Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/865974-fcb5-4407-9fde-5d1113692d6f/1/7-QfTvUA86gFII9vKS1vxS6l7Xc.roa
File:                     7-QfTvUA86gFII9vKS1vxS6l7Xc.roa (raw, json)
Hash identifier:          0g95L/7Zvu+KThsS3HaXIGol3Hu5LqC1fS64cQ/BKv4=
Subject key identifier:   EF:E4:1F:4E:F5:00:F3:A8:05:20:8F:6F:29:2D:6F:C5:2E:A5:ED:77
Certificate issuer:       /CN=75eb4ddbac399d6e05e02b46f91864c9bde82605
Certificate serial:       01856C65B391CF6039617D4184BEBCBF39B0
Authority key identifier: 75:EB:4D:DB:AC:39:9D:6E:05:E0:2B:46:F9:18:64:C9:BD:E8:26:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/detN26w5nW4F4CtG-Rhkyb3oJgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/865974-fcb5-4407-9fde-5d1113692d6f/1/7-QfTvUA86gFII9vKS1vxS6l7Xc.roa
Signing time:             Sun 01 Jan 2023 08:14:42 +0000
ROA not before:           Sun 01 Jan 2023 08:14:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51619
IP address blocks:        91.238.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:65:b3:91:cf:60:39:61:7d:41:84:be:bc:bf:39:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75eb4ddbac399d6e05e02b46f91864c9bde82605
        Validity
            Not Before: Jan  1 08:14:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=efe41f4ef500f3a805208f6f292d6fc52ea5ed77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bb:7b:33:db:e3:26:3a:48:6c:f3:93:66:5d:
                    3c:92:e0:8f:e3:e9:d1:a8:ac:66:8b:bb:b6:a9:9a:
                    01:b7:d7:9b:53:0a:62:1f:04:41:cc:de:fb:16:95:
                    72:82:70:88:2d:41:65:ea:e3:50:5c:7b:f2:c4:b7:
                    f1:fb:d4:14:03:d8:3a:6a:9b:aa:20:a7:c3:2c:68:
                    dd:ac:0a:3d:61:9f:06:3d:93:89:0b:63:47:26:2d:
                    38:90:f1:4f:4e:69:6e:94:3e:85:6f:7f:78:01:54:
                    f8:7d:61:2b:8d:7c:18:37:af:1d:af:0b:00:7b:05:
                    6c:4a:34:dc:3f:60:50:0a:65:10:eb:5a:ce:c1:0a:
                    66:8f:e1:02:66:95:ca:cd:2c:91:90:98:f8:eb:49:
                    ab:22:f3:db:65:64:ed:22:0d:29:a4:f7:0b:aa:ef:
                    4a:ae:23:41:ba:25:d9:3d:8d:54:5d:bc:18:54:1e:
                    e8:af:aa:dc:bd:2d:74:9b:54:92:0f:17:3c:92:8b:
                    4f:14:e4:86:4f:07:f9:e1:c1:d4:cf:e5:ab:27:ff:
                    70:a4:f4:f4:13:d0:0a:ed:32:e0:2d:b2:ad:10:a2:
                    4c:8b:84:14:7c:cd:d7:a6:23:2a:32:de:43:9e:0d:
                    50:c1:05:5d:8e:23:e6:c0:c6:a9:3e:2c:d9:b9:14:
                    88:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E4:1F:4E:F5:00:F3:A8:05:20:8F:6F:29:2D:6F:C5:2E:A5:ED:77
            X509v3 Authority Key Identifier:
                keyid:75:EB:4D:DB:AC:39:9D:6E:05:E0:2B:46:F9:18:64:C9:BD:E8:26:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/detN26w5nW4F4CtG-Rhkyb3oJgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/865974-fcb5-4407-9fde-5d1113692d6f/1/7-QfTvUA86gFII9vKS1vxS6l7Xc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/865974-fcb5-4407-9fde-5d1113692d6f/1/detN26w5nW4F4CtG-Rhkyb3oJgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.238.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:3b:42:97:ef:09:8f:ef:8e:5f:bd:8e:d4:91:db:00:f7:30:
         75:89:5a:ac:32:d6:7b:27:ed:9f:d9:13:ed:dd:e5:37:09:76:
         b1:27:da:e1:a5:45:a5:85:38:f2:93:de:47:58:05:b8:66:de:
         5b:dc:d3:af:02:1b:b5:ea:27:58:a6:b6:6f:df:11:26:d8:07:
         1a:f9:fc:9b:aa:c7:15:ed:b3:79:f4:b1:db:d2:68:15:26:48:
         79:be:f4:3a:0e:c7:ec:0b:0f:5a:a3:c1:47:50:74:e4:7d:0c:
         36:19:71:e3:6b:53:02:d3:68:3a:4a:93:70:a7:97:41:21:cf:
         e9:32:aa:74:cc:04:bf:9d:20:4f:b4:f3:e3:82:35:69:c5:bf:
         f2:d8:df:0a:ce:6c:13:d9:cf:98:da:61:dd:1c:4e:04:03:59:
         26:b3:eb:68:18:20:fd:43:88:52:f6:df:59:19:5c:48:7f:eb:
         56:54:2d:47:08:11:30:7f:52:cb:3f:8a:d1:4f:5c:7f:88:f6:
         93:fd:f5:26:ef:46:cc:aa:c5:bd:28:fb:49:0b:07:4f:18:1c:
         c9:6e:73:ea:a6:61:b2:ad:e2:5a:39:73:16:82:55:86:e2:eb:
         90:a4:46:30:7b:ce:db:be:2c:e1:14:de:f5:de:e6:38:57:c4:
         d2:01:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----