Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/ydYjDF75mH7bfqoCwNzPOqna2dk.roa
File:                     ydYjDF75mH7bfqoCwNzPOqna2dk.roa (raw, json)
Hash identifier:          sywFQUytXwSuvYG2++Bqw/RDZKafPOlycszuwNNtgdE=
Subject key identifier:   C9:D6:23:0C:5E:F9:98:7E:DB:7E:AA:02:C0:DC:CF:3A:A9:DA:D9:D9
Certificate issuer:       /CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Certificate serial:       019427B620124C90C9723091CF286E5DEF4C
Authority key identifier: D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/ydYjDF75mH7bfqoCwNzPOqna2dk.roa
Signing time:             Thu 02 Jan 2025 15:50:34 +0000
ROA not before:           Thu 02 Jan 2025 15:50:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     13094
IP address blocks:        91.221.180.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:20:12:4c:90:c9:72:30:91:cf:28:6e:5d:ef:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
        Validity
            Not Before: Jan  2 15:50:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c9d6230c5ef9987edb7eaa02c0dccf3aa9dad9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:6b:04:29:67:fc:3c:a4:25:20:2e:aa:39:
                    ca:21:87:c2:ee:57:52:63:5c:3c:a1:77:19:47:9a:
                    8f:36:7c:27:ce:22:6c:ea:03:61:72:0d:ef:e2:9b:
                    8e:06:f9:79:af:f9:c6:c5:2c:27:7c:41:6e:a2:6c:
                    1d:d3:78:49:b0:63:9b:c8:6f:0e:b2:33:02:e2:d7:
                    41:48:4e:36:d1:00:5f:d0:3a:6e:68:ef:16:07:af:
                    c3:bc:82:09:42:aa:bc:53:5e:c7:cb:df:6e:fb:a2:
                    66:b4:21:17:38:bd:8f:f3:d3:2f:df:8c:46:44:0e:
                    77:71:fd:56:d8:66:d4:2f:fc:86:80:ce:0d:57:5f:
                    31:df:a3:4f:bb:91:04:2f:74:73:33:91:b0:ca:6f:
                    44:c9:76:38:ea:9e:df:c4:ed:47:cb:2d:ac:f7:a0:
                    97:0e:e4:a6:e2:b3:44:d8:dc:36:69:45:d1:30:42:
                    cf:79:e9:da:40:00:fa:be:cf:6b:ed:a2:a1:59:ff:
                    39:50:d8:57:e2:89:e4:74:fd:d5:fa:70:3a:87:d4:
                    c6:f5:99:37:34:51:07:94:d5:c9:7a:fc:bc:03:3b:
                    e7:73:89:2d:8b:15:9c:a0:4b:20:8c:b5:ce:64:c8:
                    88:6b:0e:fc:87:ea:f7:91:e4:2c:a9:a1:2d:1c:13:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D6:23:0C:5E:F9:98:7E:DB:7E:AA:02:C0:DC:CF:3A:A9:DA:D9:D9
            X509v3 Authority Key Identifier:
                keyid:D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/ydYjDF75mH7bfqoCwNzPOqna2dk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.221.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:49:c5:8a:54:b5:21:66:20:50:a4:57:62:8c:c4:78:2b:64:
         f9:11:91:9a:91:3b:d4:95:2c:47:3b:cb:0e:75:85:2c:4e:25:
         6e:17:36:8e:54:82:1e:5c:0e:2c:44:7f:7d:f7:0a:48:e9:4b:
         6d:64:bd:23:12:01:8e:00:d0:88:77:e0:92:16:3e:93:bd:b9:
         89:56:33:b5:e0:91:68:0c:ec:ac:63:ac:8c:98:ed:d6:a6:1a:
         6b:f7:75:77:ab:01:7c:44:1a:78:81:8e:ab:11:2c:7c:eb:67:
         cc:1d:9f:d2:cd:10:29:2c:a9:15:9e:84:97:4a:67:fb:13:29:
         d5:b4:f4:34:1a:b8:91:f9:2e:b1:e9:75:d0:17:99:0d:b3:0e:
         1d:f4:da:c1:b4:c6:16:9b:de:a0:c9:0e:87:01:f8:e7:58:19:
         1b:8b:29:d3:d5:23:c0:7f:db:63:e5:57:6c:b1:7d:b3:b4:32:
         de:c2:07:e4:31:b4:ef:05:b4:f0:c2:05:6e:23:48:b9:f4:61:
         96:d2:0b:3b:f5:c7:03:b4:94:87:e2:df:e6:df:67:e6:14:7c:
         c3:b3:ca:ba:cc:84:72:30:74:c2:e4:20:a1:43:f8:16:af:44:
         2f:02:92:25:ed:83:4d:d1:3b:dd:07:67:47:a1:04:ec:9b:ff:
         14:b2:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----