Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/l77XDKqfVAj_0QN9hL5E5zPQSwI.roa
File:                     l77XDKqfVAj_0QN9hL5E5zPQSwI.roa (raw, json)
Hash identifier:          JB8S1ZVJbd9P8hIkFLEuRz8lxPAo3SSfvjCCRc2tF5c=
Subject key identifier:   97:BE:D7:0C:AA:9F:54:08:FF:D1:03:7D:84:BE:44:E7:33:D0:4B:02
Certificate issuer:       /CN=3238786e9f70e6db74230d72675a483bd24ef256
Certificate serial:       019426D9BF1DCA97D23A1AD0429A3DF692C1
Authority key identifier: 32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/l77XDKqfVAj_0QN9hL5E5zPQSwI.roa
Signing time:             Thu 02 Jan 2025 11:49:51 +0000
ROA not before:           Thu 02 Jan 2025 11:49:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204562
IP address blocks:        185.245.240.0/22 maxlen: 24
                          2a0d:6e80::/29 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:bf:1d:ca:97:d2:3a:1a:d0:42:9a:3d:f6:92:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3238786e9f70e6db74230d72675a483bd24ef256
        Validity
            Not Before: Jan  2 11:49:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=97bed70caa9f5408ffd1037d84be44e733d04b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:af:19:3c:ee:e3:ea:cc:bf:dd:cf:a4:56:20:
                    b3:2d:4d:1e:c2:bd:91:7d:36:0b:e2:a1:a1:dc:5e:
                    26:b6:f2:dc:49:50:ad:1d:b8:d7:66:4d:b1:e0:ab:
                    a5:06:49:3e:4a:d3:0e:a4:fa:34:10:e6:98:75:ce:
                    5f:89:bf:8e:77:7f:a5:b5:b8:c8:11:f3:1c:aa:10:
                    0b:3b:89:7d:48:3e:b5:d9:a9:98:5c:61:c0:7f:72:
                    49:01:2e:58:61:64:86:04:e4:0c:3a:48:ad:b7:fd:
                    fc:2e:28:62:05:94:71:0c:38:30:41:14:c9:4a:ce:
                    28:61:1c:0e:05:12:ef:ce:38:07:77:bd:22:72:d8:
                    e1:2d:33:75:2f:6a:fb:92:84:34:ff:d2:c0:7a:b3:
                    58:bf:d5:34:0d:5c:90:bb:47:f8:ff:94:c4:cd:ee:
                    5e:83:22:4e:a2:80:97:66:8a:58:0e:5c:6f:a7:82:
                    5d:37:94:38:87:32:31:4e:6e:44:a0:b0:2f:40:e8:
                    fc:72:58:c7:26:d4:6d:f7:d0:c1:94:5f:d8:cd:07:
                    05:8c:34:de:c5:04:1b:1b:be:79:4f:f0:cd:9e:09:
                    bc:68:cd:e9:5c:cb:ba:c4:4f:63:84:4d:87:50:8c:
                    46:b8:cf:3a:44:70:1a:c2:4c:e0:0c:94:6d:c1:84:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BE:D7:0C:AA:9F:54:08:FF:D1:03:7D:84:BE:44:E7:33:D0:4B:02
            X509v3 Authority Key Identifier:
                keyid:32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/l77XDKqfVAj_0QN9hL5E5zPQSwI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.240.0/22
                IPv6:
                  2a0d:6e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         1d:85:a9:cd:9f:3a:82:ae:aa:5a:94:7c:e1:0b:32:bc:7a:82:
         18:88:5d:67:a0:6d:5c:01:1b:4a:b7:53:18:07:eb:b6:88:26:
         2a:e4:64:56:3d:a1:7b:fd:56:81:50:36:12:95:bf:fc:06:0e:
         0a:66:ce:d7:9c:b2:3d:29:dc:c0:93:80:26:df:ed:75:6c:ab:
         57:fc:5d:9a:be:65:76:35:85:a5:7f:5d:eb:71:a8:b2:7e:02:
         77:06:dd:8c:99:96:f3:17:85:4b:b1:00:6d:eb:3d:f7:6a:42:
         f5:34:8f:65:71:7d:4c:d9:97:00:34:e8:79:0f:ac:12:20:62:
         16:24:35:2f:1b:1c:ef:43:6f:9a:9c:f5:43:06:5b:92:ab:fa:
         7e:32:25:08:fe:a9:0e:3a:0a:80:0b:e6:92:24:73:61:f3:45:
         28:df:fc:1b:80:10:5b:6c:a4:64:50:eb:25:ed:b2:01:32:07:
         ba:32:ac:25:77:e7:14:3c:87:25:e3:77:86:12:bb:09:ab:90:
         e2:b1:08:54:d8:12:c0:6c:c0:15:fb:79:43:d3:93:d8:f4:a8:
         b7:d7:b2:52:1b:ac:5c:75:70:57:d1:2f:e2:a7:24:cb:d1:6a:
         31:eb:6c:52:1f:9f:27:a1:86:09:7b:fd:ff:e9:51:d3:32:f2:
         01:e8:03:d3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQm2b8dypfSOhrQQpo99pLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMzg3ODZlOWY3MGU2ZGI3NDIzMGQ3MjY3NWE0ODNiZDI0
ZWYyNTYwHhcNMjUwMTAyMTE0OTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2JlZDcwY2FhOWY1NDA4ZmZkMTAzN2Q4NGJlNDRlNzMzZDA0YjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK8ZPO7j6sy/3c+kViCzLU0ewr2R
fTYL4qGh3F4mtvLcSVCtHbjXZk2x4KulBkk+StMOpPo0EOaYdc5fib+Od3+ltbjI
EfMcqhALO4l9SD612amYXGHAf3JJAS5YYWSGBOQMOkitt/38LihiBZRxDDgwQRTJ
Ss4oYRwOBRLvzjgHd70ictjhLTN1L2r7koQ0/9LAerNYv9U0DVyQu0f4/5TEze5e
gyJOooCXZopYDlxvp4JdN5Q4hzIxTm5EoLAvQOj8cljHJtRt99DBlF/YzQcFjDTe
xQQbG755T/DNngm8aM3pXMu6xE9jhE2HUIxGuM86RHAawkzgDJRtwYSiQwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJe+1wyqn1QI/9EDfYS+ROcz0EsCMB8GA1UdIwQY
MBaAFDI4eG6fcObbdCMNcmdaSDvSTvJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YTk1MDYtMjBkNC00YWI3LWI1NjMt
ZTJkM2Q5NGNjMjM4LzEvbDc3WERLcWZWQWpfMFFOOWhMNUU1elBRU3dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85YTk1MDYtMjBkNC00YWI3LWI1NjMtZTJkM2Q5NGNjMjM4
LzEvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufXwMA0E
AgACMAcDBQMqDW6AMA0GCSqGSIb3DQEBCwUAA4IBAQAdhanNnzqCrqpalHzhCzK8
eoIYiF1noG1cARtKt1MYB+u2iCYq5GRWPaF7/VaBUDYSlb/8Bg4KZs7XnLI9KdzA
k4Am3+11bKtX/F2avmV2NYWlf13rcaiyfgJ3Bt2MmZbzF4VLsQBt6z33akL1NI9l
cX1M2ZcANOh5D6wSIGIWJDUvGxzvQ2+anPVDBluSq/p+MiUI/qkOOgqAC+aSJHNh
80Uo3/wbgBBbbKRkUOsl7bIBMge6Mqwld+cUPIcl43eGErsJq5DisQhU2BLAbMAV
+3lD05PY9Ki317JSG6xcdXBX0S/ipyTL0Wox62xSH58noYYJe/3/6VHTMvIB6APT
-----END CERTIFICATE-----