Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/7tdpn3LvL4ATw0CK_nHXC0-PM_g.roa
File:                     7tdpn3LvL4ATw0CK_nHXC0-PM_g.roa (raw, json)
Hash identifier:          //EiIzMHwuVi0THXNdxsIrv8Y+yxoxo1dBTprYwHSf0=
Subject key identifier:   EE:D7:69:9F:72:EF:2F:80:13:C3:40:8A:FE:71:D7:0B:4F:8F:33:F8
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       01941F8CB325510DC1B5D1CF138EF5B3311C
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/7tdpn3LvL4ATw0CK_nHXC0-PM_g.roa
Signing time:             Wed 01 Jan 2025 01:48:22 +0000
ROA not before:           Wed 01 Jan 2025 01:48:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198479
IP address blocks:        91.235.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:b3:25:51:0d:c1:b5:d1:cf:13:8e:f5:b3:31:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Jan  1 01:48:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eed7699f72ef2f8013c3408afe71d70b4f8f33f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:b5:88:49:8d:b5:78:27:91:b8:e0:0a:65:
                    79:b3:1e:69:8f:cd:6f:47:20:59:16:5f:0a:78:e3:
                    d2:7e:ca:86:20:2c:c4:00:0e:b4:ec:25:ec:9a:78:
                    c0:7c:78:9e:49:55:e1:bb:d8:51:47:ab:22:7f:18:
                    5e:5a:45:e8:6a:8f:11:44:46:fc:75:0b:9c:1a:fc:
                    1e:69:d8:40:37:22:d3:89:95:ad:cc:31:39:6e:e1:
                    88:57:6f:8f:04:71:92:c2:3d:e0:57:bf:75:37:89:
                    da:37:62:0d:3c:3e:59:47:35:aa:58:1a:76:e0:90:
                    2d:a6:42:71:d8:40:0e:64:f5:82:39:f2:52:63:57:
                    dd:2b:b9:ef:39:ae:79:cf:a7:33:fc:e9:9a:cf:c9:
                    e3:3b:5e:02:32:6f:39:40:e4:b8:03:fe:df:d5:a8:
                    6a:55:ab:f3:42:9d:28:04:0a:c7:66:cb:5c:1e:f2:
                    9e:45:cc:22:d5:d4:ba:19:0c:f1:af:93:cc:25:25:
                    11:1e:d4:80:af:fb:77:c9:53:eb:55:28:28:12:8f:
                    7e:c3:6f:8a:a5:05:b5:ae:20:e9:68:00:9f:7d:19:
                    38:95:e8:14:95:81:36:56:fa:50:76:98:a8:83:07:
                    d8:8d:3a:be:29:a6:fc:37:4e:75:da:1a:d7:cf:8d:
                    bd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D7:69:9F:72:EF:2F:80:13:C3:40:8A:FE:71:D7:0B:4F:8F:33:F8
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/7tdpn3LvL4ATw0CK_nHXC0-PM_g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.235.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:4b:84:44:8e:17:d6:52:cd:b6:2c:4a:22:ba:5d:83:d5:91:
         90:5b:af:dd:74:08:30:66:f8:d5:93:8c:56:e4:85:61:4b:90:
         8c:5d:8a:a3:58:d1:5e:6b:f1:b8:14:9a:8b:d8:1f:5c:e0:ba:
         06:f7:f7:f6:40:d3:e5:8c:e2:12:15:b7:0c:fa:a6:69:da:ea:
         49:51:a6:76:8a:72:b3:f0:56:f1:cc:af:ec:b0:bd:3d:f6:6c:
         75:81:2b:75:48:a1:db:1f:e2:61:d8:cf:e7:de:f5:e7:2a:47:
         25:00:76:f3:a7:1e:92:56:06:db:90:0c:6b:ee:1f:7d:5d:9f:
         ac:64:76:3b:a5:ad:11:5d:0c:5a:96:79:98:16:12:a3:40:5e:
         98:66:ef:a1:85:d1:38:4a:98:f1:29:de:a1:da:16:d1:2f:18:
         45:98:08:03:b9:bc:0f:1f:91:92:4e:0c:1b:f5:2a:9c:5f:95:
         4b:08:21:f6:02:d6:8e:45:cd:1e:5d:c7:fd:69:7e:59:3c:1d:
         5f:f6:b0:e2:39:8c:3e:45:fc:b9:98:83:2c:fb:db:e6:1e:a2:
         35:35:c0:18:13:8e:80:c0:3d:ad:d4:e9:f8:50:18:0e:13:11:
         fc:f8:d5:05:00:83:c1:91:45:88:2b:a8:aa:dc:ee:51:29:44:
         a8:11:db:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----