Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/O_qQBhVPe-lhoDKH0xP6ZLUmsAc.roa
File:                     O_qQBhVPe-lhoDKH0xP6ZLUmsAc.roa (raw, json)
Hash identifier:          vu+grp6AJx6fVYcuWsQuJ7+juO2NiGJWuGAUCa5tGZs=
Subject key identifier:   3B:FA:90:06:15:4F:7B:E9:61:A0:32:87:D3:13:FA:64:B5:26:B0:07
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       019426D87356106F995C6826E1FE87037351
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/O_qQBhVPe-lhoDKH0xP6ZLUmsAc.roa
Signing time:             Thu 02 Jan 2025 11:48:27 +0000
ROA not before:           Thu 02 Jan 2025 11:48:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     196976
IP address blocks:        91.133.32.0/19 maxlen: 19
                          91.133.34.0/24 maxlen: 24
                          2a04:3100::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d8:73:56:10:6f:99:5c:68:26:e1:fe:87:03:73:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Jan  2 11:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3bfa9006154f7be961a03287d313fa64b526b007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ca:18:d4:ea:45:ba:fb:85:45:59:a3:e3:2b:
                    42:46:50:0d:ab:1e:d9:ac:43:7b:c1:06:73:a9:2d:
                    47:7d:ee:43:1d:83:e9:77:34:92:2b:8b:cf:15:12:
                    57:a4:ee:8f:c7:8b:20:91:55:8d:10:4c:62:fb:21:
                    5f:32:1d:64:2c:0d:61:12:82:4c:a1:db:d4:3c:a4:
                    81:c1:9d:3d:5f:29:34:23:2a:a3:09:01:46:e2:2f:
                    78:de:89:29:0c:83:31:9d:a8:47:0a:fa:88:3a:42:
                    8f:7b:59:d9:98:ec:19:db:36:50:0e:29:c0:44:5d:
                    1a:24:5c:22:96:95:a5:f2:d0:f1:0e:bd:b4:fa:18:
                    29:12:51:7a:fc:c3:a4:ab:05:2f:7f:6d:ff:48:fd:
                    22:0c:b0:85:a5:50:60:a8:48:70:f6:23:1f:08:dc:
                    2d:21:3d:b2:fb:3b:45:74:21:98:fd:83:f6:93:78:
                    3f:f7:c7:09:af:fe:ab:46:51:3b:f1:1c:b7:7e:ed:
                    63:cd:54:c7:8f:6b:a2:7e:d8:76:92:eb:f8:12:76:
                    eb:6c:b5:4b:a3:6a:a6:87:ae:bf:44:4e:c6:a0:7e:
                    b8:91:bb:00:c0:4c:42:23:40:65:89:6e:9c:f5:c1:
                    59:49:30:5d:8b:cf:8b:20:90:06:45:21:1a:a8:51:
                    40:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FA:90:06:15:4F:7B:E9:61:A0:32:87:D3:13:FA:64:B5:26:B0:07
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/O_qQBhVPe-lhoDKH0xP6ZLUmsAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.133.32.0/19
                IPv6:
                  2a04:3100::/29

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:3c:73:b6:3b:c6:96:32:f9:fc:ba:7d:d9:37:ae:4a:33:
         09:d3:72:da:f2:41:1d:c5:8d:89:64:76:f7:21:a7:2e:31:6a:
         9b:bd:d7:66:33:07:41:7e:45:e9:91:c1:69:d8:29:93:d5:31:
         5d:83:55:ec:80:a3:b9:ad:cc:c1:dc:9c:f2:f5:dc:45:22:65:
         a5:e4:75:b9:18:22:95:df:8d:80:bf:88:ab:01:68:6a:3a:34:
         b6:58:32:07:31:6a:aa:75:95:d2:86:55:f2:c8:6c:30:c6:80:
         49:42:85:db:b6:17:91:49:44:5a:3a:83:78:5c:9d:73:a4:df:
         80:93:e6:95:5c:4a:b2:35:90:83:8a:bc:39:ce:75:62:e7:5a:
         67:07:d4:c2:ca:85:a3:bd:f9:e4:ec:db:ca:97:92:7f:0d:b2:
         e5:f2:eb:19:bb:e4:36:20:8f:78:32:1b:2b:dc:13:31:e3:be:
         3a:90:03:dc:9f:75:67:79:17:d4:98:ef:ea:6e:a3:56:4b:9f:
         ff:87:fa:f9:43:ec:18:9c:2d:54:c4:a6:d0:77:33:d4:f5:f4:
         ca:4e:86:70:89:d6:25:1b:f3:26:d8:a9:65:08:c7:4e:b0:ff:
         f0:3b:da:7f:e0:c6:6d:d8:5d:62:a4:1b:ac:b8:1d:ba:ff:97:
         eb:41:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----