Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/QelVkPvZVWCxBapOPwgaFqXWmKg.roa
File:                     QelVkPvZVWCxBapOPwgaFqXWmKg.roa (raw, json)
Hash identifier:          UkNejNie1W0NtsZWuzq/6f+bUPaDd8BrDAzXa6becGg=
Subject key identifier:   41:E9:55:90:FB:D9:55:60:B1:05:AA:4E:3F:08:1A:16:A5:D6:98:A8
Certificate issuer:       /CN=276e13525244af0d2e640aba29b0f8236bc61e20
Certificate serial:       01936CE817CB42F43E8AC9771274B74A985F
Authority key identifier: 27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/QelVkPvZVWCxBapOPwgaFqXWmKg.roa
Signing time:             Wed 27 Nov 2024 09:16:09 +0000
ROA not before:           Wed 27 Nov 2024 09:16:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205358
IP address blocks:        193.17.32.0/24 maxlen: 24
                          2a07:f200::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6c:e8:17:cb:42:f4:3e:8a:c9:77:12:74:b7:4a:98:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276e13525244af0d2e640aba29b0f8236bc61e20
        Validity
            Not Before: Nov 27 09:16:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=41e95590fbd95560b105aa4e3f081a16a5d698a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:41:a7:2f:8a:c3:7d:de:3d:19:7a:8e:28:d8:
                    20:0c:30:86:21:bc:43:01:0c:16:38:be:66:db:0e:
                    68:e6:38:fc:40:c7:d8:3b:0e:95:9c:46:50:a8:cd:
                    34:dc:66:1c:31:32:44:58:7b:28:c4:7d:2d:4b:ae:
                    d9:c4:fc:2b:27:a3:e9:c4:68:69:25:ee:e4:12:a2:
                    70:c2:b9:5f:b6:ad:83:0a:b4:09:d7:87:1d:ec:3f:
                    d4:8c:83:13:db:99:5d:64:e0:43:f6:07:8e:85:5b:
                    d4:f4:ad:c1:66:c5:e7:3d:d8:3a:f3:73:a0:ca:28:
                    7c:aa:cb:15:4a:ce:da:97:78:4b:7e:bb:43:0a:47:
                    07:fe:9b:7f:2f:04:6c:3f:bf:5e:0a:c3:53:ba:cc:
                    ee:9a:80:e7:2e:5e:2e:d0:5a:d5:1f:e8:95:f6:d1:
                    b0:97:eb:f5:13:9d:38:62:e9:c6:77:e0:65:17:be:
                    5f:58:db:91:d3:bf:29:3c:94:44:b7:4a:2e:18:b1:
                    0d:cd:d4:f5:6f:45:a7:ea:4f:05:f3:a4:90:83:7a:
                    f9:1d:ea:91:4b:61:9b:d7:9a:6e:0b:ad:64:42:ed:
                    9b:cb:b8:8a:e8:07:ef:76:29:d6:ad:30:34:a5:e4:
                    01:bf:dc:43:7b:6b:e7:9d:0c:e4:ac:93:fa:4b:4f:
                    49:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E9:55:90:FB:D9:55:60:B1:05:AA:4E:3F:08:1A:16:A5:D6:98:A8
            X509v3 Authority Key Identifier:
                keyid:27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/QelVkPvZVWCxBapOPwgaFqXWmKg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.32.0/24
                IPv6:
                  2a07:f200::/29

    Signature Algorithm: sha256WithRSAEncryption
         46:6f:b2:c7:cc:69:97:b3:ab:1c:d2:72:8b:2f:6f:ba:54:30:
         73:87:b0:bc:99:14:78:ce:0d:0d:5d:19:1d:b0:02:77:89:20:
         53:bf:4d:b9:a9:3c:d2:2a:05:24:61:1f:59:e3:a8:79:ab:06:
         a8:df:ef:40:0e:f2:92:f2:f4:ad:88:76:eb:01:58:8c:2e:47:
         73:22:97:a5:56:06:40:38:6b:8b:ce:0b:54:e7:5c:11:cf:3b:
         eb:88:68:e6:95:7e:db:12:9f:0f:64:12:ea:78:c2:1a:f7:a5:
         d4:cc:4e:2a:9a:e0:4e:b4:72:fd:c0:e9:9e:03:a5:a6:76:6b:
         c4:ad:dc:1e:80:14:88:0a:cf:2e:d8:eb:3d:52:08:e1:3e:34:
         e9:89:45:4a:b3:1f:54:16:6d:4c:6e:46:15:0a:6c:d9:71:f5:
         90:3f:07:32:09:d9:9d:5b:e1:ea:6a:d3:db:31:5a:ea:45:d2:
         e3:c7:08:cf:5f:d4:ab:e2:7c:63:8d:3a:aa:ce:9f:04:81:e0:
         4b:e7:54:98:d1:c1:27:8f:37:a2:68:b6:a9:73:4a:4b:50:51:
         09:6d:bf:e2:2e:c4:ba:49:43:61:c7:5f:8f:dc:fd:ef:98:8f:
         0c:5b:70:66:e3:c1:81:5b:b7:df:60:60:c7:91:f8:30:f2:7f:
         97:d4:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----