Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/mjbrv8dV-mIT7_28FQYeIF2tc5Y.roa
File:                     mjbrv8dV-mIT7_28FQYeIF2tc5Y.roa (raw, json)
Hash identifier:          9NS9LnbdoLNr2dkro0L8OB2u3Er8Jl5oontPY7h5sGY=
Subject key identifier:   9A:36:EB:BF:C7:55:FA:62:13:EF:FD:BC:15:06:1E:20:5D:AD:73:96
Certificate issuer:       /CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Certificate serial:       019420686F02C23E086F2592C1BACB131F9C
Authority key identifier: 51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/mjbrv8dV-mIT7_28FQYeIF2tc5Y.roa
Signing time:             Wed 01 Jan 2025 05:48:22 +0000
ROA not before:           Wed 01 Jan 2025 05:48:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20509
IP address blocks:        193.178.232.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:6f:02:c2:3e:08:6f:25:92:c1:ba:cb:13:1f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
        Validity
            Not Before: Jan  1 05:48:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9a36ebbfc755fa6213effdbc15061e205dad7396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:40:21:05:32:59:9d:b5:24:de:a1:8b:77:6e:
                    87:f8:dc:f4:30:33:f6:67:87:68:ac:1f:f4:62:21:
                    19:37:0b:a8:5a:65:48:de:fa:c6:fd:4f:c4:ed:f4:
                    d0:96:f6:d6:23:62:2e:29:c7:51:f3:da:2f:d4:32:
                    45:c6:6f:ea:7b:f4:df:52:c0:c9:a2:0e:b3:d5:54:
                    8a:0f:52:6b:e7:39:53:84:6e:a2:17:52:b3:87:27:
                    62:d2:23:da:9a:0e:c3:4e:b4:92:07:e9:32:e2:08:
                    24:de:af:d9:c3:0f:6c:f1:44:28:98:dd:6a:97:11:
                    78:23:4e:cc:20:ac:21:57:d0:22:8f:70:f3:f9:4d:
                    91:1a:93:8f:c2:9d:8a:8d:c5:82:91:e2:0d:a3:b8:
                    7e:92:45:35:ae:6c:3b:a3:cb:82:44:61:e5:bd:de:
                    39:1c:bc:a8:fa:12:da:4e:e4:ff:22:1d:1c:0f:f2:
                    08:d2:3b:78:66:7a:f8:17:76:9a:cf:53:cf:d7:d5:
                    81:bf:e7:3e:2d:ba:c4:c7:b5:ab:b5:24:45:64:33:
                    2a:ea:6a:5c:1d:7b:c4:14:80:59:dc:2e:c5:0e:39:
                    5f:41:bc:a6:67:8a:10:77:4f:df:bb:b0:3a:f0:a4:
                    73:01:aa:7d:ff:19:a1:7e:fd:56:97:fc:04:12:64:
                    53:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:36:EB:BF:C7:55:FA:62:13:EF:FD:BC:15:06:1E:20:5D:AD:73:96
            X509v3 Authority Key Identifier:
                keyid:51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/mjbrv8dV-mIT7_28FQYeIF2tc5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:ab:16:aa:90:20:1c:a6:b8:f2:7f:5d:2b:f0:fa:83:d1:21:
         bc:09:a4:ca:84:d9:ec:c6:04:e3:a3:a0:27:f1:db:98:ec:d9:
         a9:14:22:8e:5c:54:4e:48:3e:98:f2:95:3f:f8:c5:a8:68:03:
         2f:c8:2c:c4:a8:7d:3b:fb:bd:2c:86:05:9f:33:e8:f6:21:21:
         08:3c:27:7c:fe:10:bf:ef:66:aa:9d:89:85:40:de:80:cd:73:
         72:8e:19:16:57:66:be:15:6c:98:20:23:2d:bc:d6:12:1c:d3:
         e1:c4:c0:1d:16:a3:2b:f8:24:b8:75:e3:40:9b:15:ae:52:f4:
         77:4f:08:c4:b3:b1:0d:aa:1d:19:ca:c9:b1:ac:bf:ab:d3:4c:
         ea:c0:57:10:b4:09:a8:6b:80:42:2a:01:8b:4c:91:5b:0f:1e:
         69:a1:44:93:42:0e:04:42:00:7d:9a:0d:9b:0a:5f:51:81:4e:
         d1:86:bd:a6:66:ec:c2:fe:92:3f:49:24:79:b8:a1:de:fa:45:
         0f:a7:40:d2:91:a5:1e:e0:2f:c2:70:3c:05:c0:4f:64:b0:34:
         0b:c3:c5:dc:75:36:6b:09:b7:59:3e:1a:a9:9b:7c:12:ec:67:
         ea:32:e4:1c:ae:e7:01:bf:1c:08:a7:3d:e6:68:e7:f5:a6:7f:
         2d:cf:80:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----