Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/MwzfvZntetFg-_eX5DgAKUVWZK0.roa
File:                     MwzfvZntetFg-_eX5DgAKUVWZK0.roa (raw, json)
Hash identifier:          px93WC5fRlO4NzSq6ywwEqfisL0ff50EWTLfIp14D3o=
Subject key identifier:   33:0C:DF:BD:99:ED:7A:D1:60:FB:F7:97:E4:38:00:29:45:56:64:AD
Certificate issuer:       /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial:       019424456964E2A69742D81E490EE3FA8ABA
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/MwzfvZntetFg-_eX5DgAKUVWZK0.roa
Signing time:             Wed 01 Jan 2025 23:48:36 +0000
ROA not before:           Wed 01 Jan 2025 23:48:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39719
IP address blocks:        193.36.110.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:69:64:e2:a6:97:42:d8:1e:49:0e:e3:fa:8a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
        Validity
            Not Before: Jan  1 23:48:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=330cdfbd99ed7ad160fbf797e4380029455664ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:c2:a2:ec:d7:32:55:6d:8f:be:b8:78:27:
                    98:f0:29:b3:90:a2:6e:d1:00:32:5b:c6:48:1e:5c:
                    73:dd:f4:20:b7:b9:4f:95:79:a5:70:c8:71:0e:dd:
                    64:ba:eb:ca:a9:9d:04:94:5f:d9:67:a1:13:6e:1b:
                    7b:f3:ee:87:a6:b3:29:9d:c5:7f:f1:ef:68:6f:aa:
                    a3:4a:f8:73:da:d7:0b:f8:a5:71:9c:c0:bc:76:93:
                    90:69:6c:c6:05:65:52:c1:9b:ff:bd:ed:62:bc:87:
                    e2:a8:8f:46:47:a8:4c:89:2b:42:be:2d:81:57:e0:
                    bb:e8:9e:f8:3d:88:eb:df:f5:f4:52:07:96:b9:ca:
                    c3:18:d4:ea:6e:44:dc:d1:f2:87:13:d7:77:d2:cc:
                    92:18:ef:e8:11:34:98:df:3a:9f:43:1f:cb:f7:d0:
                    ce:ed:0c:0e:ac:b5:7f:be:bf:8a:ac:b8:c7:d1:a2:
                    f9:1d:0c:fa:fe:b0:b6:33:bc:e5:ff:15:b4:ee:25:
                    7f:ad:e5:c1:ba:71:10:2d:d6:48:30:aa:cb:87:d1:
                    74:7e:a9:67:59:86:b9:64:6a:bf:3c:78:16:00:f0:
                    ec:e5:65:7d:e9:4a:12:8d:5c:f0:80:ad:e4:69:e3:
                    84:b0:87:eb:15:af:4f:89:ee:b2:ac:a9:bf:0c:34:
                    c4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0C:DF:BD:99:ED:7A:D1:60:FB:F7:97:E4:38:00:29:45:56:64:AD
            X509v3 Authority Key Identifier:
                keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/MwzfvZntetFg-_eX5DgAKUVWZK0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:0e:57:bc:6c:05:99:1f:d4:e3:b1:03:2b:d6:91:a8:6a:45:
         4b:a0:55:91:c7:d2:a9:95:fa:81:f4:2a:3c:e5:ad:0a:4f:48:
         1a:14:c0:6e:f3:be:82:d3:70:b8:4d:91:78:c2:66:bf:3d:3f:
         4a:54:a7:cc:a8:82:d9:b7:8c:50:10:a2:52:de:7f:cc:74:d9:
         65:70:bb:17:00:e0:61:86:a5:18:79:24:25:99:9d:3f:5e:0c:
         e7:89:45:5a:ec:5c:3e:68:b9:24:63:f5:4d:01:0b:b7:89:0b:
         5e:86:9d:7d:b9:e7:fc:b3:2f:e8:bb:0f:7a:6d:12:e6:a9:d2:
         0d:3e:da:8d:ee:b3:e8:6f:e5:93:72:4d:9d:5a:af:55:32:e2:
         0e:ec:6e:2e:25:ec:f5:4c:be:16:f7:cc:5f:e8:89:66:84:91:
         55:7f:9a:ed:48:29:02:15:8d:49:7b:7f:18:be:bb:ab:11:74:
         47:52:31:1b:73:69:6f:f5:24:95:f5:55:9c:36:01:53:f1:35:
         73:38:4e:05:34:0c:c8:20:08:59:23:87:17:68:5a:48:b9:3a:
         7b:fa:36:a9:1d:49:56:04:a2:77:b3:2a:18:11:18:0a:72:0c:
         65:86:e0:8f:5b:1c:08:40:cc:08:2f:65:aa:3b:60:c0:5e:12:
         27:8d:d7:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRWlk4qaXQtgeSQ7j+oq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjRiOWVlY2EyNThhZTc4YzRkNTEzMjFhOGJkZmVmOWEy
YjZhM2MwHhcNMjUwMTAxMjM0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzBjZGZiZDk5ZWQ3YWQxNjBmYmY3OTdlNDM4MDAyOTQ1NTY2NGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol7CouzXMlVtj764eCeY8CmzkKJu
0QAyW8ZIHlxz3fQgt7lPlXmlcMhxDt1kuuvKqZ0ElF/ZZ6ETbht78+6HprMpncV/
8e9ob6qjSvhz2tcL+KVxnMC8dpOQaWzGBWVSwZv/ve1ivIfiqI9GR6hMiStCvi2B
V+C76J74PYjr3/X0UgeWucrDGNTqbkTc0fKHE9d30sySGO/oETSY3zqfQx/L99DO
7QwOrLV/vr+KrLjH0aL5HQz6/rC2M7zl/xW07iV/reXBunEQLdZIMKrLh9F0fqln
WYa5ZGq/PHgWAPDs5WV96UoSjVzwgK3kaeOEsIfrFa9Pie6yrKm/DDTEawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDMM372Z7XrRYPv3l+Q4AClFVmStMB8GA1UdIwQY
MBaAFGdkue7KJYrnjE1RMhqL3++aK2o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTIt
NDI1NmE0NmFmZWVjLzEvTXd6ZnZabnRldEZnLV9lWDVEZ0FLVVZXWkswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTItNDI1NmE0NmFmZWVj
LzEvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSRuMA0G
CSqGSIb3DQEBCwUAA4IBAQCwDle8bAWZH9TjsQMr1pGoakVLoFWRx9KplfqB9Co8
5a0KT0gaFMBu876C03C4TZF4wma/PT9KVKfMqILZt4xQEKJS3n/MdNllcLsXAOBh
hqUYeSQlmZ0/XgzniUVa7Fw+aLkkY/VNAQu3iQtehp19uef8sy/ouw96bRLmqdIN
PtqN7rPob+WTck2dWq9VMuIO7G4uJez1TL4W98xf6IlmhJFVf5rtSCkCFY1Je38Y
vrurEXRHUjEbc2lv9SSV9VWcNgFT8TVzOE4FNAzIIAhZI4cXaFpIuTp7+japHUlW
BKJ3syoYERgKcgxlhuCPWxwIQMwIL2WqO2DAXhInjdcL
-----END CERTIFICATE-----