Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/kIs_EeYxTDdc7ZTCalcPfcZrFfk.roa
File:                     kIs_EeYxTDdc7ZTCalcPfcZrFfk.roa (raw, json)
Hash identifier:          +KDEzvOiqEQH5ZvjBiB0DnGyq2ge7uYxbEOSleDVk/A=
Subject key identifier:   90:8B:3F:11:E6:31:4C:37:5C:ED:94:C2:6A:57:0F:7D:C6:6B:15:F9
Certificate issuer:       /CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
Certificate serial:       01924DB0DA019A193A25C29201EE6F401FD6
Authority key identifier: 9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/kIs_EeYxTDdc7ZTCalcPfcZrFfk.roa
Signing time:             Wed 02 Oct 2024 14:44:48 +0000
ROA not before:           Wed 02 Oct 2024 14:44:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215320
IP address blocks:        89.47.246.0/24 maxlen: 24
                          2a0d:3c80::/31 maxlen: 31

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:4d:b0:da:01:9a:19:3a:25:c2:92:01:ee:6f:40:1f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
        Validity
            Not Before: Oct  2 14:44:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=908b3f11e6314c375ced94c26a570f7dc66b15f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:bc:9f:88:6c:52:a6:82:15:03:36:aa:d0:
                    13:7f:25:10:00:3b:75:93:18:c2:a7:c5:ed:38:a4:
                    87:32:41:55:d4:ac:48:54:88:eb:1d:40:e2:57:66:
                    b1:ee:d5:2e:fe:a0:69:10:a3:df:bd:12:32:28:69:
                    e9:80:ef:02:ce:e4:1d:38:a2:c6:6a:39:b9:55:e7:
                    68:71:51:90:20:f4:4e:a2:02:c7:eb:2d:0a:6d:96:
                    fb:57:de:16:8e:e5:8c:a1:e4:e4:6c:21:d1:c7:01:
                    a9:32:21:4b:60:6a:e1:a6:9d:8c:98:54:c4:93:b8:
                    bf:70:fa:75:e1:6c:d5:1f:84:25:47:2f:eb:77:d6:
                    96:be:1e:cd:0a:71:02:28:ae:2a:bb:79:76:b1:26:
                    dc:84:82:c8:41:87:c7:f1:ec:37:34:e2:33:33:06:
                    83:01:db:c1:2e:dd:ac:c7:ae:3e:8b:37:6f:e8:4a:
                    70:20:5d:13:cd:e4:08:4b:cf:9c:7f:1f:c9:b8:37:
                    7f:b5:bb:29:a4:79:c9:33:36:14:9a:97:a0:52:4d:
                    f9:a6:7e:54:55:5d:45:99:cd:50:3a:a6:db:fa:df:
                    4f:30:03:23:07:0f:11:1c:98:82:15:60:7a:d7:4e:
                    dd:8f:be:4c:1b:6a:2a:0d:de:e1:da:78:1b:ce:b4:
                    53:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8B:3F:11:E6:31:4C:37:5C:ED:94:C2:6A:57:0F:7D:C6:6B:15:F9
            X509v3 Authority Key Identifier:
                keyid:9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/kIs_EeYxTDdc7ZTCalcPfcZrFfk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.47.246.0/24
                IPv6:
                  2a0d:3c80::/31

    Signature Algorithm: sha256WithRSAEncryption
         40:a8:38:e8:d5:61:c4:2e:33:b9:fa:6d:43:a8:9d:e1:48:82:
         91:5b:b0:b3:ef:57:e2:e1:5a:5c:f5:f6:46:cd:18:7e:3c:df:
         c8:ac:1c:53:27:df:95:dd:eb:ae:75:f4:7d:80:85:05:bf:57:
         f2:b5:a1:62:89:32:95:05:9c:be:3e:ef:b0:1a:56:ee:11:ee:
         cf:e7:c4:df:e4:6c:21:6e:9b:db:af:b7:5b:75:a6:b6:cd:e1:
         57:2c:fa:60:48:49:08:13:44:9b:c2:89:8f:3f:56:e2:a9:08:
         30:17:60:f1:90:db:77:a8:bb:74:c0:d5:22:98:95:3a:10:69:
         72:2e:80:b7:8e:11:1b:bf:fc:ed:90:39:6c:56:3e:09:e6:90:
         df:d8:7e:63:9b:fb:51:00:1b:5f:54:17:19:22:b7:6c:35:a8:
         7c:97:66:9b:63:12:8a:11:6c:07:dd:ea:78:a2:db:0e:4d:4c:
         cb:e0:ab:0f:76:95:06:0a:7a:be:82:00:e8:dc:d7:1c:b3:74:
         8a:3a:ce:9e:33:51:52:4e:2a:2e:c5:7f:bc:c7:4a:5d:c7:28:
         e4:33:f0:91:76:c2:36:a7:f3:31:bb:51:bf:ac:10:71:7c:ba:
         4c:ac:16:80:e6:70:95:29:77:4b:bd:f9:37:ef:06:2b:53:d0:
         4e:6d:95:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----