Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/kchIPTEIqMp0vpAjfgQEwz2BSpw.roa
File:                     kchIPTEIqMp0vpAjfgQEwz2BSpw.roa (raw, json)
Hash identifier:          Nd32beBirDyD6e0HPEc2YHkqNEJViSi6nJI2FhIdX3U=
Subject key identifier:   91:C8:48:3D:31:08:A8:CA:74:BE:90:23:7E:04:04:C3:3D:81:4A:9C
Certificate issuer:       /CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Certificate serial:       01941F8C3694B78909DC501C168252E03ABF
Authority key identifier: 8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/kchIPTEIqMp0vpAjfgQEwz2BSpw.roa
Signing time:             Wed 01 Jan 2025 01:47:50 +0000
ROA not before:           Wed 01 Jan 2025 01:47:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56430
IP address blocks:        91.193.53.0/24 maxlen: 24
                          2a12:ec40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:36:94:b7:89:09:dc:50:1c:16:82:52:e0:3a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
        Validity
            Not Before: Jan  1 01:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=91c8483d3108a8ca74be90237e0404c33d814a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:69:3d:6b:9b:03:b9:60:33:0a:a3:36:1d:bd:
                    5d:2f:5e:53:a6:9a:c2:e8:a9:a1:3f:54:ae:60:76:
                    4e:e1:fd:d8:e3:91:12:ef:ff:1f:75:33:3c:a5:fd:
                    35:8d:b3:ed:8d:d5:4f:59:37:84:cf:a9:a5:30:41:
                    05:ee:fe:bd:4b:5c:92:e2:10:f4:92:4a:a2:0e:87:
                    65:85:62:fe:2f:c3:eb:5c:82:15:da:bd:c2:19:42:
                    df:75:09:bd:06:f5:71:86:85:16:46:bf:09:bb:3b:
                    c3:fa:12:26:c2:f4:0f:06:2c:22:17:39:89:5c:9e:
                    83:0a:70:1a:46:b4:51:8a:4b:81:6e:43:a3:65:67:
                    6d:fc:9d:88:29:d6:a7:af:bb:9c:76:f5:17:d3:47:
                    db:b9:92:32:09:5f:f3:5d:af:6b:f5:53:b3:2f:a7:
                    16:15:64:d9:16:9d:4a:89:f9:4d:7e:f8:1e:9b:d5:
                    44:5c:a4:11:8a:28:23:94:d1:57:fb:ba:4a:1c:28:
                    30:40:01:ed:3f:1f:81:15:0d:f5:4a:dd:6a:fe:80:
                    85:3b:37:0e:f1:a0:eb:6f:26:11:e5:64:10:dc:ab:
                    48:74:58:24:48:0a:0c:0f:38:e0:fe:b9:37:22:1e:
                    41:b7:c7:18:c3:61:01:f3:8a:50:c5:13:97:49:41:
                    e0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C8:48:3D:31:08:A8:CA:74:BE:90:23:7E:04:04:C3:3D:81:4A:9C
            X509v3 Authority Key Identifier:
                keyid:8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/kchIPTEIqMp0vpAjfgQEwz2BSpw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.193.53.0/24
                IPv6:
                  2a12:ec40::/29

    Signature Algorithm: sha256WithRSAEncryption
         67:a5:0a:6f:57:e0:51:2c:25:68:04:79:fb:94:9b:50:12:83:
         24:17:b5:00:3f:c6:ba:83:a7:70:44:57:08:b2:93:78:16:51:
         04:9a:b3:f4:ad:9c:a9:aa:e4:a6:6b:1b:c5:4d:4c:91:80:58:
         34:f4:26:16:b6:fd:6a:31:56:60:88:fb:49:ca:ba:e1:87:be:
         69:2d:ce:87:90:9f:43:51:12:db:27:a3:10:63:d3:d9:a7:63:
         87:6a:14:50:8c:02:7c:0d:c3:2a:72:bf:15:98:26:9a:e1:cc:
         70:54:45:71:a8:03:8e:8c:bd:ec:13:aa:19:8a:55:f1:32:07:
         d7:71:4c:ee:1b:5a:50:fd:51:24:80:b7:a6:ca:fe:3a:af:d9:
         43:5f:d8:86:98:6b:a4:4a:4b:c9:77:64:25:32:19:8d:1f:5e:
         ae:87:a0:25:0f:95:58:fc:4f:e4:47:f7:d3:48:1c:17:8f:b7:
         5a:61:8c:89:8d:0b:0f:cf:53:d1:c6:33:8b:6d:d9:e9:83:78:
         23:ea:c3:26:09:ca:9f:af:d7:7a:27:17:d6:85:0e:7a:f3:ab:
         9d:f5:e2:de:0b:c8:93:0d:e2:51:2c:95:d3:69:73:28:2f:4e:
         b9:68:03:54:1e:86:e8:70:07:16:d3:93:fe:d2:6f:6a:cc:13:
         94:9d:90:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----