Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/FwydALoErM6-8yE8TcsoXe9fkyI.roa
File:                     FwydALoErM6-8yE8TcsoXe9fkyI.roa (raw, json)
Hash identifier:          S5UsOTTZ1j9ByeHOH+4PHSRQbib1Nk4JqrfciZPb4Cc=
Subject key identifier:   17:0C:9D:00:BA:04:AC:CE:BE:F3:21:3C:4D:CB:28:5D:EF:5F:93:22
Certificate issuer:       /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Certificate serial:       0194221F8A3A4D4ABD086C6DD87E13A08090
Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/FwydALoErM6-8yE8TcsoXe9fkyI.roa
Signing time:             Wed 01 Jan 2025 13:47:59 +0000
ROA not before:           Wed 01 Jan 2025 13:47:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209234
IP address blocks:        2.56.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:8a:3a:4d:4a:bd:08:6c:6d:d8:7e:13:a0:80:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
        Validity
            Not Before: Jan  1 13:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=170c9d00ba04accebef3213c4dcb285def5f9322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f7:92:9c:2b:8c:a7:53:70:8c:f0:20:ba:3b:
                    68:fd:11:98:d7:ed:ca:99:68:52:2b:aa:ea:2b:9f:
                    01:38:04:a3:c9:20:d5:c3:e1:aa:d0:4b:a9:23:39:
                    f4:4b:1b:07:ef:d2:be:3d:db:39:a8:f7:c2:49:92:
                    82:10:21:4a:2c:30:65:2b:b0:74:3f:a8:01:2f:59:
                    02:9f:d5:b9:f6:30:53:d6:c4:55:ba:3c:c3:65:5f:
                    27:64:18:6c:68:31:fd:91:10:ab:c0:33:11:57:df:
                    9d:0a:f3:f5:4c:cf:d8:0d:1a:e7:1f:57:e5:82:68:
                    68:b9:f6:ee:67:12:7a:36:e5:7a:78:c3:fd:4c:94:
                    66:40:25:4b:aa:f6:e6:44:2f:6c:03:9c:b9:6f:e0:
                    75:16:f9:af:a7:e8:4e:f5:dc:fa:93:9f:d7:0f:2f:
                    31:00:ae:f1:88:0e:ab:71:f6:14:ba:5c:1f:86:3c:
                    22:8a:54:9c:e7:24:1a:5f:3d:23:d4:aa:93:d2:86:
                    f1:eb:b1:c8:68:0a:47:76:ec:34:ba:02:f8:50:47:
                    4d:6f:24:c1:56:f9:5d:73:de:dd:29:70:92:c3:39:
                    d6:c3:4b:d5:57:31:aa:0e:0a:45:a2:a1:de:51:9e:
                    59:5a:1f:40:2e:07:8d:3d:20:24:f7:a8:f1:a2:49:
                    6a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0C:9D:00:BA:04:AC:CE:BE:F3:21:3C:4D:CB:28:5D:EF:5F:93:22
            X509v3 Authority Key Identifier:
                keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/FwydALoErM6-8yE8TcsoXe9fkyI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:d8:6e:53:ad:b1:17:56:6b:57:f4:5a:02:81:60:aa:f6:06:
         9a:fb:7b:65:e3:26:64:08:82:ef:cb:03:9d:c6:95:ee:48:c7:
         a3:20:90:d2:3f:cf:2f:98:5a:20:f8:e1:2a:0d:6b:0c:3d:8d:
         95:bc:b4:14:71:68:df:ba:e5:bd:7c:8a:0a:7d:01:c9:3d:7d:
         96:f9:4a:e9:74:85:ff:02:a9:75:9f:5c:d6:bf:83:3a:3b:ca:
         39:34:da:04:5c:d6:80:18:f8:f3:e7:eb:ca:ad:ad:0c:1b:ab:
         c2:89:7e:51:40:77:fe:7b:82:07:63:88:77:e6:09:a0:cd:bd:
         7b:3e:d6:75:46:61:97:7e:fd:b5:2a:d7:ba:b2:09:63:01:64:
         e2:42:4d:4b:e9:ac:f9:9c:32:ef:a7:9b:a6:03:ae:82:62:14:
         03:e6:88:b8:1e:b0:c1:cd:6b:72:7f:fa:28:0c:c5:96:d9:76:
         a4:36:8b:da:99:c7:24:21:d1:2a:61:e9:70:db:ad:97:13:8c:
         b6:ca:45:8f:06:b1:9d:ce:71:2d:87:b5:56:59:d2:3d:c9:b5:
         e6:b1:ac:60:c4:3d:c6:da:b4:48:75:00:83:42:72:08:62:e9:
         d5:8c:b1:0d:40:92:4c:14:90:2f:e0:38:30:d9:79:8a:f6:47:
         29:4e:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----