Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/fBH0IYJayUM82fLAtCFKL3waLMo.roa
File:                     fBH0IYJayUM82fLAtCFKL3waLMo.roa (raw, json)
Hash identifier:          aENlkeS/IhrQKMHBx/tjK8TdolIAB2oUek9AYMeHgkc=
Subject key identifier:   7C:11:F4:21:82:5A:C9:43:3C:D9:F2:C0:B4:21:4A:2F:7C:1A:2C:CA
Certificate issuer:       /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial:       019425FDA65BCE4F47ADA9A45CEEDDBCF141
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/fBH0IYJayUM82fLAtCFKL3waLMo.roa
Signing time:             Thu 02 Jan 2025 07:49:27 +0000
ROA not before:           Thu 02 Jan 2025 07:49:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     43106
IP address blocks:        91.108.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:a6:5b:ce:4f:47:ad:a9:a4:5c:ee:dd:bc:f1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
        Validity
            Not Before: Jan  2 07:49:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7c11f421825ac9433cd9f2c0b4214a2f7c1a2cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:4d:b1:0b:7e:08:e5:ba:f7:4f:16:5e:cc:
                    23:7e:68:8b:d4:c7:38:72:bc:55:5b:4d:60:01:2e:
                    ca:40:b6:c8:88:be:1a:ee:70:a1:66:8d:b6:fc:b8:
                    75:34:cc:6a:bc:52:3d:73:3c:04:ca:bd:85:f6:30:
                    81:2c:56:38:c8:9a:b3:b6:5a:16:77:c6:e2:ee:78:
                    67:d2:22:29:82:59:5e:6b:a2:09:3b:3d:c3:68:97:
                    a7:2a:11:d3:aa:1c:fb:51:57:b7:38:93:dd:a0:d8:
                    e2:00:0f:1e:be:ab:a6:a4:c1:3c:5a:d8:10:fe:d7:
                    ed:ff:a8:72:fb:ef:f1:9d:97:b3:e0:d8:64:1d:1f:
                    15:aa:dc:7f:72:18:e6:78:1f:1c:88:f9:26:c7:50:
                    6e:9f:39:0b:d2:33:f2:8c:9e:6e:03:c3:bb:40:e7:
                    a5:94:9b:4a:16:91:6c:0e:55:68:8c:2e:fa:a9:5c:
                    c4:55:d9:97:69:ad:56:27:dc:8f:be:31:a3:da:66:
                    6e:c1:71:fa:3f:75:64:f4:8a:97:1e:06:34:76:8a:
                    6f:87:05:2b:a2:30:5d:cb:27:37:7c:3b:da:a1:6a:
                    ca:05:d7:da:f8:13:ea:92:f1:fc:60:d6:95:1d:12:
                    9e:94:a5:89:1c:03:a1:33:ae:16:ab:8d:37:61:06:
                    ae:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:11:F4:21:82:5A:C9:43:3C:D9:F2:C0:B4:21:4A:2F:7C:1A:2C:CA
            X509v3 Authority Key Identifier:
                keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/fBH0IYJayUM82fLAtCFKL3waLMo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.108.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:a7:19:6a:62:8d:43:6c:38:74:bc:c4:9a:a4:c3:a5:b9:c7:
         6e:d0:32:05:a4:95:58:9b:0e:32:25:7e:83:40:a5:c3:07:f7:
         3a:02:b1:80:c5:a3:59:77:eb:fb:11:97:0d:49:9c:c7:a3:a6:
         94:85:cc:ff:cd:e5:e3:9d:fa:e7:cf:48:96:e3:6f:71:29:75:
         a5:a1:ed:29:b1:57:08:3a:cb:ea:e3:ec:05:0d:44:3c:92:8d:
         49:3c:20:bf:59:cf:05:67:62:20:1d:93:2a:a6:b1:61:2f:01:
         ed:6f:14:f9:1f:b8:87:7c:81:21:a3:4f:8f:be:6e:8d:70:d1:
         b4:fe:7d:9f:26:27:f0:ba:e0:91:b1:e7:6d:5e:07:c3:d3:6f:
         af:c5:b5:07:76:3b:86:0a:42:45:8e:8a:ac:c4:45:f3:8b:e6:
         0e:4d:c9:ee:55:df:10:ed:ae:fa:06:55:a7:1c:76:2d:6f:42:
         04:2d:33:17:2e:38:e8:fc:17:d3:3c:88:9e:51:cb:7a:d9:a4:
         4f:e2:ca:38:1e:2e:c7:bd:35:0b:fe:b4:21:fa:11:8f:63:a3:
         50:ce:aa:de:b3:0f:af:4a:6b:a8:40:12:74:8c:89:c8:d1:91:
         64:91:aa:3e:cb:ce:ab:88:53:83:93:4e:52:a0:f7:aa:8a:92:
         97:97:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----