Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/f7aLiKVHyM1OWvHdDt9KjBrOjRc.roa
File:                     f7aLiKVHyM1OWvHdDt9KjBrOjRc.roa (raw, json)
Hash identifier:          gXMbVjSWssRl5pUSyy0mfRaHyNZzTR/Z01nmT1EQCvQ=
Subject key identifier:   7F:B6:8B:88:A5:47:C8:CD:4E:5A:F1:DD:0E:DF:4A:8C:1A:CE:8D:17
Certificate issuer:       /CN=2ca6137749599c03c7b472f142c719680006b6e6
Certificate serial:       019420D610CA4EB7DBAD53DC007F31434E75
Authority key identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/f7aLiKVHyM1OWvHdDt9KjBrOjRc.roa
Signing time:             Wed 01 Jan 2025 07:48:07 +0000
ROA not before:           Wed 01 Jan 2025 07:48:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     47700
IP address blocks:        91.208.107.0/24 maxlen: 24
                          2001:678:478::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:10:ca:4e:b7:db:ad:53:dc:00:7f:31:43:4e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca6137749599c03c7b472f142c719680006b6e6
        Validity
            Not Before: Jan  1 07:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7fb68b88a547c8cd4e5af1dd0edf4a8c1ace8d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:26:85:9f:d9:44:d4:80:9e:fa:b6:bb:33:98:
                    b1:32:31:4f:7f:f5:2c:fd:ed:d1:44:11:bd:99:34:
                    67:72:c8:6d:9d:73:fd:61:27:9f:22:2b:84:68:68:
                    7e:f4:1d:61:71:30:10:35:29:64:5a:86:e2:6f:ab:
                    fa:85:e4:8b:41:21:76:e7:31:a4:5c:66:28:03:04:
                    31:68:b2:5e:01:5b:1b:b0:c6:46:e8:cd:d6:cf:a4:
                    a5:1e:4f:68:4f:5e:98:b8:de:e5:2e:41:a2:ac:92:
                    b1:17:dd:21:e6:ec:45:57:ac:69:42:f3:2e:d8:02:
                    19:fb:1e:19:85:3f:38:df:ce:b0:91:8f:90:8a:85:
                    63:ae:82:df:a9:4d:c7:ae:23:db:23:9a:42:67:81:
                    39:27:0f:ca:45:65:08:da:54:74:46:0a:51:dc:51:
                    aa:21:3e:e2:52:b0:d0:30:a6:8f:d2:72:77:69:8c:
                    71:e1:e5:ee:b2:57:7c:22:6b:25:6e:c6:64:3e:b9:
                    b5:8f:c2:6c:1c:c5:72:36:76:f9:06:80:61:9e:1e:
                    31:ec:6b:74:04:31:2d:23:d6:9e:2f:1a:4f:10:45:
                    b7:81:d2:eb:24:69:d8:4d:cc:54:36:2c:37:84:9f:
                    db:9e:df:28:9c:48:89:c2:05:47:25:26:3a:a7:6e:
                    7d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B6:8B:88:A5:47:C8:CD:4E:5A:F1:DD:0E:DF:4A:8C:1A:CE:8D:17
            X509v3 Authority Key Identifier:
                keyid:2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/f7aLiKVHyM1OWvHdDt9KjBrOjRc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.107.0/24
                IPv6:
                  2001:678:478::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:0b:7e:bf:1c:59:1a:0f:bb:4f:0b:e4:fc:aa:20:6e:0e:77:
         3f:b4:04:e2:82:0f:d2:7a:96:0a:80:79:dd:f1:af:e3:3e:9c:
         43:3c:dd:2c:5a:eb:d4:e0:8f:f9:df:0f:c8:33:ef:ac:32:3c:
         04:4d:d4:bb:07:d2:56:bb:42:6c:88:ee:49:0e:87:46:d4:4b:
         1b:12:74:20:02:fa:e2:6f:15:27:a0:cf:f3:ba:f5:e7:43:f0:
         60:b2:ac:08:97:3d:85:7d:0f:a9:cc:62:e7:b0:38:1b:47:fc:
         c6:b4:b0:0c:e0:d5:5e:5b:29:66:e6:bc:83:be:52:47:de:82:
         33:bc:f0:e1:2d:91:43:2b:d1:84:65:0d:64:fa:31:49:56:64:
         de:89:2a:fd:45:e3:eb:2b:69:15:d6:2e:ce:9a:25:35:a9:77:
         47:b6:32:f3:d8:4c:18:08:97:63:5e:04:89:38:8c:1d:f6:72:
         a5:47:ec:1e:a2:fe:46:58:ed:c6:86:9d:59:c1:72:93:31:af:
         2d:42:d6:95:7a:9e:30:25:02:4e:f2:2c:e1:48:c2:af:3e:b8:
         de:bb:1f:51:e2:59:98:0a:12:47:44:1e:20:41:9e:4a:cf:b5:
         f8:1b:40:dd:25:16:71:61:22:07:19:89:14:a0:27:9b:c0:fa:
         8e:60:bf:31
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQg1hDKTrfbrVPcAH8xQ051MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYTYxMzc3NDk1OTljMDNjN2I0NzJmMTQyYzcxOTY4MDAw
NmI2ZTYwHhcNMjUwMTAxMDc0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmI2OGI4OGE1NDdjOGNkNGU1YWYxZGQwZWRmNGE4YzFhY2U4ZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyaFn9lE1ICe+ra7M5ixMjFPf/Us
/e3RRBG9mTRncshtnXP9YSefIiuEaGh+9B1hcTAQNSlkWobib6v6heSLQSF25zGk
XGYoAwQxaLJeAVsbsMZG6M3Wz6SlHk9oT16YuN7lLkGirJKxF90h5uxFV6xpQvMu
2AIZ+x4ZhT84386wkY+QioVjroLfqU3HriPbI5pCZ4E5Jw/KRWUI2lR0RgpR3FGq
IT7iUrDQMKaP0nJ3aYxx4eXusld8ImslbsZkPrm1j8JsHMVyNnb5BoBhnh4x7Gt0
BDEtI9aeLxpPEEW3gdLrJGnYTcxUNiw3hJ/bnt8onEiJwgVHJSY6p259SQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH+2i4ilR8jNTlrx3Q7fSowazo0XMB8GA1UdIwQY
MBaAFCymE3dJWZwDx7Ry8ULHGWgABrbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtZVGQwbFpuQVBIdEhMeFFzY1phQUFHdHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82ZmNmNjYtOGU4Yy00ZGJiLThjZjAt
NTAxOWQyYzM4OGRiLzEvZjdhTGlLVkh5TTFPV3ZIZER0OUtqQnJPalJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82ZmNmNjYtOGU4Yy00ZGJiLThjZjAtNTAxOWQyYzM4OGRi
LzEvTEtZVGQwbFpuQVBIdEhMeFFzY1phQUFHdHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9BrMA8E
AgACMAkDBwAgAQZ4BHgwDQYJKoZIhvcNAQELBQADggEBAC0Lfr8cWRoPu08L5Pyq
IG4Odz+0BOKCD9J6lgqAed3xr+M+nEM83Sxa69Tgj/nfD8gz76wyPARN1LsH0la7
QmyI7kkOh0bUSxsSdCAC+uJvFSegz/O69edD8GCyrAiXPYV9D6nMYuewOBtH/Ma0
sAzg1V5bKWbmvIO+UkfegjO88OEtkUMr0YRlDWT6MUlWZN6JKv1F4+sraRXWLs6a
JTWpd0e2MvPYTBgIl2NeBIk4jB32cqVH7B6i/kZY7caGnVnBcpMxry1C1pV6njAl
Ak7yLOFIwq8+uN67H1HiWZgKEkdEHiBBnkrPtfgbQN0lFnFhIgcZiRSgJ5vA+o5g
vzE=
-----END CERTIFICATE-----