Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/lfN0NzmaNNgeuOs3mRDCYTgNiIA.roa
File:                     lfN0NzmaNNgeuOs3mRDCYTgNiIA.roa (raw, json)
Hash identifier:          4dREeE9czHudZoCgEBbcXqvoz+oAQ2vcPupRpP3e4Wc=
Subject key identifier:   95:F3:74:37:39:9A:34:D8:1E:B8:EB:37:99:10:C2:61:38:0D:88:80
Certificate issuer:       /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial:       0191B6FFCAE944CFA48DD2A2A675C0388E22
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/lfN0NzmaNNgeuOs3mRDCYTgNiIA.roa
Signing time:             Tue 03 Sep 2024 08:28:22 +0000
ROA not before:           Tue 03 Sep 2024 08:28:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25400
IP address blocks:        193.24.102.0/24 maxlen: 24
                          2a13:9980::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b6:ff:ca:e9:44:cf:a4:8d:d2:a2:a6:75:c0:38:8e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
        Validity
            Not Before: Sep  3 08:28:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=95f37437399a34d81eb8eb379910c261380d8880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:60:88:49:22:aa:26:6a:ab:12:33:3e:ba:
                    10:e4:2d:2b:e9:a2:c0:91:18:32:af:02:39:69:0f:
                    09:0d:c6:9c:56:29:09:20:04:e5:10:ac:2f:86:99:
                    91:68:48:3c:4c:94:6c:38:8d:d0:87:e7:e2:f1:79:
                    f7:c2:3d:1b:c4:3c:9c:9f:91:05:62:6b:6d:35:63:
                    10:d7:80:d0:de:32:ae:3d:9e:8e:69:e1:40:98:8c:
                    93:2b:b7:90:73:3b:9a:79:95:70:ee:8c:01:22:81:
                    59:1a:02:a9:f6:37:7c:5c:51:5e:5d:23:27:f8:60:
                    ef:f3:59:72:e5:c5:dc:0a:55:71:bf:52:03:6e:fe:
                    19:f3:19:c0:6b:d3:30:16:be:b8:20:e9:25:dd:1b:
                    59:10:85:8c:78:2d:92:41:c5:85:e9:1b:22:2c:1f:
                    18:b8:40:95:11:c7:d6:f7:7d:74:d1:ef:5e:ba:e4:
                    f1:3b:68:ad:e6:60:a6:af:e5:77:ac:1b:86:b2:70:
                    74:91:4b:58:48:e0:a3:67:e3:ea:4c:4e:ad:df:93:
                    d4:78:41:f4:5e:71:fc:ed:c3:25:97:bf:ef:42:23:
                    52:af:b6:24:1a:8d:69:75:f1:a7:c5:dd:d6:7c:17:
                    90:df:e9:87:98:67:be:f3:a7:e5:4e:26:94:b3:9d:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F3:74:37:39:9A:34:D8:1E:B8:EB:37:99:10:C2:61:38:0D:88:80
            X509v3 Authority Key Identifier:
                keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/lfN0NzmaNNgeuOs3mRDCYTgNiIA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.24.102.0/24
                IPv6:
                  2a13:9980::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:52:64:8f:eb:55:d1:30:24:92:4b:ac:3a:ce:44:2e:d9:42:
         42:6c:b4:69:c9:35:fc:73:1e:db:da:9b:8e:59:3c:44:23:6d:
         3e:1d:42:1d:9f:4f:a0:79:e9:8d:62:1d:d5:e4:0f:94:f1:03:
         4d:f5:a6:8a:0a:a8:72:86:94:f3:23:f6:70:1c:7b:94:9c:1b:
         a8:61:3b:6b:b9:4c:08:fc:dc:04:61:e0:8c:a8:cf:48:ee:fb:
         e7:38:38:69:a0:96:27:8b:79:48:a8:aa:76:f6:c7:4e:65:49:
         e2:e8:f5:0f:87:99:f5:45:f1:30:b2:88:10:34:d9:c2:d2:d4:
         f9:49:63:67:a2:86:73:9d:0b:ff:71:de:c0:ca:b6:38:19:24:
         87:6a:e4:67:63:ab:d4:b7:76:5f:2c:80:38:65:f1:14:48:b4:
         f5:2a:a1:28:19:00:e4:95:09:f4:16:00:db:ad:94:53:00:99:
         78:a4:fd:88:45:09:91:b1:b3:3b:c1:f4:ba:cd:22:dd:c7:e9:
         38:0b:6d:24:d0:8b:e2:34:ea:ab:96:83:b4:68:62:17:94:75:
         da:2c:0e:3d:f2:92:64:74:03:bf:96:c3:a4:9f:10:3c:59:c1:
         eb:87:10:3d:66:49:6c:6a:6b:9e:df:bb:b7:49:99:1b:ce:d9:
         79:d2:06:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----