Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/9-QqvBY1hUAnRzJQw44a_LiZwk0.roa
File:                     9-QqvBY1hUAnRzJQw44a_LiZwk0.roa (raw, json)
Hash identifier:          Wiz9RtceWsVgYPfDCWScaw54WuSutaiOATQ7EKmFaHA=
Subject key identifier:   F7:E4:2A:BC:16:35:85:40:27:47:32:50:C3:8E:1A:FC:B8:99:C2:4D
Certificate issuer:       /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial:       019420D5E53869E441CA1C5F80FCAFFF131F
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/9-QqvBY1hUAnRzJQw44a_LiZwk0.roa
Signing time:             Wed 01 Jan 2025 07:47:56 +0000
ROA not before:           Wed 01 Jan 2025 07:47:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21100
IP address blocks:        193.106.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:e5:38:69:e4:41:ca:1c:5f:80:fc:af:ff:13:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
        Validity
            Not Before: Jan  1 07:47:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f7e42abc1635854027473250c38e1afcb899c24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:94:c8:a1:f1:96:a5:ed:a0:a1:86:b3:00:aa:
                    d3:9a:65:76:46:d5:ba:b4:67:9e:9b:4b:f3:d3:b7:
                    e8:03:4e:ba:f4:9e:7e:84:83:a4:97:23:0f:c4:00:
                    15:3b:96:c5:d8:d8:88:87:a9:56:6e:c1:b9:db:12:
                    5a:99:c6:c9:d2:8f:7c:c4:50:90:fb:88:58:2c:1a:
                    72:a0:c8:42:6a:e5:3c:65:1b:e0:f7:30:5c:d3:5a:
                    35:cb:45:a6:3a:5a:ff:c1:99:c1:0c:33:48:f0:ac:
                    89:b4:34:9b:9d:6f:b1:a3:99:51:d7:a8:51:ee:4b:
                    46:c4:ed:d7:c3:4b:6f:40:ac:37:ae:36:ae:1d:ac:
                    8b:53:c7:44:a5:28:75:30:7c:8f:25:d3:af:da:f3:
                    3b:dd:56:20:26:f2:09:13:7c:aa:a5:84:1a:22:94:
                    8d:58:87:56:d5:78:31:cf:91:5f:29:0f:ec:02:2a:
                    3f:29:d0:b5:de:1e:a2:94:18:79:81:54:30:e6:7c:
                    0f:42:3b:0c:f3:02:18:38:56:df:3c:ca:93:c5:da:
                    8f:fa:f2:a2:78:e4:8d:b5:8c:f7:70:f3:27:8d:9d:
                    8c:68:17:e2:ed:19:26:ca:67:83:e8:16:d8:2b:4f:
                    f2:5a:cb:f0:b7:b9:d0:23:ba:4c:0b:0d:0c:4e:70:
                    31:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E4:2A:BC:16:35:85:40:27:47:32:50:C3:8E:1A:FC:B8:99:C2:4D
            X509v3 Authority Key Identifier:
                keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/9-QqvBY1hUAnRzJQw44a_LiZwk0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.106.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:0e:29:53:c9:82:77:16:16:7d:0a:74:ec:ca:a2:94:42:ac:
         ea:a4:d7:df:cb:ae:9e:29:e2:61:eb:7c:da:bb:28:5e:80:7d:
         8f:b0:26:b8:26:04:37:e7:44:a6:0e:63:84:85:26:5c:8c:f0:
         32:1c:7b:37:ae:4b:7a:a2:f7:05:5c:8b:9e:32:59:5d:fe:78:
         3b:7c:b7:d7:3a:80:f0:fe:ca:3a:dd:01:c2:e9:61:b6:5a:c2:
         cb:06:5d:75:9a:61:ae:ef:cf:c5:7f:09:78:ad:2d:4b:be:18:
         47:5c:9c:a5:4d:a9:cd:c0:7e:13:6a:c7:9f:d0:a2:da:a3:ac:
         6d:b7:74:23:3c:f8:d7:89:b0:34:35:23:3c:d9:80:73:a2:d3:
         c1:94:80:41:1c:c6:ac:4a:fb:0a:07:cb:12:26:18:74:18:70:
         fc:57:78:a1:27:fa:ad:ba:73:db:b3:65:f6:ba:dd:14:60:9d:
         d8:dc:ae:d7:00:29:94:b5:2f:94:bf:71:c6:86:a7:f1:d7:c5:
         6f:64:1e:d3:90:d7:af:7a:a6:d5:b0:0b:a3:79:eb:94:8e:d9:
         e1:ca:e9:39:9a:52:94:55:9a:a1:c8:dd:2f:c4:b8:e0:66:c3:
         47:c4:b2:c8:65:ab:07:0d:d4:cb:d9:67:46:80:8d:be:1e:c0:
         0a:8a:12:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----