Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa
File:                     cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa (raw, json)
Hash identifier:          Q1si7hVwLSegXDVNPXeui2AkeRgS0Epsk3MKoikvRr4=
Subject key identifier:   70:2B:65:54:08:4A:33:1F:CB:F4:C9:9C:29:07:61:19:E5:E0:77:B0
Certificate issuer:       /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial:       0195FA51F4E400C785DCCA258D0ECD569C69
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa
Signing time:             Thu 03 Apr 2025 06:23:49 +0000
ROA not before:           Thu 03 Apr 2025 06:23:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213536
IP address blocks:        93.187.109.0/24 maxlen: 24
                          2a02:4b60::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:fa:51:f4:e4:00:c7:85:dc:ca:25:8d:0e:cd:56:9c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
        Validity
            Not Before: Apr  3 06:23:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=702b6554084a331fcbf4c99c29076119e5e077b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:d2:ad:7b:a3:1a:1d:7f:d8:f2:5c:aa:46:
                    13:2c:5f:9f:10:58:af:ad:23:ff:cd:e4:f5:00:8c:
                    fd:9c:49:d8:b8:a5:a5:9b:c8:b0:39:8e:6d:8e:49:
                    3b:bb:b9:4c:a5:15:d9:7e:33:1d:1a:00:25:b4:ed:
                    5b:3d:ad:b4:80:61:30:44:cd:bf:6f:57:d2:b3:a1:
                    77:59:cb:de:6e:87:ec:b3:27:1a:29:a0:95:51:cd:
                    81:a6:bb:7d:7f:e4:e8:2e:67:ef:8e:d0:b6:46:2e:
                    49:ca:af:dc:cd:2d:88:cf:20:b3:ab:b0:ea:21:db:
                    98:88:9d:38:18:1a:e8:4c:f2:f3:3d:d3:94:1e:83:
                    51:43:3c:cf:bd:41:66:77:7d:67:a7:6c:52:da:5f:
                    3c:c6:35:8f:0a:eb:40:96:7c:77:43:75:25:51:0c:
                    3c:78:e1:c3:94:8c:36:dc:93:ca:db:18:1c:68:d9:
                    db:e4:b0:5c:f6:67:78:22:ae:a8:5b:2c:f5:0a:6f:
                    e3:ec:be:18:53:7e:06:29:51:6a:8e:79:02:80:32:
                    8f:70:4c:df:58:e4:2b:de:ca:64:55:2d:e9:db:cf:
                    57:b1:1e:73:f1:1b:9a:83:f4:5b:1b:cc:d3:42:e6:
                    de:08:f6:72:9c:1c:b5:04:d5:5a:73:d0:d5:c4:f5:
                    ae:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2B:65:54:08:4A:33:1F:CB:F4:C9:9C:29:07:61:19:E5:E0:77:B0
            X509v3 Authority Key Identifier:
                keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.187.109.0/24
                IPv6:
                  2a02:4b60::/64

    Signature Algorithm: sha256WithRSAEncryption
         32:8c:0e:31:13:46:6e:e7:01:a5:bd:47:22:98:de:65:1e:d0:
         ce:50:e6:cf:69:35:dc:ec:ed:eb:f5:5d:9f:d3:ce:80:89:17:
         9b:9b:dc:63:c3:57:29:7d:de:39:94:a4:22:7b:bb:d7:58:ea:
         fb:6e:6e:fa:4e:75:59:7f:47:bd:d4:77:26:79:dd:e7:a7:cc:
         54:26:a4:df:51:8d:2f:34:8e:f3:99:8a:47:46:8a:21:a1:d4:
         01:67:7c:ba:68:a9:b8:6a:bf:69:30:11:c7:92:e0:2a:d3:ff:
         f3:98:fa:40:a4:29:93:f5:b9:d8:35:ac:19:16:04:03:64:80:
         e9:4f:61:8e:07:c7:ee:49:74:e2:8b:45:b9:b9:6e:61:fe:f2:
         8b:2d:70:a6:f8:ce:72:a3:8a:da:99:f2:55:e6:e5:0f:a9:9b:
         ad:90:74:f2:c0:a9:1b:a7:5c:f1:68:dd:71:59:e5:5b:b2:20:
         12:db:8f:fb:64:9a:25:72:f5:95:dd:30:32:86:56:6c:3a:39:
         0c:69:7c:1a:f5:46:f2:48:d2:c4:86:9f:b6:c5:8d:ef:a7:bb:
         4f:c2:01:27:5b:9c:9d:17:2f:ad:af:0b:7d:ab:b7:29:f6:62:
         3c:37:17:70:68:4f:f9:7b:52:d6:75:21:42:95:40:58:65:e3:
         0b:d0:92:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----