Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/JJ41O9y8x1gpbU2DXNLkqquSMjc.roa
File:                     JJ41O9y8x1gpbU2DXNLkqquSMjc.roa (raw, json)
Hash identifier:          3fFhyMYR6izsGyLWItL24ORa+eFns/JPmhZH5u9BaeY=
Subject key identifier:   24:9E:35:3B:DC:BC:C7:58:29:6D:4D:83:5C:D2:E4:AA:AB:92:32:37
Certificate issuer:       /CN=9d8f393483d489c429fc18b09342d76d0afe4244
Certificate serial:       018CC26D5A7A6160ED1A9EB2C402CAC6E20D
Authority key identifier: 9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/JJ41O9y8x1gpbU2DXNLkqquSMjc.roa
Signing time:             Mon 01 Jan 2024 00:29:55 +0000
ROA not before:           Mon 01 Jan 2024 00:29:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197219
IP address blocks:        93.174.200.0/21 maxlen: 21
                          2a02:1720::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:5a:7a:61:60:ed:1a:9e:b2:c4:02:ca:c6:e2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d8f393483d489c429fc18b09342d76d0afe4244
        Validity
            Not Before: Jan  1 00:29:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=249e353bdcbcc758296d4d835cd2e4aaab923237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:f1:0f:7a:07:d0:eb:04:a5:73:47:28:08:
                    1a:68:2d:7b:f7:71:fc:5d:05:6a:9e:d8:b4:5d:44:
                    8d:64:55:d9:7a:cb:bb:27:89:1f:b5:5e:ef:91:a9:
                    15:9b:00:27:59:fb:76:87:33:41:15:74:84:f4:cc:
                    f0:cf:3a:d2:e0:81:80:dc:83:74:5a:6e:0d:fe:dc:
                    fb:e1:82:22:24:c0:ee:ab:78:69:94:3d:8b:7c:18:
                    11:5a:ee:ae:7a:6f:61:ae:06:d1:13:12:92:91:29:
                    0c:87:d3:c9:e1:3f:3b:0d:0e:e5:0f:f2:ba:8d:33:
                    89:2c:78:aa:8a:39:6b:cd:b1:4e:f1:a6:ad:4e:4e:
                    88:65:f1:c2:44:34:c8:5c:03:55:09:c9:7d:a7:9e:
                    f8:f7:44:0d:e3:e0:02:f6:88:6c:64:49:13:4e:43:
                    17:f6:d8:da:4d:80:2a:20:e6:cc:0d:78:9f:ff:4c:
                    aa:98:6f:4e:d1:b9:ce:07:47:a2:32:63:28:88:39:
                    fd:1d:30:d6:b9:f5:1e:25:9d:25:98:e0:49:08:5a:
                    5a:d6:ec:94:fa:9f:a8:fa:78:af:4a:b0:b4:f7:56:
                    5d:56:dd:50:e1:37:77:64:2c:44:c4:32:21:bb:5c:
                    be:17:4e:70:c8:fe:50:0d:fe:25:1e:45:b8:42:9f:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9E:35:3B:DC:BC:C7:58:29:6D:4D:83:5C:D2:E4:AA:AB:92:32:37
            X509v3 Authority Key Identifier:
                keyid:9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/JJ41O9y8x1gpbU2DXNLkqquSMjc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.174.200.0/21
                IPv6:
                  2a02:1720::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:7e:e9:5b:71:81:88:f4:57:95:b4:51:e2:92:67:6e:0f:ea:
         97:41:59:ba:d8:78:10:16:0a:c9:5a:d4:c5:06:5e:69:f9:96:
         e3:48:71:a8:05:ba:75:e7:4a:73:9c:75:5c:8d:1f:9d:68:14:
         fb:70:45:87:61:2f:54:c0:05:10:be:78:75:cf:a0:f0:50:00:
         e0:c2:55:dd:81:e8:0a:00:6e:3f:ee:93:70:cf:c2:5a:83:2c:
         91:2b:d6:65:59:c8:df:38:50:3a:8f:8f:8f:6c:e8:fe:78:14:
         f7:88:f0:ab:c1:86:4b:a6:52:de:97:0d:7b:ba:63:d8:72:85:
         ad:17:6b:30:82:ab:b1:42:6d:ad:07:2f:ee:d6:fd:e1:e2:a0:
         13:39:9b:d6:ef:32:19:9d:a2:12:c0:93:bf:55:7e:2f:ed:4f:
         88:ce:32:ea:02:1f:74:db:9a:5d:ed:5c:10:96:43:c6:59:8b:
         4d:d6:a0:b8:32:8c:61:0b:fe:83:de:e0:a0:76:c7:2b:5e:6a:
         86:75:d0:87:f4:bf:07:95:1f:a4:02:4b:5e:19:d2:ec:7c:08:
         89:0c:a5:25:b5:3b:9e:c6:8c:47:47:bb:6c:02:56:0f:0e:49:
         03:b9:25:b9:61:0b:b4:cb:ea:7c:b3:90:1c:e5:21:57:ff:d5:
         78:14:75:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----