Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa
File:                     BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa (raw, json)
Hash identifier:          t+OljMW5uOHxrHIlucZj5mZPbb09wnIuaUx+FWzOywc=
Subject key identifier:   05:3F:90:28:B0:84:E0:C6:74:62:D5:80:DA:70:24:EA:AA:71:BF:A8
Certificate issuer:       /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial:       019427480ACF5E683E223F88D15C01E8A4D8
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa
Signing time:             Thu 02 Jan 2025 13:50:20 +0000
ROA not before:           Thu 02 Jan 2025 13:50:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197881
IP address blocks:        91.227.110.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:0a:cf:5e:68:3e:22:3f:88:d1:5c:01:e8:a4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
        Validity
            Not Before: Jan  2 13:50:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=053f9028b084e0c67462d580da7024eaaa71bfa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:4f:45:97:e2:3f:1e:6f:f8:7d:37:00:7a:
                    35:46:83:c9:3b:31:f3:b0:60:eb:42:64:2b:42:d8:
                    1f:cb:fd:a1:3a:54:de:71:fa:f2:82:da:63:19:f4:
                    e9:8f:5a:10:97:9a:9a:1d:09:ee:b6:a2:4b:f8:59:
                    a7:7d:f9:bd:3d:14:03:85:a2:d8:48:be:9a:df:60:
                    b6:25:f0:05:b9:bd:82:7d:4b:53:8e:24:86:b9:3f:
                    e1:96:c5:0d:a7:66:0e:62:3b:35:ee:4f:b1:c1:a0:
                    11:f9:51:4f:88:cf:be:f7:23:7d:b5:f2:e6:7b:71:
                    3d:9f:7d:a7:d0:b3:eb:ec:70:bb:b0:3b:4e:d2:d8:
                    62:ba:7b:b0:14:cf:60:1f:6c:33:93:a4:a0:92:aa:
                    49:23:23:bf:7d:f0:7f:8f:69:15:3f:b6:ab:fe:7f:
                    59:fd:bd:8d:6a:3a:e7:d8:9e:80:19:2b:6d:ab:86:
                    3f:80:68:ed:73:f1:4a:86:80:78:53:66:3b:97:0f:
                    a3:f1:ec:b5:fa:19:a5:81:a7:43:42:c0:53:6a:a8:
                    c9:61:b8:05:80:ed:bf:9e:c4:97:4f:60:8f:20:8f:
                    e2:44:ad:4b:10:3a:32:ad:f1:79:cb:43:24:da:64:
                    6f:28:ac:c2:89:8b:c3:03:bf:7f:5f:b0:1b:35:7e:
                    bc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3F:90:28:B0:84:E0:C6:74:62:D5:80:DA:70:24:EA:AA:71:BF:A8
            X509v3 Authority Key Identifier:
                keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:a7:5a:55:77:9f:1c:7f:15:25:50:a9:85:ac:13:bb:21:50:
         8d:ca:fe:37:c6:74:f8:8e:87:c1:86:50:0d:98:0b:7c:ed:c1:
         b5:dd:cf:88:df:78:da:9a:65:c9:a7:f9:95:1e:21:09:87:f6:
         a0:0c:e0:6b:21:32:cf:8c:f5:33:2d:a6:bc:e1:49:9a:f8:6e:
         e7:20:58:b9:c0:db:1d:7c:6f:4b:03:4f:c1:0f:fc:e1:84:f2:
         c9:b3:af:fe:f0:49:14:ac:25:2c:05:15:1b:80:d3:e6:6c:31:
         40:da:e5:8f:3f:e4:8f:5f:77:e3:8f:1f:c1:a8:d5:6f:0a:4d:
         18:90:36:f2:d2:2b:e9:19:c6:7a:8e:c1:e3:03:73:2e:20:3b:
         82:72:8f:89:b1:d2:64:e3:c3:92:86:f0:d3:84:2f:b5:71:eb:
         32:ea:ce:27:1f:13:86:54:4b:52:1d:76:f4:4a:73:84:cb:2a:
         52:c2:c0:5a:0e:45:d3:86:dd:06:de:6d:71:11:36:1a:2c:69:
         5b:40:ca:43:f7:b6:d9:1e:8b:5a:7b:07:c7:33:cd:1b:fc:45:
         7b:e0:c9:88:2e:c8:52:cd:1b:50:3d:04:99:6d:80:b7:d4:85:
         86:5b:73:8b:80:09:bf:e9:e0:b3:ea:9b:0b:eb:1b:e7:9d:e9:
         7b:f1:98:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----