Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/mSTn9O6BnESLT6h3yoW1YArpQb4.roa
File:                     mSTn9O6BnESLT6h3yoW1YArpQb4.roa (raw, json)
Hash identifier:          7y3jZgmc8JKyp1pmRABgyXmd8BIDMBzt7/dcJJXvkSs=
Subject key identifier:   99:24:E7:F4:EE:81:9C:44:8B:4F:A8:77:CA:85:B5:60:0A:E9:41:BE
Certificate issuer:       /CN=55973204a369680586de27f946fc81665632aa83
Certificate serial:       01961F85EAC534E153D4585C884F4A5878E8
Authority key identifier: 55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/mSTn9O6BnESLT6h3yoW1YArpQb4.roa
Signing time:             Thu 10 Apr 2025 11:46:32 +0000
ROA not before:           Thu 10 Apr 2025 11:46:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56711
IP address blocks:        31.193.248.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1f:85:ea:c5:34:e1:53:d4:58:5c:88:4f:4a:58:78:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55973204a369680586de27f946fc81665632aa83
        Validity
            Not Before: Apr 10 11:46:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9924e7f4ee819c448b4fa877ca85b5600ae941be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:0d:be:4f:c2:90:be:ec:a4:72:5d:13:fb:
                    55:0c:45:e6:62:d8:ce:26:0e:04:3e:21:74:31:84:
                    9b:d2:da:2c:be:e3:a1:0d:b4:fd:ed:7a:2f:2b:60:
                    92:29:2a:24:f4:4c:80:c0:53:82:56:5c:27:86:e4:
                    a5:40:93:14:a6:57:3d:30:7d:c9:2d:26:c1:46:62:
                    b5:55:0c:f1:c5:66:64:4e:f2:a4:99:e2:f1:62:38:
                    9d:c9:cd:46:96:b0:e1:4f:e2:27:da:54:a0:4a:f3:
                    ec:e6:d4:e3:77:63:d5:35:c8:ed:d9:26:8a:23:da:
                    ca:aa:3b:c4:90:a7:b3:5a:70:5b:ac:22:9a:d0:8b:
                    68:a9:2d:c8:b1:ad:45:90:fe:a7:fd:f5:2f:e6:a9:
                    72:1f:0d:39:29:f3:6f:72:a6:0a:44:8a:ac:7b:0d:
                    af:3b:3e:f5:79:c5:a2:09:21:ff:ce:76:1e:56:60:
                    ec:51:7a:bb:0d:34:57:cb:39:ae:c9:c8:ad:37:14:
                    7f:13:32:a7:8d:fe:83:f0:7e:7d:b9:1c:c0:94:99:
                    1c:54:3f:71:f3:76:20:d6:98:85:0d:77:a0:5b:8d:
                    23:20:0a:8c:f3:fd:de:9d:17:80:07:49:74:70:7b:
                    3a:1a:47:ab:ff:87:18:1d:a5:3e:3f:e2:d5:ef:02:
                    12:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:24:E7:F4:EE:81:9C:44:8B:4F:A8:77:CA:85:B5:60:0A:E9:41:BE
            X509v3 Authority Key Identifier:
                keyid:55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/mSTn9O6BnESLT6h3yoW1YArpQb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.193.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:50:e8:64:c8:0d:f4:34:3a:27:02:65:a3:b6:f3:b9:ca:d3:
         78:b1:6c:82:31:4d:3d:d8:4a:0e:f7:45:28:6b:7e:f3:2f:ca:
         21:1a:16:ae:4d:60:b9:7b:c0:49:ae:ae:a1:5c:f2:1b:b3:97:
         ae:47:ac:88:6b:75:07:48:9f:2e:f6:ff:ce:2a:81:77:30:9e:
         db:61:63:1d:a1:5f:cd:3b:f7:2e:4b:88:7e:23:44:a6:17:6d:
         ec:58:af:0b:f4:21:3b:fc:20:ad:cc:73:70:6d:ca:35:f8:67:
         cf:f9:c6:5e:3d:75:08:db:e0:8e:2d:ae:b9:f5:6d:39:dd:7e:
         2b:63:f0:3e:33:47:14:7d:a3:85:42:83:54:06:a9:8f:e5:56:
         3a:ad:63:1f:c4:e8:72:9e:c6:70:1c:85:7f:ba:40:95:7c:ba:
         b6:b4:9f:87:4d:94:90:0c:e8:eb:01:43:bd:db:32:74:0c:b4:
         d2:8d:fd:3a:6a:24:fa:f8:9d:bf:2b:9f:84:7b:bd:6f:e3:bb:
         ea:0f:90:3f:8a:9e:78:24:7a:dc:c2:65:40:de:a7:04:52:c6:
         43:e6:6d:e3:82:62:f9:45:34:fe:bc:18:84:00:3e:e7:2f:90:
         0c:3f:db:23:46:b5:1c:eb:8f:1d:00:63:2a:e8:64:e7:00:c6:
         5a:95:97:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----