Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/ojMFdRUWBQRviZ9dWIsOTZWxWuE.roa
File:                     ojMFdRUWBQRviZ9dWIsOTZWxWuE.roa (raw, json)
Hash identifier:          KOCxnxf71j2YSldUHesyhbGVi/99uS6hRNHXL9nBQo8=
Subject key identifier:   A2:33:05:75:15:16:05:04:6F:89:9F:5D:58:8B:0E:4D:95:B1:5A:E1
Certificate issuer:       /CN=78167dd9603b9fb7af501559cb3737d47a2d5437
Certificate serial:       018CC94AA76B55BE4B99C6C1DA7DD714FA65
Authority key identifier: 78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/ojMFdRUWBQRviZ9dWIsOTZWxWuE.roa
Signing time:             Tue 02 Jan 2024 08:29:22 +0000
ROA not before:           Tue 02 Jan 2024 08:29:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60265
IP address blocks:        91.199.126.0/24 maxlen: 24
                          2a01:bf00::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4a:a7:6b:55:be:4b:99:c6:c1:da:7d:d7:14:fa:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78167dd9603b9fb7af501559cb3737d47a2d5437
        Validity
            Not Before: Jan  2 08:29:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a2330575151605046f899f5d588b0e4d95b15ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f3:aa:6d:4f:33:f7:7b:0a:9a:24:9e:72:6d:
                    07:5c:96:8b:3a:46:14:d4:13:cf:96:b1:bc:42:e8:
                    02:44:73:8d:32:79:5d:e9:2d:4d:52:10:93:86:c3:
                    9e:d9:44:9c:68:58:05:77:5b:aa:b1:bc:51:ba:ff:
                    68:01:74:38:9f:e5:c2:da:0b:df:39:98:4d:49:39:
                    1f:62:25:a6:14:d8:73:c8:80:48:c7:ba:9b:ec:ad:
                    65:08:c6:60:73:cf:9e:57:bc:4e:0e:50:02:c6:53:
                    9c:1b:17:a6:ee:be:62:f4:a5:5f:e6:e3:ec:1c:5c:
                    c5:c9:18:a6:0e:c4:08:94:3f:f9:23:4d:c8:20:3f:
                    91:7a:bf:d6:f8:ad:3f:3f:90:eb:32:b2:06:3a:20:
                    68:89:4b:ec:a7:9d:62:b6:f1:2e:9c:b6:8f:75:e8:
                    c9:3f:0a:53:80:d9:e1:d3:47:e3:de:4c:6a:99:a4:
                    54:0f:67:c1:10:f7:d3:00:b2:2a:1c:de:b7:1a:68:
                    f1:9f:30:82:e4:bd:5b:6f:ee:6b:a0:bd:58:8a:77:
                    cf:37:07:53:c2:79:d6:01:f7:f4:79:b9:f7:ca:11:
                    1e:75:f9:5f:9d:b7:e0:71:47:45:7a:46:c9:b9:6b:
                    14:82:89:7e:e3:82:d5:51:ad:70:29:7a:c7:f1:ec:
                    6b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:33:05:75:15:16:05:04:6F:89:9F:5D:58:8B:0E:4D:95:B1:5A:E1
            X509v3 Authority Key Identifier:
                keyid:78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/ojMFdRUWBQRviZ9dWIsOTZWxWuE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.126.0/24
                IPv6:
                  2a01:bf00::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:fe:d1:ad:f5:11:af:92:a8:6b:36:aa:ea:40:74:22:75:64:
         09:a2:3a:c7:5f:eb:c1:f3:89:a4:b4:ba:d8:09:60:71:6e:65:
         db:c3:a0:62:b4:75:2a:12:7c:2f:40:54:eb:80:28:c8:eb:5a:
         02:e7:39:28:ab:e9:d7:ea:a8:a7:50:92:b8:ad:14:e9:18:a9:
         16:b3:55:4b:d6:89:0f:f8:05:6f:27:89:0d:99:bd:ca:d5:f7:
         75:e8:3e:5f:85:7e:30:fd:84:1f:af:31:eb:f5:18:8e:5d:bf:
         36:13:6f:20:99:29:c8:b6:f2:7a:b2:73:b5:ef:72:32:1b:d9:
         ed:80:21:b1:48:ff:1e:fd:90:d6:b0:8e:72:97:14:f5:bd:3d:
         66:a5:89:4c:ed:29:4d:1f:2f:0d:7d:f7:94:79:7c:f8:5a:a8:
         8c:aa:71:26:99:bc:de:60:0a:a6:73:b6:39:e8:7b:50:01:45:
         fc:da:0c:d8:61:20:fe:eb:67:9d:d2:9a:9d:1e:ef:ed:53:39:
         ba:fe:a1:77:ff:1a:43:c0:2e:37:45:87:f5:0c:c3:69:8d:86:
         c2:fc:c0:cf:43:36:e3:87:1b:27:49:ed:0a:eb:a2:aa:ef:9b:
         6d:2d:7b:c3:6a:a7:27:08:f8:a1:3d:e4:17:6e:2f:8c:c9:97:
         c0:10:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----