Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/AspvYduc_Jb9y8GXYBDLcC-_8EE.roa
File:                     AspvYduc_Jb9y8GXYBDLcC-_8EE.roa (raw, json)
Hash identifier:          ensOUkmx91RQ9/R5jlP5oQpNE74zuacX+6PWKXjdOOE=
Subject key identifier:   02:CA:6F:61:DB:9C:FC:96:FD:CB:C1:97:60:10:CB:70:2F:BF:F0:41
Certificate issuer:       /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial:       019421B1D72D7C17C933DDAF8D98D776DE6E
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/AspvYduc_Jb9y8GXYBDLcC-_8EE.roa
Signing time:             Wed 01 Jan 2025 11:48:10 +0000
ROA not before:           Wed 01 Jan 2025 11:48:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39232
IP address blocks:        91.242.0.0/19 maxlen: 19
                          91.242.0.0/20 maxlen: 20
                          91.242.16.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:d7:2d:7c:17:c9:33:dd:af:8d:98:d7:76:de:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
        Validity
            Not Before: Jan  1 11:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=02ca6f61db9cfc96fdcbc1976010cb702fbff041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:60:2c:ba:65:09:b6:34:14:a0:09:d3:bc:93:
                    50:e0:49:85:29:0b:77:ec:6d:13:99:95:58:77:c8:
                    a8:fc:5a:6a:cd:34:36:ee:a8:61:87:d3:ee:40:22:
                    75:80:c7:94:a4:bb:f1:a0:0f:44:1c:08:36:3e:f4:
                    96:05:82:de:75:eb:5c:91:92:6f:69:7d:ab:f4:35:
                    79:09:9c:80:ea:82:f8:4e:1b:d5:2b:37:c0:9a:27:
                    d0:f2:8e:2d:ba:83:58:c1:b1:b2:57:57:f1:88:db:
                    f5:fe:e6:55:18:b1:86:b0:1e:a5:fb:da:25:80:c3:
                    5c:ba:3e:0b:b0:58:f6:d1:91:8a:96:50:15:c1:31:
                    0d:03:76:f4:5e:15:59:91:ad:00:27:2e:90:81:54:
                    b4:3e:30:97:d2:3a:37:29:c1:45:74:98:d6:6f:fc:
                    41:ce:ee:83:04:bc:bb:13:2f:76:02:3e:12:0c:ea:
                    2b:9d:ea:39:63:c2:f9:bc:64:9b:8d:b0:8f:00:8a:
                    28:6b:d1:d5:2d:a2:cb:ea:39:de:d9:22:ee:3a:77:
                    83:f0:13:0c:31:55:c7:fd:ff:2c:9b:a4:4c:61:22:
                    35:bf:9e:ef:6f:40:b8:5d:8e:fd:3d:de:42:e5:f4:
                    dc:6e:b1:6f:8d:b7:f3:cf:8b:4a:fe:98:7b:02:d6:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CA:6F:61:DB:9C:FC:96:FD:CB:C1:97:60:10:CB:70:2F:BF:F0:41
            X509v3 Authority Key Identifier:
                keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/AspvYduc_Jb9y8GXYBDLcC-_8EE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:5e:a7:fc:0d:14:5f:94:e4:d0:59:1d:d5:05:3f:37:08:1e:
         98:28:02:1f:72:97:bd:07:73:ae:27:48:c7:ba:71:70:0f:26:
         c6:77:96:3f:57:87:52:48:5f:51:28:2c:38:98:f0:90:85:fd:
         82:ab:80:84:69:bb:75:30:25:af:af:66:96:d8:f0:22:01:70:
         de:32:41:d3:7c:d4:05:8b:97:91:5b:85:21:d1:ca:59:24:92:
         2a:58:4e:03:e4:84:38:2f:28:2a:78:6e:e7:0b:12:d3:a6:63:
         73:8b:d8:08:9a:ba:7c:6d:bb:37:c7:6e:01:1e:8e:9a:c9:69:
         65:a2:c0:5e:dd:01:cf:58:0f:c9:ce:9b:ad:b4:5d:97:41:fc:
         03:e1:28:3e:48:70:62:2e:d0:ae:4d:6a:3c:85:6b:45:8e:b1:
         bd:c6:dc:28:66:eb:95:08:8f:94:98:d5:62:a6:8d:44:ba:53:
         69:48:78:3b:d2:97:97:c4:5c:b5:7d:37:de:3d:82:c5:7f:c2:
         a2:5f:1a:26:4f:87:e7:ed:99:21:e7:85:f3:f8:e9:40:43:71:
         b5:c1:ad:18:44:9e:83:53:4c:84:a1:fb:c6:b9:22:7a:a5:79:
         4e:43:80:c4:00:1e:50:8b:4c:9f:bc:30:96:78:73:17:c5:e9:
         7d:c7:89:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----