Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/uOYWW7TEB31sm4QZc9FsOGImJPM.roa
File:                     uOYWW7TEB31sm4QZc9FsOGImJPM.roa (raw, json)
Hash identifier:          cmanaKlZ6l0JtXcLQVriSM59y47GPWNWj8NDj+lOoi8=
Subject key identifier:   B8:E6:16:5B:B4:C4:07:7D:6C:9B:84:19:73:D1:6C:38:62:26:24:F3
Certificate issuer:       /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Certificate serial:       018CC56ECBB2248CFBC87D96F30715F36882
Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/uOYWW7TEB31sm4QZc9FsOGImJPM.roa
Signing time:             Mon 01 Jan 2024 14:30:21 +0000
ROA not before:           Mon 01 Jan 2024 14:30:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60805
IP address blocks:        91.240.240.0/24 maxlen: 24
                          2001:67c:1734::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:cb:b2:24:8c:fb:c8:7d:96:f3:07:15:f3:68:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
        Validity
            Not Before: Jan  1 14:30:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b8e6165bb4c4077d6c9b841973d16c38622624f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:1a:8c:dd:73:fc:34:f7:7f:ea:59:6a:19:
                    10:16:47:ab:75:36:23:05:e1:1b:93:fc:4b:ee:a0:
                    af:74:36:4e:45:c0:90:5f:ad:66:a9:3f:1a:11:d8:
                    d4:79:bf:b7:7c:f6:b1:ca:58:33:d7:d3:bb:b1:43:
                    36:eb:16:a4:1d:25:29:a3:e6:80:8c:b2:26:fd:74:
                    9f:7f:d2:91:8c:b5:a1:6b:a8:0c:88:db:66:b7:87:
                    99:90:86:93:c3:29:af:06:ae:fd:9d:c7:6e:17:19:
                    ed:f8:20:f1:b1:50:22:3c:99:40:6f:6b:3c:6d:2f:
                    d8:e9:55:31:2c:b3:50:ed:44:c6:a3:a9:bd:fe:3b:
                    da:68:39:42:c3:bf:68:bc:65:ff:25:96:4d:5c:2d:
                    bc:f2:98:8e:5f:32:46:48:af:2a:13:32:ef:91:76:
                    72:5a:92:be:13:9b:59:dc:f3:79:c3:42:5a:eb:41:
                    e1:cf:ac:8d:ad:65:f0:c2:08:7f:2f:f8:8b:e6:c1:
                    17:d8:ac:e3:10:09:25:33:dc:7e:57:21:f8:54:97:
                    f8:5a:f9:85:ba:27:60:91:44:12:b7:c7:04:87:7e:
                    12:1c:7f:56:1b:92:a2:e7:4b:bc:33:d8:4c:11:8e:
                    1f:f1:55:37:fe:a1:a1:ff:af:43:24:fb:35:bf:cf:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E6:16:5B:B4:C4:07:7D:6C:9B:84:19:73:D1:6C:38:62:26:24:F3
            X509v3 Authority Key Identifier:
                keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/uOYWW7TEB31sm4QZc9FsOGImJPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.240.0/24
                IPv6:
                  2001:67c:1734::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:0e:65:0d:dd:7c:23:f9:95:1a:d3:5d:70:88:1b:0c:7e:d2:
         ae:53:75:2d:3a:09:40:1e:84:fd:a5:b1:0f:97:91:17:36:3a:
         6b:1a:6d:e0:79:c0:ea:dc:9a:1c:a3:87:49:5f:9b:c3:ba:78:
         7a:75:8e:0e:c8:64:31:76:1e:37:f3:84:b4:cc:ab:98:8f:2b:
         df:6a:2d:67:7c:73:1e:80:a1:9d:63:d4:68:cf:ef:54:84:87:
         cf:99:32:c5:d0:1e:af:75:0c:e6:9c:40:ea:98:e0:91:4b:96:
         bb:c2:35:54:7c:48:dc:2f:46:81:ef:ea:60:df:ea:5d:d8:80:
         44:81:e2:52:68:75:72:4d:67:86:2a:7d:60:62:fa:55:cb:6e:
         26:0b:e1:35:dc:30:63:aa:56:c3:ad:fa:cd:ef:9b:65:86:2a:
         1e:12:8d:c5:2d:35:4b:ee:b7:3f:91:38:f8:1a:bd:48:83:7c:
         a6:6b:7f:c2:a8:09:f8:27:71:75:a3:e5:b6:d6:ed:29:5b:24:
         ea:75:bd:bd:04:e2:86:e7:2b:f5:dd:04:7b:b3:20:0f:6c:a0:
         d0:07:2f:47:0f:57:3f:ce:be:0c:4f:02:5f:28:c4:59:66:fa:
         af:b5:ff:8e:88:31:72:c9:44:b7:40:bd:eb:9d:55:59:26:0f:
         2b:90:c9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----