Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/MnEhxi_woQM3cXv5W6rDC8mvyKY.roa
File:                     MnEhxi_woQM3cXv5W6rDC8mvyKY.roa (raw, json)
Hash identifier:          kYcuDCyVLUhxBSbVQtzSrwd5iX/KUoxvsuaVTI7bR60=
Subject key identifier:   32:71:21:C6:2F:F0:A1:03:37:71:7B:F9:5B:AA:C3:0B:C9:AF:C8:A6
Certificate issuer:       /CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Certificate serial:       019423D70BD9AF6A2BF8AE8A2B08EA4602AA
Authority key identifier: C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/MnEhxi_woQM3cXv5W6rDC8mvyKY.roa
Signing time:             Wed 01 Jan 2025 21:48:03 +0000
ROA not before:           Wed 01 Jan 2025 21:48:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8788
IP address blocks:        91.205.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:0b:d9:af:6a:2b:f8:ae:8a:2b:08:ea:46:02:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
        Validity
            Not Before: Jan  1 21:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=327121c62ff0a10337717bf95baac30bc9afc8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ac:72:1b:bd:04:a4:78:11:02:8c:a4:29:b7:
                    8f:bc:62:34:8d:c7:a2:1e:26:14:4d:14:c1:a6:70:
                    a9:5a:4d:f9:ee:25:49:37:9e:5f:fa:c9:0e:fd:fa:
                    f6:14:e0:45:bb:d5:9a:b6:c8:b1:35:0d:66:6d:2c:
                    6a:3d:ee:27:c2:65:19:49:46:11:ea:00:b2:ba:3e:
                    ec:c7:24:96:52:f1:93:fd:a8:33:a8:e2:be:ca:74:
                    2c:f2:c2:b4:cd:f4:9a:83:c2:05:47:dc:a2:07:6d:
                    49:b3:04:de:48:1a:3d:c2:0e:80:c0:6e:d2:b5:e9:
                    52:85:13:e6:d1:ad:0d:b7:f1:8a:10:fc:16:87:ee:
                    05:15:68:45:d8:69:ba:15:d5:01:82:4f:7f:73:20:
                    65:92:68:d9:ad:2d:42:75:98:06:66:cc:65:45:53:
                    60:cf:e2:b8:1a:c4:ff:8c:fc:85:3c:92:95:0b:e9:
                    29:d8:d1:3e:57:07:5a:d0:98:f7:8c:11:88:40:32:
                    b5:ec:3c:e5:e5:10:f5:bc:6a:98:06:c4:56:41:a3:
                    30:68:f7:01:03:27:3e:ea:c9:3a:e5:0e:78:51:dc:
                    ec:23:80:1d:d7:d0:cd:f3:0d:c0:da:73:db:15:d1:
                    0d:b2:ac:89:02:22:59:de:b8:08:8a:7c:38:c0:36:
                    56:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:71:21:C6:2F:F0:A1:03:37:71:7B:F9:5B:AA:C3:0B:C9:AF:C8:A6
            X509v3 Authority Key Identifier:
                keyid:C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/MnEhxi_woQM3cXv5W6rDC8mvyKY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:ca:c8:f8:76:77:a5:23:fb:b3:15:8b:ba:2e:d5:56:e3:c1:
         2a:20:d8:35:3d:9e:d5:6a:a5:f8:9d:3b:93:38:01:ff:26:96:
         9d:34:ec:e8:e4:08:99:3f:21:a5:d0:db:f4:15:ed:a0:7a:80:
         88:77:1b:9f:86:69:f8:21:00:5a:60:90:24:da:4f:ff:8c:a5:
         6a:f3:d1:97:f7:d4:3d:d4:34:f4:ca:c6:3a:2f:91:cb:0f:86:
         32:e9:23:c1:8a:a7:c3:1f:c4:2f:ae:fb:2d:d3:85:15:f7:43:
         70:4c:a4:4c:ea:23:0b:d6:af:ea:ae:5a:26:26:93:8d:1d:0e:
         05:e4:3e:f8:c7:ad:54:9e:77:f3:24:bf:9d:91:81:0d:82:7c:
         6d:ee:34:a0:63:8a:ac:d7:d9:dd:68:37:8a:60:4a:ed:a1:f6:
         84:59:b1:ca:28:11:50:8a:31:8f:ab:b8:36:5d:a4:f5:d6:84:
         18:37:19:79:4d:c4:ee:c2:cd:25:1f:d8:99:fa:0c:ef:e6:ad:
         c9:d6:47:62:e0:14:c3:7b:42:4c:aa:12:1b:2b:0b:14:6d:a0:
         f2:ae:eb:d2:e1:d9:17:ba:b2:79:46:41:4b:a2:4c:f6:12:1f:
         59:94:da:5a:68:3f:df:ff:d7:80:e5:2e:82:72:39:76:ef:cd:
         0f:3f:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----