Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/EYydWYT52AseBx7Jyj7IOF-OzmA.roa
File:                     EYydWYT52AseBx7Jyj7IOF-OzmA.roa (raw, json)
Hash identifier:          GK6vk4anX7z/I8eBH+vrNfeD1sOFhaY4rFH4DXjiXHk=
Subject key identifier:   11:8C:9D:59:84:F9:D8:0B:1E:07:1E:C9:CA:3E:C8:38:5F:8E:CE:60
Certificate issuer:       /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial:       019425FDDCCC13B23AB1F3F00520F0FAB954
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/EYydWYT52AseBx7Jyj7IOF-OzmA.roa
Signing time:             Thu 02 Jan 2025 07:49:41 +0000
ROA not before:           Thu 02 Jan 2025 07:49:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49373
IP address blocks:        91.214.76.0/24 maxlen: 24
                          2a00:1e6a::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:dc:cc:13:b2:3a:b1:f3:f0:05:20:f0:fa:b9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
        Validity
            Not Before: Jan  2 07:49:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=118c9d5984f9d80b1e071ec9ca3ec8385f8ece60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:ec:f2:a7:a8:75:a1:df:e5:58:26:ae:2f:
                    31:f6:d8:15:67:b4:02:30:03:66:7e:7f:31:f7:d3:
                    9a:97:5b:4c:b2:e1:c5:a0:c7:b2:28:88:4d:79:e5:
                    85:0d:7f:4b:38:d8:e6:4b:3a:5f:65:e6:0a:9d:b3:
                    2b:3c:bb:b5:ee:a5:63:71:6b:01:43:37:41:ab:19:
                    ed:52:24:b2:63:31:45:47:3f:79:4e:f8:1e:e5:9b:
                    07:e5:a7:9d:30:35:37:4e:8c:30:24:7d:d1:19:bf:
                    2d:7c:da:a2:b8:31:40:19:7c:0a:4b:77:6c:46:e4:
                    d9:50:ce:cb:06:5c:13:56:1a:d8:58:10:78:5a:5a:
                    9c:31:82:32:d5:8f:85:32:ec:75:f2:f2:da:93:b7:
                    d3:f1:20:4c:99:95:4b:f8:4a:ef:30:76:e9:0c:e3:
                    86:84:44:75:91:f5:9c:c9:0a:94:9b:b7:43:97:06:
                    67:8a:d7:2d:61:ed:b2:5a:0a:47:a6:23:85:ef:4f:
                    51:b5:92:76:b4:f6:ac:e3:74:b4:fc:be:25:5e:99:
                    65:a8:37:dd:8f:1e:b2:af:87:fa:80:30:36:5b:8a:
                    0d:06:9b:54:89:3d:d4:7b:d2:e2:7a:45:9b:93:b4:
                    c2:c8:e3:46:31:1d:e6:1b:28:ef:07:91:3a:64:a6:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8C:9D:59:84:F9:D8:0B:1E:07:1E:C9:CA:3E:C8:38:5F:8E:CE:60
            X509v3 Authority Key Identifier:
                keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/EYydWYT52AseBx7Jyj7IOF-OzmA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.214.76.0/24
                IPv6:
                  2a00:1e6a::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:46:ab:d1:aa:25:7c:c8:5e:40:b4:86:88:bf:7d:db:fa:99:
         8e:df:dc:c0:bd:e7:3e:5c:bd:e5:3f:52:16:6d:35:18:5b:23:
         a3:53:b2:39:39:b1:83:30:79:96:99:c4:93:21:b1:3f:1b:5f:
         95:8e:a0:37:97:5a:36:49:11:e5:02:37:09:aa:5c:d7:2e:23:
         e4:51:b8:fa:77:36:f0:cc:85:72:92:01:ca:f5:01:6a:8a:3b:
         ce:8c:29:b7:ad:4b:45:9a:08:e0:c8:9c:c4:65:4e:e4:8a:9d:
         e2:5a:c7:ae:73:89:5f:b4:c0:c3:57:b2:44:3a:30:c0:2d:d8:
         5e:59:08:c0:63:fe:fb:be:82:1e:87:e9:89:be:cd:e3:58:94:
         9e:96:14:d1:0d:1c:c2:c6:cc:db:cd:cd:44:30:64:c6:d1:1d:
         ef:1c:ef:b4:03:f9:ae:47:23:89:f5:89:c7:6e:49:17:98:08:
         20:63:b5:f7:26:4c:27:ae:27:35:ff:8d:5c:8a:66:f3:65:8b:
         ea:48:1c:2d:12:2d:a9:ed:d2:45:7e:26:75:1a:b1:1d:84:82:
         85:aa:e0:f6:57:1f:3f:2b:5e:d3:29:51:65:77:79:a9:4b:75:
         b0:06:14:76:44:87:ad:e6:a8:e7:74:95:65:8b:78:93:23:47:
         3d:8b:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----