Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa
File:                     3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa (raw, json)
Hash identifier:          r9nE6BN+YAUaWRC/VJWHKz/x1whGDYTMWiwj3TDgzA0=
Subject key identifier:   DF:F1:5A:8F:60:71:DF:44:0C:05:0F:FD:7E:AD:70:D2:60:D7:E8:65
Certificate issuer:       /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial:       0194266BFF69337F367B252D5DCDCE2E2BCF
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa
Signing time:             Thu 02 Jan 2025 09:49:59 +0000
ROA not before:           Thu 02 Jan 2025 09:49:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62298
IP address blocks:        91.205.40.0/24 maxlen: 24
                          2a01:5340::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:ff:69:33:7f:36:7b:25:2d:5d:cd:ce:2e:2b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
        Validity
            Not Before: Jan  2 09:49:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dff15a8f6071df440c050ffd7ead70d260d7e865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:a5:90:3d:70:a2:ca:8a:9c:f2:e6:cc:1f:
                    9a:52:4c:2d:bb:73:bd:16:0e:1d:5b:77:25:06:d8:
                    7b:30:4e:78:e0:02:e4:b9:85:ab:00:8f:3d:a5:3a:
                    95:86:94:49:30:fd:ef:44:64:50:5f:69:70:43:3d:
                    58:ea:b8:dd:3a:26:8c:ae:94:d2:3f:f2:48:a0:7f:
                    84:96:12:eb:0a:d6:62:a3:ff:4f:19:6c:bf:cb:c4:
                    c8:9e:1b:90:57:a5:ff:db:51:ec:a6:59:0b:82:48:
                    bd:f1:25:e0:1e:fb:37:bf:8a:b8:0f:80:a5:0b:cf:
                    e0:d4:8b:52:d2:cb:1d:8a:c4:3c:c6:e9:6d:6f:9f:
                    5c:93:57:bf:e6:38:4b:cb:17:64:ed:89:7f:3d:1f:
                    76:c6:d6:4e:76:0f:72:2e:bf:83:86:fd:5a:8e:97:
                    5a:35:65:76:9d:de:2b:3d:bb:a1:73:76:c1:9f:c5:
                    c5:a3:3b:c3:06:40:f3:ad:77:93:45:a9:f5:18:7f:
                    9b:f8:04:44:3a:1c:c3:4e:82:7e:59:83:e4:cf:55:
                    f9:0b:0f:79:6d:24:90:a0:22:4d:32:be:e9:70:42:
                    74:45:a1:c2:d9:ff:ca:97:3e:5c:2c:5b:8a:44:62:
                    d2:37:6d:3a:9c:4d:26:3a:e2:24:19:94:95:a4:9d:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F1:5A:8F:60:71:DF:44:0C:05:0F:FD:7E:AD:70:D2:60:D7:E8:65
            X509v3 Authority Key Identifier:
                keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.40.0/24
                IPv6:
                  2a01:5340::/29

    Signature Algorithm: sha256WithRSAEncryption
         2a:4c:c3:38:f7:c7:50:35:56:cb:93:90:65:e0:30:06:3b:ea:
         5b:ff:4b:06:a5:ab:c7:34:99:f3:7f:0c:a6:83:24:d5:79:39:
         07:55:74:71:4b:60:de:46:16:6c:1f:d0:f2:7e:8e:ff:9a:55:
         19:67:bf:76:f9:94:fa:93:52:1a:c4:7c:87:c3:6a:e1:06:a0:
         98:af:81:87:c5:1c:fa:18:50:43:c9:4f:f6:9b:04:17:10:c3:
         45:36:74:37:a3:e1:de:d2:76:2e:88:a6:55:a9:4f:f7:87:be:
         00:cf:cc:a6:d5:d4:05:15:24:6a:11:38:27:68:4b:ba:90:07:
         3f:6d:5a:97:c6:ac:ef:d6:f2:7f:5b:e7:c7:6c:a8:5f:e3:7c:
         f5:75:03:5d:08:ac:62:e0:11:04:df:d8:15:e3:0d:28:43:12:
         3c:33:f0:24:a6:96:f0:5a:9a:3b:02:e4:26:cd:a3:98:a1:36:
         41:d8:99:54:45:ec:95:b3:83:e2:b7:4f:6d:f3:04:c3:26:65:
         7f:3f:28:a8:91:1f:92:2b:e4:85:0d:e2:f2:42:85:07:70:4b:
         40:a8:e3:ef:38:3b:e1:ab:85:e9:0f:9c:d6:a2:5c:dc:93:6c:
         e0:4c:b7:db:0a:3e:b3:bd:aa:f4:0b:6b:14:b9:a6:e1:df:7d:
         2c:aa:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----