Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/f9PiWU8rCXeHMbCtH21EujHiBBU.roa
File:                     f9PiWU8rCXeHMbCtH21EujHiBBU.roa (raw, json)
Hash identifier:          EeNs1j123XrI0TOVKZnl4Gr9nGScptL0golbvUgbRiI=
Subject key identifier:   7F:D3:E2:59:4F:2B:09:77:87:31:B0:AD:1F:6D:44:BA:31:E2:04:15
Certificate issuer:       /CN=6133ec1a240143dae111bb92d192dabf775d81ec
Certificate serial:       01931B6CB855B6B8D87FB3D5FF09369F933B
Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/f9PiWU8rCXeHMbCtH21EujHiBBU.roa
Signing time:             Mon 11 Nov 2024 13:32:10 +0000
ROA not before:           Mon 11 Nov 2024 13:32:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57225
IP address blocks:        193.150.106.0/24 maxlen: 24
                          2a0a:b400::/31 maxlen: 31

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:1b:6c:b8:55:b6:b8:d8:7f:b3:d5:ff:09:36:9f:93:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec
        Validity
            Not Before: Nov 11 13:32:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7fd3e2594f2b09778731b0ad1f6d44ba31e20415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:2b:bc:70:dc:6e:47:1c:3d:de:cf:89:af:
                    9a:35:fe:11:4b:5d:48:8a:3c:15:9e:47:59:26:91:
                    13:b2:12:ca:74:89:74:2c:ff:39:b6:f9:90:14:58:
                    0b:0c:54:57:e1:a3:ab:73:14:f6:19:30:24:4f:ec:
                    08:13:ec:73:4e:fe:45:a8:44:1d:5a:91:23:46:1c:
                    93:79:6f:51:07:56:86:fb:16:0e:9d:3d:b4:2f:e0:
                    9c:6d:09:f0:f6:66:a0:d8:6c:24:76:2d:4d:d2:a9:
                    9d:7b:0b:46:4a:40:52:4a:30:a6:29:00:e6:f3:c4:
                    57:26:08:1b:3c:bc:bb:be:d8:fa:a8:24:9e:72:fd:
                    93:72:c8:6c:bc:95:85:25:ad:25:dc:76:55:ad:ee:
                    a4:3f:89:53:4f:36:18:09:60:5a:26:b3:0e:9d:76:
                    a0:b1:1e:84:7b:ca:66:06:00:e5:76:ff:2c:fe:04:
                    fe:fc:a6:65:7f:9e:17:5b:59:c6:27:6a:12:40:c1:
                    ca:2d:6e:38:59:a6:01:d3:a0:60:f6:f7:c8:ff:af:
                    63:62:b1:b8:d3:26:a1:2f:7a:35:30:08:6f:fc:34:
                    73:2b:b6:40:89:4d:e1:12:31:2a:0b:89:cb:d2:3a:
                    ae:e6:64:85:bd:6e:91:53:24:19:1b:35:d1:4d:81:
                    bc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D3:E2:59:4F:2B:09:77:87:31:B0:AD:1F:6D:44:BA:31:E2:04:15
            X509v3 Authority Key Identifier:
                keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/f9PiWU8rCXeHMbCtH21EujHiBBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.150.106.0/24
                IPv6:
                  2a0a:b400::/31

    Signature Algorithm: sha256WithRSAEncryption
         70:5f:b9:20:1c:95:e7:86:7b:59:ea:55:cb:36:80:4c:79:7f:
         5c:a3:79:4a:dc:9a:54:14:ec:95:4c:8c:85:60:43:82:d3:3f:
         d3:f6:c1:ff:1d:9a:d5:9f:3a:ab:ec:cc:ab:78:f0:66:11:64:
         23:b3:e9:91:18:9a:db:77:7f:fd:53:4e:d3:8c:e1:5b:ce:ef:
         4b:35:3b:9f:53:b4:ef:91:2d:bd:2f:5a:0d:e3:d0:23:b2:de:
         c3:9c:b4:4c:69:53:10:21:d2:db:bf:36:97:9d:58:9e:33:5b:
         ee:12:75:86:d4:92:28:41:ca:a8:8b:e1:99:66:7e:c7:90:08:
         28:5b:c2:8f:fb:0e:30:ea:5c:c2:f3:78:56:0e:9c:fc:24:17:
         cb:50:1c:cd:01:d3:47:27:a6:57:ae:76:cd:7d:04:4c:b9:2d:
         ed:f5:dc:c8:7a:3d:ff:6c:03:82:70:16:d2:da:2b:4b:b9:ff:
         2a:ae:4c:6f:0b:48:21:9b:ac:f8:dd:31:9e:1d:a1:8d:87:53:
         60:24:b1:99:5e:67:26:95:a5:92:4b:54:d7:ad:16:9a:04:37:
         80:db:b4:96:10:61:14:47:95:8d:d3:b1:75:26:19:a4:d4:c6:
         91:75:a1:86:6e:81:8d:83:13:3a:d7:16:c7:2a:20:f3:61:51:
         5b:4c:93:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----