Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lWvdh1tW9Nr29e037SncsLGwjfI.roa
File:                     lWvdh1tW9Nr29e037SncsLGwjfI.roa (raw, json)
Hash identifier:          j1dUTiHWBt3aDo99E5yf928X8VvKCbJydPoVbx3OYLA=
Subject key identifier:   95:6B:DD:87:5B:56:F4:DA:F6:F5:ED:37:ED:29:DC:B0:B1:B0:8D:F2
Certificate issuer:       /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial:       01942823A55E65652B7E9B948E5F61561070
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lWvdh1tW9Nr29e037SncsLGwjfI.roa
Signing time:             Thu 02 Jan 2025 17:50:12 +0000
ROA not before:           Thu 02 Jan 2025 17:50:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49624
IP address blocks:        188.93.170.0/23 maxlen: 23
                          2001:7f8:4c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:a5:5e:65:65:2b:7e:9b:94:8e:5f:61:56:10:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
        Validity
            Not Before: Jan  2 17:50:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=956bdd875b56f4daf6f5ed37ed29dcb0b1b08df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:41:e7:f7:fb:5f:b4:61:d4:65:f8:40:ee:b1:
                    b6:64:f3:7f:46:20:7b:4b:5f:f4:a7:46:81:0a:5e:
                    aa:45:21:d5:4d:10:d2:74:c2:4c:06:13:84:1b:fd:
                    ce:36:ac:3e:e8:d1:71:5f:50:0a:92:95:b8:a6:b5:
                    ca:32:2f:ec:c3:f8:73:7c:01:b6:cf:9e:ed:bd:46:
                    6a:f2:a1:7f:bd:f2:79:1c:1b:1e:11:05:a3:fa:25:
                    2b:ba:a4:66:14:ec:51:a0:a3:f6:a7:dd:86:8c:a5:
                    94:4f:02:f4:40:38:84:8b:87:bf:cc:e5:b3:7a:f2:
                    19:92:63:79:d7:44:9c:a3:83:d4:d8:39:ff:8e:ef:
                    02:00:6e:10:0a:8f:11:c8:0b:40:ff:b7:d8:bb:06:
                    f9:47:ec:f9:fe:18:e8:54:2f:90:91:84:40:12:92:
                    d8:03:fb:07:aa:79:8b:a5:ef:ed:21:2f:67:8d:b7:
                    48:8d:8e:23:cf:3e:84:f5:a0:11:73:cd:70:b7:f0:
                    4e:86:96:8e:a8:d0:9c:a3:38:21:6e:7e:d9:16:98:
                    b8:e1:90:e4:56:fc:62:62:5a:9e:64:52:43:1e:04:
                    fb:69:08:f5:e6:d7:fd:6c:28:c9:76:74:f8:0f:ac:
                    59:86:99:c7:93:60:3a:2e:e6:dc:15:c1:60:b7:62:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6B:DD:87:5B:56:F4:DA:F6:F5:ED:37:ED:29:DC:B0:B1:B0:8D:F2
            X509v3 Authority Key Identifier:
                keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lWvdh1tW9Nr29e037SncsLGwjfI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.170.0/23
                IPv6:
                  2001:7f8:4c::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:ed:b4:42:00:0e:b0:75:4b:91:9a:e6:1c:1b:78:38:4d:71:
         93:7e:8b:bb:be:59:13:5b:da:77:a6:62:08:0d:97:44:b0:5c:
         8c:e8:6c:4f:f2:c4:bf:f4:a4:0a:49:9e:81:99:79:e7:8c:4a:
         62:9b:a9:f9:84:25:d5:0f:b5:59:78:11:d4:1f:cd:c6:5c:7d:
         c5:33:03:85:08:4c:87:f6:57:54:5a:e5:68:22:10:fd:00:e7:
         6c:4d:d4:5f:91:55:0e:4d:75:59:76:77:06:e5:c5:dd:8c:3a:
         d0:bd:78:24:6e:3d:49:19:c3:c9:91:a3:a8:a3:fe:44:2a:e9:
         62:cc:e8:91:b5:73:da:95:e8:7d:78:4a:f0:33:d2:d6:ab:da:
         49:99:09:63:74:51:83:47:8b:66:c1:20:92:de:43:b3:8a:de:
         d6:af:1e:57:20:14:a1:f9:71:15:42:26:2c:8e:de:3f:57:41:
         4f:4e:a8:97:02:82:79:e2:c7:40:53:39:f9:22:c6:51:27:28:
         9b:c7:6f:01:39:58:a1:3f:45:95:b5:bc:fb:c5:e9:ee:d0:69:
         9d:fd:a6:7c:e3:04:f0:ed:bc:00:2b:56:7a:56:80:fa:17:b4:
         42:a4:cb:3d:d8:f6:42:0e:cd:b0:b2:a4:97:ac:55:f9:62:6a:
         19:69:50:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----