Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/RDF-NePEmRJcDAmBHgE3ouhvotw.roa
File:                     RDF-NePEmRJcDAmBHgE3ouhvotw.roa (raw, json)
Hash identifier:          1bzzq1RgAPUvNRAFiKBpOQOX4z3jsFgWx7hQBNhJbUI=
Subject key identifier:   44:31:7E:35:E3:C4:99:12:5C:0C:09:81:1E:01:37:A2:E8:6F:A2:DC
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       0193F4CE5CF15825311D6AF8736835C1D8A0
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/RDF-NePEmRJcDAmBHgE3ouhvotw.roa
Signing time:             Mon 23 Dec 2024 18:36:25 +0000
ROA not before:           Mon 23 Dec 2024 18:36:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58051
IP address blocks:        193.105.207.0/24 maxlen: 24
                          2a01:fdc1::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f4:ce:5c:f1:58:25:31:1d:6a:f8:73:68:35:c1:d8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: Dec 23 18:36:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=44317e35e3c499125c0c09811e0137a2e86fa2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:30:44:a5:a1:dd:b1:8d:03:0a:ea:35:f3:0d:
                    a2:06:98:e7:57:fc:39:3a:92:1e:45:a2:5d:aa:bf:
                    29:cd:d8:6c:bd:3c:95:83:14:95:ab:72:06:05:46:
                    0b:0d:7a:1f:70:d1:35:b6:fc:f5:9b:b1:db:f8:3f:
                    a2:6a:08:cf:1b:9c:3b:cb:1d:2e:e9:eb:b0:4a:0c:
                    34:11:e5:54:b1:e9:f8:21:e3:3b:69:93:a4:2a:e4:
                    6f:0a:f6:12:41:af:61:cf:de:90:21:af:d5:fb:58:
                    da:68:f3:15:fa:34:8c:68:d5:4d:fe:13:af:0e:2b:
                    aa:f7:40:40:2c:b1:12:57:32:9a:41:ae:92:e8:0f:
                    f6:d5:cb:b7:50:39:d7:d0:13:89:55:e8:1e:98:7e:
                    fc:99:7d:e1:0a:3c:68:d0:13:03:85:35:95:b1:15:
                    92:aa:b6:fc:d7:c1:a6:7c:ab:01:71:19:ae:71:06:
                    d2:8c:1b:fe:c3:6d:76:cd:bc:9c:e9:bc:83:9e:f8:
                    eb:1d:1b:64:58:49:0a:56:9d:a3:19:d8:6c:18:20:
                    77:4e:c8:a9:5a:a7:ea:3a:21:33:d6:59:3b:69:93:
                    ec:c7:a8:8f:d6:8b:b5:4e:b4:64:9f:94:53:5c:b6:
                    ee:8f:d4:7a:2d:0c:8d:5d:29:dc:24:ce:7a:98:69:
                    8e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:31:7E:35:E3:C4:99:12:5C:0C:09:81:1E:01:37:A2:E8:6F:A2:DC
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/RDF-NePEmRJcDAmBHgE3ouhvotw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.207.0/24
                IPv6:
                  2a01:fdc1::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:e4:32:32:44:f1:32:ce:0c:be:00:d8:45:d7:00:d6:f2:0a:
         bc:73:58:ea:56:9b:78:52:d0:f5:6c:07:d7:fd:2d:41:c0:03:
         05:0f:c6:77:34:41:bc:b0:95:ee:4b:8e:94:1e:d2:05:5b:64:
         18:82:9a:4f:1d:2d:7f:3f:49:64:d4:a8:4c:7e:3a:f9:cc:03:
         1f:42:d7:c0:5f:a9:3b:8b:83:91:1e:82:f4:f1:12:73:d5:d5:
         47:13:27:42:35:05:61:87:04:46:9d:de:0b:4b:9c:ea:74:06:
         aa:75:c6:83:54:53:0d:e2:2e:ed:dd:1e:5e:91:f2:8e:f8:c8:
         9d:d7:fb:26:a0:9f:e6:86:00:6d:98:36:c7:ff:d6:7f:ad:92:
         ea:97:c6:99:7e:9f:26:19:9b:61:5d:82:3f:97:12:f9:32:25:
         19:07:0d:17:af:fe:bb:4d:eb:1e:58:af:2c:b6:7f:38:1a:fe:
         cf:0c:b7:ee:1f:41:d0:98:da:2e:c0:0b:82:b5:0f:ca:e6:d5:
         24:1b:8c:73:fe:c8:c4:10:9f:a5:a2:8d:68:cf:3a:69:cc:41:
         3e:f8:8e:20:90:63:f5:ee:30:a6:25:0d:62:ec:f8:7f:b9:c2:
         dc:a8:21:80:e0:63:fa:e8:d2:5d:bb:24:10:af:fa:12:73:cd:
         12:08:c7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----