Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/Vsv3YCDw5vfXgq3TQuqdpudyKe4.roa
File:                     Vsv3YCDw5vfXgq3TQuqdpudyKe4.roa (raw, json)
Hash identifier:          x3+JtaVQNzIHFJZhtlaWx3hND6UzdPujPEcBiZLbG+Q=
Subject key identifier:   56:CB:F7:60:20:F0:E6:F7:D7:82:AD:D3:42:EA:9D:A6:E7:72:29:EE
Certificate issuer:       /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Certificate serial:       0194266C49050CB1F40C936B37C0A1DC4618
Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/Vsv3YCDw5vfXgq3TQuqdpudyKe4.roa
Signing time:             Thu 02 Jan 2025 09:50:18 +0000
ROA not before:           Thu 02 Jan 2025 09:50:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     47827
IP address blocks:        91.206.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:49:05:0c:b1:f4:0c:93:6b:37:c0:a1:dc:46:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
        Validity
            Not Before: Jan  2 09:50:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=56cbf76020f0e6f7d782add342ea9da6e77229ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:81:0b:35:86:44:30:35:dd:4a:0d:39:55:
                    e5:87:80:04:85:17:01:7e:ee:c0:ba:b9:4e:d3:00:
                    72:b8:e0:5f:8e:46:2c:86:d9:85:de:fd:b4:e1:c5:
                    85:e4:78:0c:85:9e:86:11:44:07:94:a1:90:06:d6:
                    b8:4e:74:63:37:34:da:ae:30:c2:7b:c5:90:f7:07:
                    eb:de:f9:ad:42:1f:ed:a5:86:cb:9f:9d:94:4b:3f:
                    d5:d8:c7:74:a0:42:d7:2c:70:3d:2a:6e:46:9d:02:
                    ae:94:70:bf:fe:34:ed:26:5d:e3:35:7a:45:34:87:
                    b2:5a:d4:bd:5c:ae:68:ae:c9:97:3b:78:6a:3d:1f:
                    36:ca:52:48:14:13:50:9e:7e:d7:7b:b4:c0:99:ef:
                    d0:fb:53:13:28:04:59:66:1e:36:93:83:61:cf:67:
                    9e:bd:a2:88:49:70:4f:ec:8f:7b:79:da:a3:d5:92:
                    d7:67:b7:c0:b6:f5:97:41:43:93:11:0b:a4:44:43:
                    ac:00:a7:56:6c:61:93:b5:09:2b:00:94:9e:83:e8:
                    be:38:68:d5:e0:65:68:af:60:b0:b1:c1:8f:0d:38:
                    95:2a:55:7a:fb:7e:f1:f9:1f:71:d6:02:b4:cd:92:
                    3c:40:65:0c:0e:cf:c9:8a:35:b7:92:57:1c:1b:50:
                    d9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CB:F7:60:20:F0:E6:F7:D7:82:AD:D3:42:EA:9D:A6:E7:72:29:EE
            X509v3 Authority Key Identifier:
                keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/Vsv3YCDw5vfXgq3TQuqdpudyKe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:bf:cb:7c:bf:bd:80:f4:92:0f:2d:e1:a9:a5:b8:a2:c1:1c:
         bd:4d:b3:a9:36:57:dc:4a:bc:fc:65:84:16:6a:f8:e2:03:59:
         e4:0d:71:9b:84:8a:86:f9:a9:7c:3d:9a:7e:f2:8c:43:a3:91:
         c2:8d:66:58:2a:70:35:b1:fd:d7:81:c4:ab:59:2f:08:c0:9d:
         9f:b7:cc:b3:5a:83:57:d6:4e:48:8f:73:28:7c:7b:09:6f:02:
         fe:05:6d:12:89:ff:21:ae:31:a9:43:a1:e8:ca:28:16:22:fb:
         c9:ef:8c:72:a6:f4:a1:46:b4:50:2c:2e:08:d5:fb:dd:dc:7c:
         8b:a0:42:36:ac:77:a2:74:29:be:08:4a:b9:a0:92:3c:aa:48:
         1e:d7:c5:26:75:56:ca:ed:58:8f:7a:85:67:94:65:e9:04:96:
         72:86:9d:30:3b:a1:22:18:2b:6e:60:b3:43:21:55:95:51:f5:
         04:a5:23:05:b0:bf:f1:c0:a6:fd:42:3d:38:43:25:cd:15:3c:
         03:ee:86:93:0f:aa:4e:70:f8:85:31:65:42:3d:b3:e5:d9:9f:
         86:37:1c:d6:42:37:06:a5:56:b6:6b:94:3c:a3:f2:10:fa:4f:
         52:d9:66:75:f3:87:70:16:7a:0f:2a:1d:e8:c8:bd:f9:d2:3f:
         bb:89:86:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----