Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/csc62_075z-O1jbjAbm_rCnKZRc.roa
File:                     csc62_075z-O1jbjAbm_rCnKZRc.roa (raw, json)
Hash identifier:          Tb7p7/2jlLjl4/3NDouCmjK2S/QTfoZSS+7FIIdOEgc=
Subject key identifier:   72:C7:3A:DB:FD:3B:E7:3F:8E:D6:36:E3:01:B9:BF:AC:29:CA:65:17
Certificate issuer:       /CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
Certificate serial:       019426D9B9C6754E31F5005867517EE1F5A7
Authority key identifier: AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/csc62_075z-O1jbjAbm_rCnKZRc.roa
Signing time:             Thu 02 Jan 2025 11:49:50 +0000
ROA not before:           Thu 02 Jan 2025 11:49:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49844
IP address blocks:        91.206.28.0/24 maxlen: 24
                          2a12:f840::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:b9:c6:75:4e:31:f5:00:58:67:51:7e:e1:f5:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
        Validity
            Not Before: Jan  2 11:49:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=72c73adbfd3be73f8ed636e301b9bfac29ca6517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:53:69:ab:59:e6:17:fa:dc:2f:4e:58:db:
                    87:01:4e:a2:28:f9:3e:5a:12:5b:a3:68:95:2a:f5:
                    72:29:9e:5d:67:e8:79:a2:91:11:3a:b0:69:59:97:
                    d4:51:92:28:ee:f0:57:6c:fc:6e:38:bb:c0:14:7f:
                    fe:5a:91:fe:b5:7f:c0:91:88:e1:8f:f3:9f:29:28:
                    8f:2a:71:98:73:7f:47:19:8e:a7:9d:5c:ec:b9:08:
                    6b:ac:95:91:83:26:fd:c9:23:af:f6:c7:e9:36:43:
                    5d:c5:07:d1:4a:28:b2:d7:70:a7:92:43:a8:5e:a3:
                    d2:6b:ba:40:b5:08:b2:07:c4:f9:49:47:0d:6f:02:
                    a2:60:ae:fc:2c:30:06:f0:d2:00:3f:79:24:bf:13:
                    4f:e6:c5:4b:8f:24:b9:21:66:fc:3d:09:ff:20:bc:
                    b7:df:3d:c8:94:d5:73:db:aa:98:bb:3f:e9:93:b3:
                    f9:7f:6c:04:1b:77:22:94:70:27:20:0c:6e:c9:a4:
                    48:96:56:17:09:65:d6:93:ea:92:03:af:34:79:ff:
                    93:27:8a:5a:38:87:d2:ae:9d:7f:4e:8c:c8:f3:1c:
                    6b:d2:72:80:2e:d9:38:4f:db:70:24:16:68:2e:0c:
                    52:0d:ff:9c:b5:cc:95:c6:26:8a:56:e4:1c:24:66:
                    91:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C7:3A:DB:FD:3B:E7:3F:8E:D6:36:E3:01:B9:BF:AC:29:CA:65:17
            X509v3 Authority Key Identifier:
                keyid:AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/csc62_075z-O1jbjAbm_rCnKZRc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.28.0/24
                IPv6:
                  2a12:f840::/29

    Signature Algorithm: sha256WithRSAEncryption
         1c:9a:82:eb:23:2e:61:2e:3b:b7:90:9c:05:c7:0c:12:2f:c6:
         48:51:f8:43:09:84:2d:fb:9a:d2:d2:62:cd:b5:9b:83:5f:91:
         1e:db:82:bd:dc:74:c9:14:72:d7:63:e5:82:a3:ff:d5:38:36:
         2e:e1:93:8b:41:ef:c5:98:de:53:77:ab:4c:cb:4d:40:ff:ff:
         60:86:5e:ac:0a:19:44:c4:25:81:5c:63:6e:ed:92:c8:83:90:
         78:eb:51:af:80:94:4b:4b:07:c2:68:8b:9e:c4:5b:51:bf:4f:
         64:3a:a5:6b:5a:f5:84:63:12:eb:5d:cd:40:fd:4d:8b:c5:9b:
         fe:d4:f1:90:9f:59:6d:ea:58:07:36:e4:16:55:7a:db:7b:fb:
         9d:1c:35:21:cf:68:21:99:aa:c6:df:45:b1:7e:0d:7e:40:e6:
         ee:92:82:92:e5:c1:cd:c8:0a:fb:b3:80:34:df:03:ae:2a:02:
         2a:ba:c2:05:30:5b:81:36:b2:74:3a:86:b8:0c:89:41:46:a2:
         bf:87:03:8d:b9:7f:6e:cf:0b:5c:1e:89:1e:c7:45:eb:df:14:
         3d:9d:15:e8:2a:72:8f:41:18:25:d2:d3:47:51:0c:de:88:50:
         a5:2a:5e:29:a2:f2:e5:63:22:1b:eb:15:0c:a6:85:dc:96:ce:
         6b:9f:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----