Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/NEqj8BvBPOtkH45qzmLazZkmCpA.roa
File:                     NEqj8BvBPOtkH45qzmLazZkmCpA.roa (raw, json)
Hash identifier:          1CSuBVjeUix6GCeWhV3QFu5H8gx07d5za8DUe8nOaxY=
Subject key identifier:   34:4A:A3:F0:1B:C1:3C:EB:64:1F:8E:6A:CE:62:DA:CD:99:26:0A:90
Certificate issuer:       /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial:       01941F8C67567172EB7BE8E7264EABFC27DB
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/NEqj8BvBPOtkH45qzmLazZkmCpA.roa
Signing time:             Wed 01 Jan 2025 01:48:02 +0000
ROA not before:           Wed 01 Jan 2025 01:48:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197416
IP address blocks:        91.220.156.0/24 maxlen: 24
                          2001:67c:22a8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:67:56:71:72:eb:7b:e8:e7:26:4e:ab:fc:27:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
        Validity
            Not Before: Jan  1 01:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=344aa3f01bc13ceb641f8e6ace62dacd99260a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:5b:46:cb:69:d4:9c:6d:aa:ea:fc:41:b1:
                    6d:09:0a:d2:3b:d5:33:ed:f7:c9:c9:5a:e4:09:4f:
                    06:cb:3d:26:dd:c5:94:e4:17:55:84:38:0f:af:d2:
                    27:24:95:c3:74:31:9b:29:1c:40:c3:6f:c3:ca:3d:
                    5f:2d:a4:e4:02:c4:4b:a8:db:e6:c4:94:c0:23:bc:
                    12:74:85:45:d9:9f:68:44:83:46:63:3b:96:b3:dc:
                    c2:bd:11:f1:a5:e1:32:70:f4:71:d4:53:a8:8f:32:
                    7e:6f:8d:72:8e:81:fd:fd:14:c2:83:7c:64:32:24:
                    7b:2d:f8:85:10:a5:6f:9d:fe:ed:ef:a1:e4:ac:ce:
                    e7:ad:58:6b:c2:10:78:cb:79:8e:fb:f6:b7:1d:25:
                    06:e4:0b:07:86:a9:ed:49:53:b8:30:60:da:4e:4b:
                    d4:a8:54:2a:6f:8a:eb:28:00:db:bf:1e:2f:01:d8:
                    72:32:32:09:b0:fe:96:8b:83:56:cb:eb:ec:55:36:
                    43:23:10:4b:58:47:96:24:9d:a2:25:cc:a1:9c:db:
                    5e:ef:47:86:4c:03:e3:b0:22:96:ba:32:56:33:e7:
                    ee:93:21:ad:08:43:6c:f8:4b:35:c8:a4:70:d2:58:
                    6a:04:54:58:56:3e:78:f2:e4:b2:9e:2f:a8:c8:0d:
                    38:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4A:A3:F0:1B:C1:3C:EB:64:1F:8E:6A:CE:62:DA:CD:99:26:0A:90
            X509v3 Authority Key Identifier:
                keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/NEqj8BvBPOtkH45qzmLazZkmCpA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.220.156.0/24
                IPv6:
                  2001:67c:22a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:69:fe:94:7a:00:c9:8c:18:42:70:8a:d2:68:fd:06:5e:a7:
         13:c1:5c:d9:38:b6:56:8b:90:8c:a1:6f:99:17:ba:08:be:29:
         4f:01:84:14:e6:ac:d4:26:cc:14:de:ab:64:12:46:4c:30:64:
         cc:53:66:ee:8e:be:aa:70:b5:1a:14:ce:27:ba:85:22:bb:f0:
         18:ca:06:85:e4:df:fa:ac:f0:6d:26:fc:e2:c1:aa:7e:82:5e:
         43:d0:df:af:6c:9b:1c:2f:2a:07:89:d1:f8:b6:2b:d6:a8:77:
         dd:0c:cc:06:6a:a3:ef:5b:86:16:ac:4e:bd:6a:b2:d7:e3:27:
         8c:13:87:8c:9f:aa:e3:1e:13:b9:d6:99:0c:e5:21:e7:8d:1c:
         fb:de:9a:f8:3e:33:e7:5c:48:97:e5:b1:42:65:28:32:a1:fe:
         ff:f7:fb:96:1e:bc:5d:0a:39:85:20:89:a2:7c:9a:e4:65:3f:
         f3:46:27:4d:6a:e8:b2:a2:74:42:32:99:00:19:be:28:98:45:
         cb:df:46:1a:54:a2:3c:3a:0c:43:9e:ee:10:09:ae:46:31:a9:
         f0:ac:1e:63:bf:46:2a:66:69:0f:1c:d4:98:c2:e1:05:c3:1f:
         8d:4f:f1:3e:9f:80:c9:31:ed:c1:db:71:c1:f9:c7:79:57:12:
         a0:00:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----