Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/Le5vpyY48HdbIpkDIdpXFhjYz0Q.roa
File:                     Le5vpyY48HdbIpkDIdpXFhjYz0Q.roa (raw, json)
Hash identifier:          Myyoy3T8AQaNeHj3CEH6lMEU7kAImPu/7Rglv2KrnL4=
Subject key identifier:   2D:EE:6F:A7:26:38:F0:77:5B:22:99:03:21:DA:57:16:18:D8:CF:44
Certificate issuer:       /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial:       019424449C07FA3FB9E25FCB2A9801D33DBC
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/Le5vpyY48HdbIpkDIdpXFhjYz0Q.roa
Signing time:             Wed 01 Jan 2025 23:47:43 +0000
ROA not before:           Wed 01 Jan 2025 23:47:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48258
IP address blocks:        91.209.53.0/24 maxlen: 24
                          2001:67c:2488::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:9c:07:fa:3f:b9:e2:5f:cb:2a:98:01:d3:3d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
        Validity
            Not Before: Jan  1 23:47:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2dee6fa72638f0775b22990321da571618d8cf44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:3b:92:5d:27:63:40:15:db:82:ef:f1:4d:
                    c1:90:a2:99:be:0d:97:86:6d:81:7a:50:ee:3a:5c:
                    79:f5:5d:a2:11:2d:99:21:e4:ea:73:fb:c7:85:05:
                    fc:85:13:78:9c:cb:4c:c6:44:14:df:e6:12:a5:73:
                    40:7a:eb:2c:cc:b4:5c:e5:70:23:e0:63:93:6f:9b:
                    ca:a6:f9:77:8f:10:1c:c0:eb:5f:64:4d:62:23:36:
                    b9:d9:f7:e8:66:0e:dc:05:c8:b9:64:77:f5:12:23:
                    43:81:0a:cf:fe:e8:6e:8c:90:b2:96:6f:ba:cb:10:
                    28:91:c8:61:f2:d6:47:d1:5f:3b:d2:fe:65:6d:02:
                    d2:d7:16:67:29:3f:da:f5:53:e9:8e:fe:b5:c4:05:
                    60:05:83:dd:59:9e:0d:c9:9c:9b:8d:79:4f:d9:ba:
                    2e:fd:9c:6d:93:99:dc:4d:21:8f:2a:a4:32:c9:27:
                    31:38:76:cc:b6:f9:0e:52:9b:8e:c7:10:9a:58:16:
                    fe:2e:10:98:b1:13:06:77:53:0d:32:d2:7b:e3:eb:
                    3c:f6:53:76:d6:bf:db:6a:8f:9e:70:17:c0:a3:59:
                    41:d1:57:f9:4f:ad:06:c9:46:f3:a9:e0:cb:ba:0d:
                    2b:af:84:43:27:29:43:94:bc:92:ee:27:ee:2b:ae:
                    65:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EE:6F:A7:26:38:F0:77:5B:22:99:03:21:DA:57:16:18:D8:CF:44
            X509v3 Authority Key Identifier:
                keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/Le5vpyY48HdbIpkDIdpXFhjYz0Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.53.0/24
                IPv6:
                  2001:67c:2488::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:6a:95:fe:de:99:87:00:cb:3d:22:c8:cb:63:3d:a2:55:00:
         a6:6c:23:58:af:6d:b8:d1:25:69:7a:ac:13:cf:d0:6f:33:98:
         12:a7:2e:7f:3d:e9:43:28:47:36:9e:63:52:cb:20:e2:ec:b2:
         c1:4f:11:af:e5:de:55:0a:11:f4:79:bc:a1:b2:fe:ee:99:82:
         89:f3:9d:b5:32:0c:5a:2a:2e:39:45:1d:e7:b1:d9:46:8d:27:
         bb:9d:52:e2:44:d5:c5:12:d9:38:cf:7b:70:3f:90:23:25:0a:
         51:68:5a:24:6f:d2:c0:ae:7b:9e:78:7d:b9:cf:6a:08:d0:6a:
         e0:07:6c:4f:f4:12:30:fb:dc:b8:63:92:22:d8:b1:fb:a2:46:
         a4:86:a8:71:d3:5a:5e:e4:30:34:e1:84:cd:59:60:29:1c:0d:
         dc:d0:e2:e1:34:24:60:12:99:c8:23:7d:70:cd:16:ff:41:c4:
         71:68:d6:e7:69:80:6d:ff:31:26:fb:93:6c:0a:b7:f5:ad:0e:
         48:90:f5:eb:be:6d:ea:6d:f5:af:14:ec:18:b6:d5:65:fc:7d:
         61:8d:28:dc:ec:e7:d8:20:7c:fe:42:ce:e2:ff:69:89:e8:33:
         19:b6:df:15:3f:a1:cf:2c:f6:a5:2b:21:c0:6a:e3:c8:67:e2:
         f2:0c:fb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----