Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/8DFREsz67roq72EhqNj788hY8vo.roa
File:                     8DFREsz67roq72EhqNj788hY8vo.roa (raw, json)
Hash identifier:          0z/SHGgj6DLr9WZ0vWVXRQYl+WMBwxnXd13RzpBpoyE=
Subject key identifier:   F0:31:51:12:CC:FA:EE:BA:2A:EF:61:21:A8:D8:FB:F3:C8:58:F2:FA
Certificate issuer:       /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial:       019422FBD9D7A79F75ACD3E11EFEA6549CF8
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/8DFREsz67roq72EhqNj788hY8vo.roa
Signing time:             Wed 01 Jan 2025 17:48:38 +0000
ROA not before:           Wed 01 Jan 2025 17:48:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199121
IP address blocks:        91.244.180.0/24 maxlen: 24
                          2001:67c:7a4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:d9:d7:a7:9f:75:ac:d3:e1:1e:fe:a6:54:9c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
        Validity
            Not Before: Jan  1 17:48:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f0315112ccfaeeba2aef6121a8d8fbf3c858f2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:95:82:b7:1a:4c:3f:d1:5a:31:f0:66:ca:e5:
                    2a:c1:a1:5b:c0:85:2a:4c:9b:b5:f5:3e:d3:e6:5f:
                    cf:87:af:e1:28:48:95:d7:a5:79:b7:eb:c3:19:30:
                    64:e6:29:fe:67:60:3b:d7:1f:b8:2b:6c:5c:28:45:
                    eb:77:f8:90:37:c7:ee:d4:10:d0:bd:f4:f0:16:34:
                    a3:2c:63:13:74:e9:78:1b:aa:59:95:64:e2:e9:ce:
                    4d:2a:aa:5e:f8:a2:c7:fe:13:51:b7:9b:fe:98:d3:
                    36:c0:f9:36:40:c7:f7:b8:e2:c3:df:39:8a:06:66:
                    77:7c:f3:d2:cb:db:5b:73:33:f3:dc:ff:b5:7b:32:
                    d2:c6:a2:18:7d:75:89:62:b1:d6:c6:48:a6:92:a3:
                    2a:f4:91:cd:2d:88:8d:c3:a2:75:eb:05:3f:f1:4b:
                    26:07:49:29:63:6f:4d:a5:33:5e:ea:9f:07:e9:2f:
                    b2:e4:0f:76:b3:69:2d:00:22:fe:c5:49:ee:23:1e:
                    37:6f:ae:59:a7:8f:e1:9e:b8:8f:95:b3:f7:da:ee:
                    1b:1f:cb:99:b1:90:1a:3f:b5:f5:d3:97:20:2c:9f:
                    e7:dc:85:a4:7b:23:d6:dd:02:60:f9:a9:06:78:61:
                    33:b0:43:22:2d:09:f8:82:cd:e2:96:93:14:b6:92:
                    e9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:31:51:12:CC:FA:EE:BA:2A:EF:61:21:A8:D8:FB:F3:C8:58:F2:FA
            X509v3 Authority Key Identifier:
                keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/8DFREsz67roq72EhqNj788hY8vo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.180.0/24
                IPv6:
                  2001:67c:7a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:ba:3b:f2:81:b1:97:8e:64:0e:4a:37:56:46:2a:5a:a8:f4:
         1b:bd:a7:6c:c2:bd:86:1d:d5:42:08:b1:b9:05:11:d4:0b:fa:
         d9:c0:ff:93:e7:6d:57:ad:39:21:95:25:fd:b3:9b:70:37:d1:
         16:a7:1a:dd:80:97:4c:a6:1f:f5:c0:ba:ff:cb:0e:c4:6f:79:
         f2:7c:09:24:db:de:6e:75:19:1e:20:63:9e:a6:05:23:15:f4:
         7c:a6:6d:fb:e9:5a:c9:53:b6:78:00:78:0e:91:8b:66:e3:c0:
         47:2c:2a:fa:48:fb:94:b5:03:b1:f3:58:46:9d:a9:a0:c7:8c:
         e9:bc:41:ee:bb:04:4f:2f:6c:80:5b:9b:28:88:01:52:c1:65:
         f5:c5:3a:27:3a:e6:f0:01:c0:5e:b8:e9:b7:6d:25:f5:d8:ee:
         72:96:26:c7:0c:7b:5f:32:dc:8f:d5:4b:39:0b:7a:d6:50:b4:
         b5:5d:52:05:bd:87:97:bc:57:f8:ca:bc:15:60:dc:d7:41:43:
         9e:49:54:17:06:59:74:45:69:c5:c2:3d:a9:c2:ba:16:29:9e:
         0c:71:54:63:92:77:5e:ac:b1:36:4b:85:53:8f:a2:ca:1c:e6:
         d5:6d:95:ad:e2:74:25:00:b8:08:be:34:25:43:42:3a:d2:95:
         d1:be:42:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----