Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/THn-YaWLx96HuhrNbGtVod7EkgM.roa
File:                     THn-YaWLx96HuhrNbGtVod7EkgM.roa (raw, json)
Hash identifier:          rsUPsLC3jm8thXVYAO+m9Ea1wFzIeFwCIPJOkL/61EY=
Subject key identifier:   4C:79:FE:61:A5:8B:C7:DE:87:BA:1A:CD:6C:6B:55:A1:DE:C4:92:03
Certificate issuer:       /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial:       019421B1D78151C7C2146F6A03EC432A1CE8
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/THn-YaWLx96HuhrNbGtVod7EkgM.roa
Signing time:             Wed 01 Jan 2025 11:48:10 +0000
ROA not before:           Wed 01 Jan 2025 11:48:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57480
IP address blocks:        91.232.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:d7:81:51:c7:c2:14:6f:6a:03:ec:43:2a:1c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
        Validity
            Not Before: Jan  1 11:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4c79fe61a58bc7de87ba1acd6c6b55a1dec49203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a4:e4:16:2b:fb:70:d4:15:31:a0:b3:9a:e0:
                    14:d3:e5:36:cb:8f:8e:15:3f:48:c0:0e:e1:83:87:
                    84:4d:b2:55:21:17:11:9b:c4:db:cc:70:45:e2:76:
                    0e:61:d8:30:90:e0:4c:8e:ef:62:7b:5e:e0:0c:7d:
                    cd:4e:ea:dc:42:6b:67:5d:3e:65:95:6c:8a:36:fc:
                    7b:ae:3a:2d:e4:c5:0c:8e:c9:ce:1d:be:4c:61:1e:
                    6f:79:c4:76:9b:42:11:92:b1:9f:dd:72:f0:1c:a9:
                    d8:21:9e:0c:ad:38:1b:a6:a5:66:fd:53:3c:75:81:
                    d5:65:a2:2d:d4:52:37:b0:d0:06:90:52:67:25:a9:
                    33:4b:86:a6:e4:5e:6c:bf:65:c1:72:b9:7b:e7:62:
                    dd:95:24:11:22:7b:78:41:87:e5:09:45:12:c2:f1:
                    21:a2:0c:d1:07:5a:40:03:2a:a7:aa:ac:bc:39:d9:
                    ff:ae:b1:5d:38:83:d3:29:fc:39:17:1f:ce:6d:22:
                    47:0a:c8:d3:a6:25:64:23:bb:4b:d6:3b:dd:38:65:
                    67:1d:b0:aa:6a:28:10:f3:e5:07:79:06:43:4b:0c:
                    a0:26:81:62:e3:34:0e:44:9c:0f:1f:0a:c0:08:74:
                    72:c1:8c:14:56:b4:f4:f0:5f:04:48:48:e4:9c:84:
                    8a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:79:FE:61:A5:8B:C7:DE:87:BA:1A:CD:6C:6B:55:A1:DE:C4:92:03
            X509v3 Authority Key Identifier:
                keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/THn-YaWLx96HuhrNbGtVod7EkgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.232.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:39:f7:c3:89:49:55:d6:65:6e:69:87:39:5a:f5:2c:05:d8:
         e4:69:9c:ee:dc:20:84:6a:5c:9e:2a:26:97:59:7f:54:1d:38:
         4d:3f:2e:65:d7:da:9d:6c:dd:72:6f:b1:57:7f:a2:89:ff:9d:
         e8:98:2b:1f:7c:3a:cd:16:b0:ee:99:5a:dc:52:74:4a:6e:7a:
         00:c9:b1:29:12:5e:c4:f5:9b:8f:88:84:4f:b6:95:32:2a:ed:
         0d:91:02:df:ea:a7:37:0e:90:a4:7f:87:67:90:d4:53:4c:e2:
         48:67:5d:f2:f7:f1:62:06:98:5d:b5:2d:9e:7d:ac:a1:17:e2:
         09:34:41:58:ea:a4:c2:5e:1b:3d:7e:c8:53:39:e7:df:8e:82:
         72:f6:e8:6e:8e:ad:6d:a2:d9:97:3a:03:de:7c:0d:d3:eb:ba:
         e0:43:8d:31:77:56:45:7d:d8:fd:a7:4b:61:22:cf:71:be:df:
         b1:ea:42:1f:28:74:bf:25:f7:a2:13:33:69:f4:63:f5:67:5f:
         5e:cc:5b:e0:a9:8e:d5:cb:67:bc:62:c8:e0:f5:ba:0a:a9:f2:
         1d:82:0f:9d:b9:3e:17:e6:4f:32:3b:c3:ac:e0:14:a9:c8:40:
         6f:1e:11:2a:ef:17:47:51:a6:e3:21:e8:3c:a4:90:2e:5d:e5:
         fd:34:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----