Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/a2o1g4APvxlN0jKtdCAcLm-d9r4.roa
File:                     a2o1g4APvxlN0jKtdCAcLm-d9r4.roa (raw, json)
Hash identifier:          6oo0KVFeY/9ZKOW6xWsGvfnXs8r9cGNTgACNAHR8fOs=
Subject key identifier:   6B:6A:35:83:80:0F:BF:19:4D:D2:32:AD:74:20:1C:2E:6F:9D:F6:BE
Certificate issuer:       /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial:       01958510072DF1BD7F0AEF72D0350DE0EDEC
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/a2o1g4APvxlN0jKtdCAcLm-d9r4.roa
Signing time:             Tue 11 Mar 2025 11:56:14 +0000
ROA not before:           Tue 11 Mar 2025 11:56:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     50005
IP address blocks:        91.224.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:85:10:07:2d:f1:bd:7f:0a:ef:72:d0:35:0d:e0:ed:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
        Validity
            Not Before: Mar 11 11:56:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6b6a3583800fbf194dd232ad74201c2e6f9df6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:7f:d3:51:ee:b7:14:5c:a1:fe:68:52:15:
                    17:a4:e4:f0:22:c0:e5:26:d3:ec:ac:00:d1:17:d2:
                    6b:7f:24:af:07:a4:1a:28:d0:e6:c6:17:17:df:dd:
                    e4:86:e1:9f:61:3f:0e:8d:7b:64:5a:98:0c:71:d5:
                    e9:b4:ef:05:52:cc:9e:de:2d:b0:23:2d:7f:0d:3b:
                    55:87:8c:b2:f8:c8:45:94:ca:6e:7e:b6:ef:65:f8:
                    4b:58:95:0b:09:77:8d:48:1a:ae:64:c4:d3:e0:dc:
                    e3:ae:63:f6:07:89:bc:27:70:9e:f6:ca:59:cd:dd:
                    fc:df:b5:5c:08:7d:df:00:70:e3:9b:73:7f:1a:cc:
                    c2:d9:44:d1:f8:31:9a:16:df:c2:d5:5b:11:41:cb:
                    01:1c:9f:56:d3:c1:dd:4f:b7:f9:5a:28:73:05:74:
                    1e:4f:29:4f:44:40:f2:5a:f9:37:d3:44:58:a1:8a:
                    04:20:b3:11:77:f2:9a:18:9e:1c:af:a3:56:a2:f1:
                    0e:a5:92:ce:ec:dc:71:1d:19:51:a8:70:d1:b8:29:
                    6a:ac:8d:25:bb:9e:6b:f1:1c:73:62:ae:72:6d:66:
                    91:0b:34:f2:1c:7c:41:4b:22:28:7d:37:a1:82:17:
                    88:bc:74:09:9d:e9:b1:ec:db:4b:24:36:04:1c:35:
                    b1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6A:35:83:80:0F:BF:19:4D:D2:32:AD:74:20:1C:2E:6F:9D:F6:BE
            X509v3 Authority Key Identifier:
                keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/a2o1g4APvxlN0jKtdCAcLm-d9r4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.224.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:ed:57:aa:d1:05:9b:65:44:f0:ef:66:a8:69:c1:be:ee:91:
         11:02:6d:57:fb:77:b4:f0:d3:da:5d:87:98:88:9c:4e:2a:eb:
         78:82:c1:22:c5:2c:02:68:b6:8c:b9:b2:1f:9c:6e:38:15:a7:
         e6:bb:fc:69:2d:92:35:75:92:17:04:68:62:ea:cc:5b:ad:5a:
         90:73:1c:fc:06:e0:98:41:ce:11:3d:9a:8f:13:d4:09:ec:4f:
         9c:24:c2:20:31:6f:7d:3d:04:3e:e5:31:e1:ba:a4:4e:ab:9d:
         c3:03:b5:f2:be:3f:24:94:d9:de:2d:07:63:43:e6:ff:19:b4:
         37:5e:bd:87:6d:41:82:26:f0:d4:5d:48:5d:d9:2b:44:5e:c2:
         eb:c7:e6:67:5f:a3:e6:dd:d4:28:81:0a:98:1c:8a:ae:5d:ac:
         98:24:11:76:88:ae:13:04:07:bf:3e:2a:ea:fa:c4:79:bf:b8:
         b9:c6:7e:ff:2f:d6:e3:68:d4:b9:1e:ca:6b:bb:12:f0:bf:65:
         de:d4:55:09:ed:9a:69:e2:ad:7c:d9:9b:02:6b:3c:1e:c6:92:
         05:89:1b:20:3d:dd:d7:46:72:02:35:4b:1f:ba:b0:e8:38:5d:
         c6:b1:14:63:be:2b:f9:be:02:53:ee:da:8a:9c:07:aa:ad:e4:
         11:7d:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----