Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/n9slDOW816oCeV0oI8sGph9zEHY.roa
File:                     n9slDOW816oCeV0oI8sGph9zEHY.roa (raw, json)
Hash identifier:          qD/TRD91aBYWewYzdvChC8Edlu2GICT4uFezEduAc7k=
Subject key identifier:   9F:DB:25:0C:E5:BC:D7:AA:02:79:5D:28:23:CB:06:A6:1F:73:10:76
Certificate issuer:       /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial:       019426D8F5CCF3F985A37FA122A115F5D4B1
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/n9slDOW816oCeV0oI8sGph9zEHY.roa
Signing time:             Thu 02 Jan 2025 11:49:00 +0000
ROA not before:           Thu 02 Jan 2025 11:49:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199216
IP address blocks:        193.56.204.0/22 maxlen: 24
                          2a0c:8f40::/29 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d8:f5:cc:f3:f9:85:a3:7f:a1:22:a1:15:f5:d4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
        Validity
            Not Before: Jan  2 11:49:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9fdb250ce5bcd7aa02795d2823cb06a61f731076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9b:ac:ad:e4:c7:ee:7a:ea:93:21:13:1f:bc:
                    df:71:98:9a:93:b0:fc:45:24:14:09:df:f7:e3:64:
                    be:bf:5a:e2:d5:11:4f:5c:34:10:fe:26:89:2b:bd:
                    a8:87:a4:d8:ac:29:32:f3:68:38:3c:8c:7b:25:53:
                    cb:f2:17:8b:e8:ba:40:24:69:2f:ce:0b:f3:3d:9b:
                    7c:f1:30:a8:86:67:d6:0d:64:27:35:27:85:f1:f4:
                    13:df:f4:d9:88:17:0d:49:b8:02:19:47:b3:1a:f9:
                    4e:ce:ac:6d:38:0d:18:6d:47:bc:c8:f2:91:a0:0a:
                    c4:25:9f:03:23:eb:d5:cd:00:72:51:2a:c8:a6:54:
                    73:ee:19:d2:59:66:a3:b9:ba:ac:98:de:8f:f2:68:
                    08:48:86:0e:44:57:f2:4b:98:b7:1e:63:5b:12:88:
                    e5:35:4f:57:f4:9c:ff:50:71:73:d0:cc:6f:93:de:
                    3e:4a:7d:f2:1a:6d:9d:1e:55:a8:67:63:6a:07:6a:
                    a7:4f:e5:9b:90:92:b8:e7:d5:6c:78:da:30:34:0e:
                    91:e2:f8:76:fd:9e:d0:fa:71:ca:ee:29:4a:24:05:
                    b8:06:0a:78:1e:f1:cb:d3:0c:d8:9b:ed:70:c7:36:
                    73:f9:62:0f:06:d1:df:6c:93:58:33:d1:d1:85:20:
                    ae:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DB:25:0C:E5:BC:D7:AA:02:79:5D:28:23:CB:06:A6:1F:73:10:76
            X509v3 Authority Key Identifier:
                keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/n9slDOW816oCeV0oI8sGph9zEHY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.204.0/22
                IPv6:
                  2a0c:8f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         35:71:97:86:9b:3b:e6:94:19:3d:59:6b:c7:68:0c:d4:45:f4:
         07:dd:f7:3a:31:35:4a:e4:1a:69:37:5d:d1:ee:e8:7a:47:6c:
         11:2d:70:e7:b1:bb:d6:03:8c:84:82:4d:0b:1e:48:a3:fc:17:
         f6:a9:0a:8d:fe:ab:c7:f2:a9:00:c0:a2:4f:29:68:df:8c:41:
         74:c1:94:3e:11:af:d3:4f:e8:f4:b6:0c:50:cf:b6:62:d1:50:
         d4:33:53:f4:a8:20:33:65:d9:67:d8:62:38:d0:3b:9f:39:dd:
         10:f3:b4:77:4f:94:10:b3:ba:ad:48:f4:64:a1:49:ec:ab:9e:
         b0:be:b8:dc:eb:a8:b6:43:e7:0c:d2:6b:5e:01:3e:6c:1c:de:
         11:33:2d:15:8a:7d:0d:a8:8a:96:e6:50:e8:79:31:69:04:fa:
         fe:35:c8:32:66:2f:33:01:66:15:44:ff:58:6c:49:c9:4c:db:
         ea:7c:9b:48:9b:1e:a7:8f:ed:51:bd:1b:46:9a:71:f4:b4:91:
         4d:22:1d:f6:5d:19:0d:54:4c:2d:10:4c:25:76:e2:2c:04:da:
         22:1d:76:a6:b2:0e:49:b1:59:c7:9f:96:c7:d5:b3:4c:e9:fd:
         a7:3c:db:b4:cd:54:4f:5e:0d:d7:ab:73:19:7f:7b:fc:7d:dd:
         34:7b:f4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----