Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/npO31UQ6MgQb_KXFRuB5cseCGq0.roa
File:                     npO31UQ6MgQb_KXFRuB5cseCGq0.roa (raw, json)
Hash identifier:          g4JN4BNjztb4rOd5YFRTGak1PKL3E9KOaxMHM6ZlfJ0=
Subject key identifier:   9E:93:B7:D5:44:3A:32:04:1B:FC:A5:C5:46:E0:79:72:C7:82:1A:AD
Certificate issuer:       /CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
Certificate serial:       0194266ADD5D111AA9F48CE22C92FB9B693B
Authority key identifier: 7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/npO31UQ6MgQb_KXFRuB5cseCGq0.roa
Signing time:             Thu 02 Jan 2025 09:48:45 +0000
ROA not before:           Thu 02 Jan 2025 09:48:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31467
IP address blocks:        83.137.104.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6a:dd:5d:11:1a:a9:f4:8c:e2:2c:92:fb:9b:69:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
        Validity
            Not Before: Jan  2 09:48:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9e93b7d5443a32041bfca5c546e07972c7821aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:eb:c1:b7:88:f6:34:61:e5:2c:04:2d:26:75:
                    cf:fe:18:01:91:2b:43:52:ea:05:49:99:1f:c9:38:
                    d1:f4:8c:9e:b0:25:ea:78:6b:0b:50:2f:64:0e:37:
                    6f:22:88:5e:b0:13:74:a0:98:8c:38:31:09:00:48:
                    f6:0e:5e:47:56:c6:33:c4:b6:7d:01:4c:68:3d:42:
                    de:6e:cc:ec:ea:d9:2a:ca:ab:8e:b3:06:48:4c:6b:
                    13:a8:0a:63:02:e8:91:c9:61:73:68:c8:6d:33:7e:
                    1d:bf:9d:f8:af:7c:18:49:f3:73:ff:46:a1:fc:d9:
                    2a:f0:11:d5:c3:45:1e:50:b0:e1:9e:f3:1d:9f:e5:
                    13:e4:60:9e:a5:c2:39:cd:8a:90:20:5b:5e:7c:ad:
                    85:3c:bc:5a:cd:02:cd:c1:c7:7e:fd:9b:53:7d:cc:
                    2e:a1:75:46:78:69:c8:16:75:5d:16:fb:28:89:b7:
                    26:ac:b2:dd:e4:b9:8e:2d:c9:74:75:b5:26:6f:73:
                    81:68:e7:0a:57:95:87:10:34:a0:d6:81:0b:e2:b5:
                    d8:34:6f:0f:6b:d2:a0:3d:8c:8c:22:c9:a7:6e:4a:
                    bd:d4:44:89:af:51:1b:15:87:4a:a6:22:f2:d8:70:
                    25:6a:0a:a5:7a:d6:a7:12:ed:3c:cd:55:ae:99:2b:
                    09:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:93:B7:D5:44:3A:32:04:1B:FC:A5:C5:46:E0:79:72:C7:82:1A:AD
            X509v3 Authority Key Identifier:
                keyid:7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/npO31UQ6MgQb_KXFRuB5cseCGq0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.137.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:54:33:37:68:99:eb:ce:0d:8f:ed:97:e2:f5:38:52:df:1b:
         3c:dd:b1:ab:a2:21:94:4b:bc:c2:4a:82:0c:69:c1:d4:85:0f:
         b6:39:14:ac:b7:f0:a2:32:a1:5e:4e:23:c8:43:46:9b:4b:5b:
         1f:2c:17:64:7a:7a:37:63:b6:f0:f1:f0:ab:de:d9:28:cd:fa:
         57:4e:5a:8a:22:19:0d:45:74:43:f3:4c:30:87:0a:3a:11:23:
         a8:f8:86:09:1a:90:b9:44:ca:a8:20:06:25:15:03:fe:1e:0d:
         6b:47:80:55:64:cd:39:9b:44:a1:de:07:5c:91:15:48:e4:eb:
         4b:9c:02:1e:bc:b6:9f:c6:11:28:70:d0:17:8f:a4:3d:fa:f9:
         b6:31:c8:be:be:ab:16:3a:ff:bc:b3:2b:4c:fc:f7:10:90:1c:
         b4:36:62:f3:7f:04:22:4a:f8:9d:57:16:87:fa:6e:f8:5b:b0:
         bc:c2:4f:da:8b:6a:c3:5d:22:67:5e:da:5e:34:09:84:15:b6:
         8e:da:c1:03:35:d9:b8:27:17:59:99:6e:a5:b3:11:62:33:9d:
         47:6e:a2:30:dc:b6:ce:90:d1:00:2b:b2:0e:a9:75:7e:c1:59:
         b5:bc:9e:f0:88:da:25:a0:81:eb:a4:6c:2d:93:0a:f0:f1:9f:
         e2:9f:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----