Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/te5bNKnsPKJsJIOpjdpdUzfmYCc.roa
File:                     te5bNKnsPKJsJIOpjdpdUzfmYCc.roa (raw, json)
Hash identifier:          y/jFgLlSl9YaZ52iSmxKyOnfw/BFISocjiKcO8H9YD4=
Subject key identifier:   B5:EE:5B:34:A9:EC:3C:A2:6C:24:83:A9:8D:DA:5D:53:37:E6:60:27
Certificate issuer:       /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial:       018CC26D2DEB24110EC1182CDC7167EE05C6
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/te5bNKnsPKJsJIOpjdpdUzfmYCc.roa
Signing time:             Mon 01 Jan 2024 00:29:43 +0000
ROA not before:           Mon 01 Jan 2024 00:29:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213113
IP address blocks:        93.177.80.0/24 maxlen: 24
                          2a0a:d981::/32 maxlen: 32
                          2a0a:d980::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:2d:eb:24:11:0e:c1:18:2c:dc:71:67:ee:05:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
        Validity
            Not Before: Jan  1 00:29:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b5ee5b34a9ec3ca26c2483a98dda5d5337e66027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:25:06:53:ff:49:0c:0b:32:d1:f4:ce:fa:b8:
                    fc:70:bd:b6:a0:c6:d0:86:eb:ff:c6:e7:2f:da:60:
                    ee:e0:04:56:f6:62:d0:26:00:f1:31:98:e1:7d:86:
                    82:43:0b:16:dc:73:60:fb:fa:01:62:23:ac:6a:56:
                    f0:94:f5:40:81:06:55:8d:c5:88:e1:72:1f:12:ee:
                    8d:52:1b:d4:66:1b:fc:b2:b3:89:ac:54:bd:55:d4:
                    83:77:af:49:b9:b7:e2:7f:74:19:3f:b9:94:6b:07:
                    48:e5:20:c6:c6:51:e4:52:22:15:60:b8:42:82:7b:
                    4d:cb:3d:1f:6a:cc:02:2a:f9:4d:39:36:01:17:9c:
                    93:03:b3:67:fc:80:1b:cf:56:35:1e:a6:22:62:92:
                    1a:43:a5:dd:7e:69:1f:3f:0b:19:ac:c1:e0:2e:5f:
                    d9:4c:d1:e1:e0:f3:a2:71:e3:5f:d4:10:c7:b2:12:
                    56:db:09:a6:e7:93:5f:74:97:02:1d:c5:e7:22:7c:
                    0e:7b:da:0d:2b:73:92:f2:ba:0b:15:50:90:05:92:
                    d7:e3:62:77:30:77:18:1d:12:52:67:d9:aa:34:90:
                    70:a0:e9:6d:ee:fe:19:73:f3:56:ba:a0:d4:43:81:
                    14:3d:37:77:0c:b6:45:3b:2a:ed:85:ae:f9:d6:12:
                    63:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EE:5B:34:A9:EC:3C:A2:6C:24:83:A9:8D:DA:5D:53:37:E6:60:27
            X509v3 Authority Key Identifier:
                keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/te5bNKnsPKJsJIOpjdpdUzfmYCc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.80.0/24
                IPv6:
                  2a0a:d980::/31

    Signature Algorithm: sha256WithRSAEncryption
         54:d2:33:42:f4:2c:93:81:55:f9:2f:13:9a:bd:55:a3:79:fc:
         8c:3b:53:16:d9:67:b7:58:dd:86:d1:c4:95:f2:26:eb:f2:1d:
         fd:14:10:de:2f:42:26:fa:16:16:f1:47:67:99:d0:1e:ab:6a:
         65:53:64:f0:45:77:e5:4f:19:ee:4c:1e:38:b2:9c:03:ce:a7:
         2e:e3:cd:b0:51:12:fe:8f:f3:a9:fb:84:86:9f:73:c5:99:10:
         24:33:b9:31:a6:7a:b9:f0:ee:a2:9f:fd:4e:83:84:d8:0f:23:
         45:6b:17:a9:b5:2f:73:a8:51:8d:f7:5c:49:e6:69:36:1f:17:
         5d:bc:15:71:3e:a2:ff:32:81:52:73:f5:aa:f8:9b:be:b1:45:
         3f:16:42:d5:d6:46:1f:e9:45:0a:86:c4:53:8a:9c:26:2c:f9:
         85:1a:2e:b9:15:18:a4:61:48:53:b0:30:17:d7:8c:cb:8e:50:
         43:89:52:7f:17:21:4b:04:3c:8d:71:64:9b:1d:43:d3:c6:97:
         34:a5:9f:6e:c3:d6:0f:85:4d:69:4f:8a:19:a4:99:8f:9a:86:
         c5:fe:a5:f5:28:ba:13:66:68:5f:a5:46:b0:42:9e:63:cc:75:
         c5:47:e6:7e:e8:fd:a2:7f:4b:dc:fb:6e:58:53:42:26:bb:d4:
         7b:bd:83:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----