Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/zgXChFab3CAW1cEIvlaaHwBihDQ.roa
File:                     zgXChFab3CAW1cEIvlaaHwBihDQ.roa (raw, json)
Hash identifier:          KIPNLp3NHIAV1bWGC3MaoaY8HHw3uTlNTX/DpY4nEoA=
Subject key identifier:   CE:05:C2:84:56:9B:DC:20:16:D5:C1:08:BE:56:9A:1F:00:62:84:34
Certificate issuer:       /CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
Certificate serial:       0194206870DAC196B14779A2E41C0FB7B281
Authority key identifier: E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/zgXChFab3CAW1cEIvlaaHwBihDQ.roa
Signing time:             Wed 01 Jan 2025 05:48:23 +0000
ROA not before:           Wed 01 Jan 2025 05:48:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     52092
IP address blocks:        91.227.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:70:da:c1:96:b1:47:79:a2:e4:1c:0f:b7:b2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
        Validity
            Not Before: Jan  1 05:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ce05c284569bdc2016d5c108be569a1f00628434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:45:63:88:3d:25:4e:6e:8a:82:a5:5e:64:8d:
                    ea:23:05:16:24:8a:e5:58:cd:d0:61:3b:e6:13:cc:
                    91:e5:8a:e3:65:28:9b:e7:1e:40:af:3c:75:b4:be:
                    d2:07:d0:29:d9:35:42:22:d2:f6:4e:f2:a4:82:31:
                    4b:da:9a:51:bd:35:46:b8:5b:4a:b5:b3:e2:6e:92:
                    79:03:e2:b4:79:f6:a6:28:39:16:6f:21:72:fa:e2:
                    cc:73:9c:53:86:be:32:d5:00:9a:02:93:ca:9b:17:
                    39:34:f2:b0:22:90:81:b2:bb:51:28:1e:da:b4:ea:
                    dd:8f:86:13:78:80:9e:f4:83:d2:16:55:3e:29:c5:
                    e9:77:1a:65:f0:fe:4f:49:53:c7:e9:35:a9:95:39:
                    f6:70:c5:a3:ad:b5:93:d4:c1:5b:b2:a8:db:4e:5a:
                    44:0b:e3:8c:91:af:b6:01:a6:51:69:39:93:20:ae:
                    f6:81:16:e4:2c:a4:2b:f4:d5:0a:22:50:2d:57:8d:
                    f5:61:77:5e:a7:62:d9:98:fe:86:20:97:6a:55:95:
                    c3:1d:ad:d4:9d:42:04:d5:17:ed:84:13:d7:99:6d:
                    ca:86:10:37:22:5c:ca:c4:73:72:e1:02:eb:36:a1:
                    83:16:24:22:96:7a:21:83:c6:c5:78:17:35:17:2f:
                    08:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:05:C2:84:56:9B:DC:20:16:D5:C1:08:BE:56:9A:1F:00:62:84:34
            X509v3 Authority Key Identifier:
                keyid:E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/zgXChFab3CAW1cEIvlaaHwBihDQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:50:71:dd:ef:51:39:e3:c6:58:79:1f:50:1f:37:c0:ab:50:
         fd:c4:8d:ca:a5:ba:84:cb:73:20:46:55:dd:36:21:e2:47:64:
         73:74:58:42:4f:bd:7e:49:63:46:10:17:6f:6c:01:88:ff:bb:
         d3:18:31:d9:df:3f:d7:38:d0:b6:42:8e:16:ed:9c:85:3f:2c:
         a0:89:35:2a:4d:7f:72:1a:fb:72:e6:a0:3f:b1:96:d2:90:ae:
         33:1f:9b:df:cf:e4:15:c5:77:cf:fc:34:c0:ea:d3:c2:a9:55:
         9b:c7:a2:d3:65:c6:a1:c6:50:d3:bd:44:e0:ef:c3:cf:6a:3c:
         5c:0c:91:aa:59:ae:99:09:ae:8e:8f:b7:19:fc:1a:81:37:9b:
         da:f3:5c:91:43:02:de:3a:f6:d2:6e:5e:10:a2:94:e1:9a:38:
         65:fe:5f:3f:79:cb:75:cb:12:f5:93:6b:ae:b3:d9:95:07:d5:
         91:d1:02:cb:24:90:18:d4:39:b3:81:37:d7:d2:86:dc:05:45:
         d2:20:c5:8a:7f:d7:4e:9d:34:55:d9:15:04:d8:d6:d6:c5:ac:
         dc:59:41:df:bc:8f:e9:04:b7:fe:e0:52:5f:e6:bc:7d:73:c2:
         9e:3b:d3:6f:0a:ff:c5:ce:1b:55:90:07:07:4a:28:57:f8:90:
         15:2e:f0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----