Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/C1sfui3_F27EORD1FFTIF_PXuck.roa
File:                     C1sfui3_F27EORD1FFTIF_PXuck.roa (raw, json)
Hash identifier:          L6fwO735NsCUbgUMMTGbvgV3NoYMTpTeYzX/vL5LjfM=
Subject key identifier:   0B:5B:1F:BA:2D:FF:17:6E:C4:39:10:F5:14:54:C8:17:F3:D7:B9:C9
Certificate issuer:       /CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Certificate serial:       019422FC4989C1D2237A8924B3F65E4E8BD1
Authority key identifier: 56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/C1sfui3_F27EORD1FFTIF_PXuck.roa
Signing time:             Wed 01 Jan 2025 17:49:06 +0000
ROA not before:           Wed 01 Jan 2025 17:49:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213184
IP address blocks:        91.201.106.0/24 maxlen: 24
                          2a0a:9100::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:49:89:c1:d2:23:7a:89:24:b3:f6:5e:4e:8b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
        Validity
            Not Before: Jan  1 17:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0b5b1fba2dff176ec43910f51454c817f3d7b9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:be:fa:c8:d7:48:91:99:f4:e6:42:c9:43:ec:
                    4f:d2:d3:36:27:1c:b7:19:0c:7f:61:cb:44:15:a2:
                    e8:d2:e2:8f:c6:8b:25:6a:2a:ec:02:c7:7e:aa:a4:
                    be:22:50:bc:1f:6f:e1:1b:fd:32:c5:49:b4:08:be:
                    c8:d3:e6:51:1b:92:97:24:62:da:0a:ef:73:69:8e:
                    d1:30:84:c6:6d:59:8f:c1:bd:11:6e:53:6a:b9:5e:
                    02:96:ff:1e:3c:23:c1:1e:1c:03:c1:9e:2e:52:5c:
                    cc:21:2f:ad:b8:87:ea:19:f7:4c:80:6d:ea:77:08:
                    5e:5d:16:82:c2:da:28:2c:28:ca:10:02:df:66:79:
                    30:be:91:b6:df:26:97:92:93:e5:aa:1d:70:1c:ec:
                    8f:bc:64:d7:62:c1:3b:04:9f:d1:6a:c2:dc:66:5b:
                    52:fd:94:6e:b0:6c:ca:0e:cb:87:6c:9d:02:6c:98:
                    cd:96:e9:28:ea:ba:c3:6b:2f:45:54:d3:c6:ec:1d:
                    d2:b8:ce:4b:0c:93:53:47:82:32:23:d3:fc:da:97:
                    f3:b0:27:5e:de:4e:de:15:c8:d1:39:7e:62:d4:5b:
                    e0:01:19:73:49:b6:db:a1:31:f5:1e:18:90:22:43:
                    a2:06:31:81:20:48:37:b2:9a:0f:13:af:31:95:b0:
                    f4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5B:1F:BA:2D:FF:17:6E:C4:39:10:F5:14:54:C8:17:F3:D7:B9:C9
            X509v3 Authority Key Identifier:
                keyid:56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/C1sfui3_F27EORD1FFTIF_PXuck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.201.106.0/24
                IPv6:
                  2a0a:9100::/29

    Signature Algorithm: sha256WithRSAEncryption
         68:73:ee:4c:13:5e:4c:f9:f9:c1:24:3f:e0:4d:56:df:31:00:
         e2:43:a7:90:86:4c:df:4a:8a:b1:66:dc:6f:f9:08:e7:24:94:
         a5:39:c2:23:57:e1:43:c7:dd:ed:bc:e0:7c:8c:c3:8a:de:00:
         90:dd:a1:90:27:ea:f7:b3:0b:fd:27:6b:4a:e3:08:84:29:1f:
         77:1d:7d:d1:f9:4a:80:60:c6:fa:9f:13:f1:a6:5e:07:2d:64:
         f6:6c:a7:57:04:c0:47:45:85:f1:28:b2:52:0e:49:8c:d0:ca:
         15:90:83:e4:c5:6e:16:f5:66:f3:1c:81:e5:03:4c:df:7d:8c:
         ca:67:2d:ff:3a:08:83:1b:51:96:0b:96:f6:8c:38:99:c6:74:
         fd:a8:e8:07:c0:84:39:d5:de:a5:11:39:90:0f:61:30:5c:36:
         38:34:9e:03:b0:46:2d:26:15:3c:1e:13:51:03:00:78:2a:7d:
         0d:f8:58:d2:ff:4e:8a:27:17:32:f7:b3:6b:61:61:31:46:ed:
         dc:d7:f6:5e:ab:c3:40:8b:c0:e6:a0:95:a6:66:c1:d4:d4:67:
         95:ba:f1:15:67:49:d5:ae:30:74:5d:2f:bb:7b:db:3f:fc:30:
         fe:40:e8:62:5e:0d:bc:43:43:1e:b3:cd:77:b5:7f:9f:6d:b6:
         ea:ab:84:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----