Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/7NcD3v3bTwDr9ocN3-x63vupO1g.roa
File:                     7NcD3v3bTwDr9ocN3-x63vupO1g.roa (raw, json)
Hash identifier:          HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=
Subject key identifier:   EC:D7:03:DE:FD:DB:4F:00:EB:F6:87:0D:DF:EC:7A:DE:FB:A9:3B:58
Certificate issuer:       /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial:       0194AC1331927573861B53A2D5291D298D47
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/7NcD3v3bTwDr9ocN3-x63vupO1g.roa
Signing time:             Tue 28 Jan 2025 08:42:06 +0000
ROA not before:           Tue 28 Jan 2025 08:42:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21263
IP address blocks:        91.209.197.0/24 maxlen: 24
                          2a0d:9600::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ac:13:31:92:75:73:86:1b:53:a2:d5:29:1d:29:8d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
        Validity
            Not Before: Jan 28 08:42:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ecd703defddb4f00ebf6870ddfec7adefba93b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:bc:ec:83:87:0c:17:7c:a0:0b:7d:1d:80:
                    b7:8f:3a:ed:08:0b:31:45:30:f8:cf:8b:4d:d4:3d:
                    1c:b8:30:a5:c3:41:88:71:a1:7a:21:07:ba:dd:e0:
                    7d:a2:ae:f9:9b:ce:33:59:86:db:d9:f1:fa:a6:88:
                    3a:ab:eb:a4:8d:56:20:cf:42:39:55:8c:64:13:5a:
                    e2:37:df:68:bf:af:f8:06:2c:8d:fe:52:7f:fa:3e:
                    52:88:6c:7f:2f:ba:58:fb:f2:48:59:58:4c:31:74:
                    1b:a7:0d:f6:46:7d:c2:19:01:72:ff:70:68:68:8c:
                    ad:08:0d:34:a9:42:e0:28:c5:15:9e:d8:5d:f9:b9:
                    24:70:82:45:35:65:e3:21:f0:47:31:75:b6:c8:f8:
                    a2:ed:d2:18:bb:d2:ea:ee:f6:d6:b1:55:0a:0f:e8:
                    b1:0b:ef:45:0e:ac:63:9d:cd:70:00:c9:c6:6d:de:
                    0c:42:e4:d2:12:17:52:df:79:fa:1a:8c:66:a7:46:
                    ed:95:13:25:0f:ba:08:a0:06:2d:8f:05:cb:7a:11:
                    ee:c4:51:4a:94:93:d4:98:57:fa:14:d6:4c:7a:8c:
                    aa:f1:bc:11:6c:e6:94:91:03:b8:84:c9:ca:64:89:
                    8c:67:ef:21:3a:ea:83:7b:9e:f9:84:20:39:ab:c4:
                    22:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D7:03:DE:FD:DB:4F:00:EB:F6:87:0D:DF:EC:7A:DE:FB:A9:3B:58
            X509v3 Authority Key Identifier:
                keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/7NcD3v3bTwDr9ocN3-x63vupO1g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.197.0/24
                IPv6:
                  2a0d:9600::/29

    Signature Algorithm: sha256WithRSAEncryption
         6e:b1:d8:c8:ca:e0:a1:67:98:55:4a:09:63:a0:4b:0d:27:05:
         0c:11:99:75:79:f4:ff:16:3d:62:46:1b:62:f9:69:9e:dd:1b:
         28:16:ea:3f:16:9e:ce:be:03:f6:7b:25:1c:05:71:26:15:e0:
         a2:e5:75:50:67:2c:9e:b2:5d:8b:c7:0b:81:71:19:6a:a8:e1:
         5b:c8:3b:92:49:62:80:29:14:a6:98:fb:56:3b:be:1d:4a:2c:
         38:9d:cb:b1:38:a6:ab:a0:f8:f0:17:37:91:da:ce:74:ef:a1:
         fa:d6:e2:60:a0:60:a4:6e:0f:56:be:23:84:c6:30:bf:4c:ec:
         2e:44:3c:9b:75:0c:ac:a7:8d:c4:a8:57:2e:11:42:42:18:02:
         9b:1f:1b:0a:1e:07:06:af:e9:36:1a:12:9a:dc:43:90:d9:9b:
         b3:ad:41:82:c0:1b:dd:73:18:43:9b:ef:fb:72:c5:07:2b:e0:
         ba:58:8a:e1:83:14:6e:af:2d:22:99:50:4e:0f:67:e4:57:9a:
         ba:82:a2:5e:b3:23:40:ea:96:ba:7c:ad:02:c7:36:67:c9:8c:
         5e:5f:ab:1e:63:52:27:2d:f2:3d:bf:da:21:23:ce:3a:1b:5f:
         33:2d:e4:50:be:f2:c5:27:1b:f5:1f:8b:a4:59:13:52:d8:6d:
         cf:be:f0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----