c8:78:e2:e3:63:04:4d:
         1a:27:ca:3c:7d:62:fe:5d:1d:1f:ce:24:af:05:d8:7b:19:22:
         f9:ff:5e:c1:e8:5c:71:a5:e1:7f:f8:d6:32:ca:18:5e:4d:84:
         ad:01:84:b8:65:eb:7f:ee:44:7a:42:1f:52:f1:3b:0f:d7:41:
         f7:f1:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----