Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/5pbhFrbv6p0fxLITgiU8s5OQtVw.roa
File:                     5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (raw, json)
Hash identifier:          MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=
Subject key identifier:   E6:96:E1:16:B6:EF:EA:9D:1F:C4:B2:13:82:25:3C:B3:93:90:B5:5C
Certificate issuer:       /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial:       0194236A20302986CBBA07904B1A1FC4B3B1
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/5pbhFrbv6p0fxLITgiU8s5OQtVw.roa
Signing time:             Wed 01 Jan 2025 19:49:05 +0000
ROA not before:           Wed 01 Jan 2025 19:49:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56729
IP address blocks:        93.189.126.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:20:30:29:86:cb:ba:07:90:4b:1a:1f:c4:b3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
        Validity
            Not Before: Jan  1 19:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e696e116b6efea9d1fc4b21382253cb39390b55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:33:f1:1e:08:c3:84:3a:61:c8:8f:8b:3e:
                    77:fe:8b:17:cc:d4:3e:9a:e7:2e:9a:af:93:1c:ae:
                    27:5f:bf:f6:39:a2:36:56:69:39:ec:73:cb:eb:8c:
                    a9:ae:22:53:93:e6:8a:f1:33:8c:3c:74:44:bc:fe:
                    c6:bd:2f:cb:66:91:26:d0:55:6d:27:45:b5:53:97:
                    80:f5:8a:f7:37:d9:25:b8:8b:e1:df:09:3d:0d:c7:
                    c6:6b:91:26:57:82:4b:49:f6:0a:0c:fc:ec:86:d4:
                    14:fa:bd:7f:6c:45:f2:89:37:f0:30:df:f7:54:d1:
                    0c:d8:59:41:f0:5d:44:8f:af:87:63:c2:63:1c:96:
                    f7:6f:5e:17:71:9a:69:86:ad:3f:82:57:f2:23:a7:
                    1b:2f:35:fe:75:a1:30:ee:4e:0a:70:9c:d5:08:03:
                    a3:3d:9a:31:fb:04:d0:66:e1:ce:05:8b:86:c9:36:
                    ea:7b:bb:d9:29:4f:07:2b:28:75:f0:af:dd:79:82:
                    d4:81:62:2d:ca:1b:8e:37:c7:92:c2:6f:75:45:42:
                    72:96:90:5d:27:29:ce:34:e3:cd:c6:00:9a:0b:16:
                    27:37:4d:b4:11:e7:d7:ba:e4:08:ea:62:d5:35:87:
                    01:c2:f0:93:a9:eb:81:0e:0f:ff:7c:37:f2:ca:47:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:96:E1:16:B6:EF:EA:9D:1F:C4:B2:13:82:25:3C:B3:93:90:B5:5C
            X509v3 Authority Key Identifier:
                keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/5pbhFrbv6p0fxLITgiU8s5OQtVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.189.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:45:ca:18:59:f3:9e:ec:21:ac:c1:c9:14:cb:88:e0:44:64:
         01:29:c6:5b:6b:ad:ee:f2:04:d2:41:98:a2:9e:b4:6e:1b:bc:
         ac:62:fe:37:19:d5:fb:fb:f7:09:3d:ee:5e:0e:7a:8d:a0:3a:
         b7:57:8a:db:4d:00:42:41:e3:c6:0c:77:06:8b:a0:a2:f9:4a:
         63:ff:5f:c5:92:99:f6:19:0d:4c:c3:80:c8:2c:1b:22:45:a1:
         75:e5:a8:42:f7:14:e1:53:e0:35:f1:59:45:fa:84:6e:fd:b0:
         0d:73:54:b6:2e:b6:2b:ec:fa:2d:c8:15:b8:0e:31:ca:91:f4:
         f3:96:c8:1f:bd:38:54:bd:89:f5:9b:12:ed:c6:b9:3a:7a:e8:
         15:05:2f:9c:21:96:c6:0c:7c:bc:c7:73:d6:a1:96:7c:68:55:
         f2:9d:aa:b1:a1:60:5a:3b:f7:81:3e:d8:ca:5e:ff:16:d6:07:
         1d:8e:50:20:8c:d1:c3:9c:a9:b2:b6:b6:13:ad:f3:14:2c:6f:
         4a:79:e2:dd:f9:64:33:87:fc:6b:fb:3a:aa:ee:a3:fe:4f:38:
         46:40:ab:99:d4:f3:70:f9:ae:e5:91:49:75:c1:db:61:df:85:
         a9:f0:38:47:aa:c4:d3:2e:a2:b4:b8:ec:c5:b8:2b:1a:00:22:
         19:85:39:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaiAwKYbLugeQSxofxLOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3
YzE2NzEwHhcNMjUwMTAxMTk0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjk2ZTExNmI2ZWZlYTlkMWZjNGIyMTM4MjI1M2NiMzkzOTBiNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooYz8R4Iw4Q6YciPiz53/osXzNQ+
mucumq+THK4nX7/2OaI2Vmk57HPL64ypriJTk+aK8TOMPHREvP7GvS/LZpEm0FVt
J0W1U5eA9Yr3N9kluIvh3wk9DcfGa5EmV4JLSfYKDPzshtQU+r1/bEXyiTfwMN/3
VNEM2FlB8F1Ej6+HY8JjHJb3b14XcZpphq0/glfyI6cbLzX+daEw7k4KcJzVCAOj
PZox+wTQZuHOBYuGyTbqe7vZKU8HKyh18K/deYLUgWItyhuON8eSwm91RUJylpBd
JynONOPNxgCaCxYnN020EefXuuQI6mLVNYcBwvCTqeuBDg//fDfyykcNUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOaW4Ra27+qdH8SyE4IlPLOTkLVcMB8GA1UdIwQY
MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt
YjY0Y2FiNGJiZGZmLzEvNXBiaEZyYnY2cDBmeExJVGdpVThzNU9RdFZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm
LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXb1+MA0G
CSqGSIb3DQEBCwUAA4IBAQC3RcoYWfOe7CGswckUy4jgRGQBKcZba63u8gTSQZii
nrRuG7ysYv43GdX7+/cJPe5eDnqNoDq3V4rbTQBCQePGDHcGi6Ci+Upj/1/Fkpn2
GQ1Mw4DILBsiRaF15ahC9xThU+A18VlF+oRu/bANc1S2LrYr7PotyBW4DjHKkfTz
lsgfvThUvYn1mxLtxrk6eugVBS+cIZbGDHy8x3PWoZZ8aFXynaqxoWBaO/eBPtjK
Xv8W1gcdjlAgjNHDnKmytrYTrfMULG9KeeLd+WQzh/xr+zqq7qP+TzhGQKuZ1PNw
+a7lkUl1wdth34Wp8DhHqsTTLqK0uOzFuCsaACIZhTmW
-----END CERTIFICATE-----