Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/nOdF_GFZE_ScYtGHzx3MPSmQaPM.roa
File:                     nOdF_GFZE_ScYtGHzx3MPSmQaPM.roa (raw, json)
Hash identifier:          Hs8kkhzWSInG2bbz2V+A6c+fmfyTkYFnJuZQoyAUjhc=
Subject key identifier:   9C:E7:45:FC:61:59:13:F4:9C:62:D1:87:CF:1D:CC:3D:29:90:68:F3
Certificate issuer:       /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial:       018CC49373E74BFA3A0DC93ADEF157F77AAD
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/nOdF_GFZE_ScYtGHzx3MPSmQaPM.roa
Signing time:             Mon 01 Jan 2024 10:30:46 +0000
ROA not before:           Mon 01 Jan 2024 10:30:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49362
IP address blocks:        193.9.160.0/19 maxlen: 19
                          2a0d:aa00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:73:e7:4b:fa:3a:0d:c9:3a:de:f1:57:f7:7a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
        Validity
            Not Before: Jan  1 10:30:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9ce745fc615913f49c62d187cf1dcc3d299068f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:65:9d:6b:7f:c8:3b:ab:88:f7:49:59:2c:56:
                    8a:5c:48:28:30:0a:46:dd:43:d4:11:b7:23:45:d8:
                    72:9d:61:a2:3c:49:07:3e:f3:29:5d:2d:f4:c8:af:
                    2c:30:8d:9c:24:72:30:22:36:32:de:9c:68:f6:b3:
                    3e:5c:e6:2c:3a:65:2d:bd:e7:9a:78:98:ef:b6:37:
                    9a:bb:b7:52:35:cf:af:65:6b:59:a9:3f:fe:2c:b4:
                    8c:52:95:0b:1b:da:dd:b1:22:a4:dd:9f:15:ef:31:
                    68:d3:23:62:ee:74:04:6e:45:f7:5e:fc:68:f8:e9:
                    9d:dd:cd:52:31:4c:78:ae:03:0b:48:46:a4:da:88:
                    0e:83:30:15:88:84:70:81:6d:e4:c0:cb:ba:59:90:
                    ed:bd:0b:24:ff:2a:65:9c:55:85:01:4c:82:74:8c:
                    14:4a:e9:53:f3:34:6e:b8:34:2d:24:87:08:65:2a:
                    bd:80:c6:80:68:11:c7:f6:b0:70:8e:f6:f4:bb:19:
                    b6:21:3a:f9:77:b6:81:d6:74:2b:83:71:4c:2b:b0:
                    93:30:19:9d:ce:35:01:ee:a7:70:da:89:52:38:97:
                    30:cc:cb:12:ff:2f:e2:48:a9:7a:05:8b:83:3f:57:
                    e0:73:79:5c:a4:96:61:a4:e0:fe:c7:73:0d:a5:d3:
                    6e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E7:45:FC:61:59:13:F4:9C:62:D1:87:CF:1D:CC:3D:29:90:68:F3
            X509v3 Authority Key Identifier:
                keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/nOdF_GFZE_ScYtGHzx3MPSmQaPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.9.160.0/19
                IPv6:
                  2a0d:aa00::/29

    Signature Algorithm: sha256WithRSAEncryption
         22:c1:9a:f2:aa:86:44:da:aa:5e:c3:db:45:6b:76:53:d2:2f:
         e5:4b:ca:53:40:c6:1e:99:40:f6:01:14:c9:2d:f5:f0:8d:c3:
         97:6d:f0:3f:be:48:51:c5:a7:72:cb:83:76:78:66:34:bb:e6:
         a2:2f:87:78:f5:a4:f8:be:62:07:04:7c:a6:e7:42:39:71:72:
         1f:d5:26:79:b2:b8:aa:09:6b:40:e4:b2:34:d8:2d:be:30:60:
         52:4d:89:6f:d3:0c:b0:36:ad:bd:ff:17:50:87:b5:da:a6:49:
         84:8e:b5:23:ca:4f:eb:95:d3:32:25:c6:da:8a:41:a5:75:cf:
         f9:1e:34:04:dd:60:27:67:e8:bb:05:11:86:75:f1:f7:7b:fe:
         bb:74:64:04:1b:84:07:21:37:4b:b6:74:34:53:e1:5d:a7:d5:
         f6:c2:f5:42:c5:b2:be:48:c8:39:41:6d:19:e4:98:59:a8:99:
         17:21:fe:a2:ca:0d:d8:fc:46:68:72:80:ce:32:6b:8a:ef:7f:
         72:36:76:f7:18:ac:50:24:74:23:6f:0a:c9:bd:0b:b8:c5:c0:
         6d:a6:b6:19:84:74:76:00:5d:7f:a7:10:fb:a4:61:43:d7:3e:
         09:02:a5:17:b0:d2:67:1b:8e:ac:15:32:b5:75:5e:65:0a:da:
         6e:e5:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----