Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/OUuP-6YCe14zgkfTQMdJLc2r9MQ.roa
File:                     OUuP-6YCe14zgkfTQMdJLc2r9MQ.roa (raw, json)
Hash identifier:          Aex7iaImK8VF1F7ddVhsOVcjsTFE1aBCNKfli39IJNE=
Subject key identifier:   39:4B:8F:FB:A6:02:7B:5E:33:82:47:D3:40:C7:49:2D:CD:AB:F4:C4
Certificate issuer:       /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Certificate serial:       01941FFA79AE23D4E53740A22A5C6AD6DB09
Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/OUuP-6YCe14zgkfTQMdJLc2r9MQ.roa
Signing time:             Wed 01 Jan 2025 03:48:16 +0000
ROA not before:           Wed 01 Jan 2025 03:48:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31285
IP address blocks:        193.19.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:79:ae:23:d4:e5:37:40:a2:2a:5c:6a:d6:db:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
        Validity
            Not Before: Jan  1 03:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=394b8ffba6027b5e338247d340c7492dcdabf4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:58:fa:9a:5d:67:c9:fb:df:0d:f3:3a:0a:d2:
                    d4:e9:f5:af:b4:0c:4a:21:04:48:29:8f:da:e7:0a:
                    79:b2:33:10:8f:48:01:79:93:40:ae:51:31:8c:eb:
                    cc:ef:1c:a9:93:42:dc:63:fe:ef:6b:16:c2:d7:32:
                    5e:fe:3f:41:43:3d:34:18:0e:c1:d2:fd:5f:96:f5:
                    3a:f6:de:97:2f:8e:11:2d:60:ed:9c:2f:a8:24:4a:
                    b6:d8:42:50:24:ec:1a:5d:b0:bb:4d:2f:c3:2b:f8:
                    cd:91:aa:29:d1:8a:39:d2:d0:bf:4c:dd:c9:ca:f4:
                    a5:81:80:23:80:df:22:cb:1c:96:b8:2f:f6:33:c2:
                    de:bf:e9:7c:b3:24:35:63:7b:98:02:06:a3:15:b1:
                    8f:fd:32:e1:58:35:96:4e:35:ee:19:cc:15:e4:4d:
                    63:e6:be:4f:40:45:86:fe:d5:e4:f3:45:f8:37:a1:
                    a4:31:40:be:74:db:21:34:10:f6:e5:e5:04:03:9f:
                    fe:f1:e4:1b:52:59:3a:44:55:ba:d2:64:fe:ee:51:
                    ae:f4:2b:1a:1e:df:33:53:66:95:d3:8a:dc:ae:b0:
                    3a:51:ae:b4:bc:28:b6:29:dc:7c:43:40:4e:6f:84:
                    ea:f3:04:9b:6c:4c:a9:8d:e1:ce:76:f0:30:b2:62:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4B:8F:FB:A6:02:7B:5E:33:82:47:D3:40:C7:49:2D:CD:AB:F4:C4
            X509v3 Authority Key Identifier:
                keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/OUuP-6YCe14zgkfTQMdJLc2r9MQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.19.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:03:3d:1f:9c:21:c4:9f:52:a5:e1:e5:3d:b2:61:b1:9b:d7:
         0f:46:09:fd:a5:fb:83:e1:10:7f:06:d2:00:5c:74:64:da:22:
         66:76:8f:e1:2f:b6:0f:b2:e3:5e:91:a5:0d:c8:85:dd:c3:6e:
         d2:87:61:8a:59:9a:c1:f5:0d:03:90:d1:a3:c6:b6:22:1b:00:
         e4:85:f7:4b:4d:1c:8d:30:85:b7:93:49:67:fc:c3:52:6c:c4:
         a3:d8:48:36:77:5e:14:b9:75:5e:a8:43:3f:b5:7f:5c:86:ba:
         00:9c:3a:3b:6e:f0:c1:ae:ec:b9:40:bb:e4:cc:d2:5c:a8:37:
         06:31:f7:7e:1a:31:92:02:75:9f:64:67:6d:de:52:44:5d:5a:
         ff:23:0e:0f:8d:d9:bb:b1:ae:94:13:05:90:3f:20:e2:51:5e:
         0d:f3:33:93:4f:bc:a2:d3:20:4e:27:5c:e1:b9:48:f1:10:3c:
         78:44:28:d7:66:d4:29:a2:7b:4b:a9:51:1e:5f:ee:98:a8:1a:
         d4:ca:bc:d5:42:d6:8c:1c:50:34:fe:bb:e4:92:1a:dd:72:d2:
         32:37:fd:b5:af:bf:2b:5e:34:49:db:b0:af:db:2f:4c:0a:df:
         b5:bb:ee:c1:e7:c5:3c:fd:55:9b:8e:50:c1:89:68:03:a0:f7:
         e5:47:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----