Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/LhWlSdwpO_qgSdSST0jwrIh2o5s.roa
File:                     LhWlSdwpO_qgSdSST0jwrIh2o5s.roa (raw, json)
Hash identifier:          FREf59fDWKj/I+6zdr/5G5q7bDATIsl3a5d4IqOgaNs=
Subject key identifier:   2E:15:A5:49:DC:29:3B:FA:A0:49:D4:92:4F:48:F0:AC:88:76:A3:9B
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       0193776784402DA9FBAF171DD8C008400C06
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/LhWlSdwpO_qgSdSST0jwrIh2o5s.roa
Signing time:             Fri 29 Nov 2024 10:11:32 +0000
ROA not before:           Fri 29 Nov 2024 10:11:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7018
IP address blocks:        2a06:b440::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:77:67:84:40:2d:a9:fb:af:17:1d:d8:c0:08:40:0c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Nov 29 10:11:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2e15a549dc293bfaa049d4924f48f0ac8876a39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c6:24:4b:3f:2b:46:1d:90:5c:51:81:1d:9c:
                    5a:4b:96:92:9f:18:bd:29:6d:20:df:16:3c:3d:6e:
                    6d:61:23:31:80:9c:39:89:da:e1:a9:69:fb:58:8d:
                    c5:a3:4e:12:45:ba:aa:2f:09:be:36:33:3c:25:dc:
                    1d:c0:15:9d:3e:08:90:19:28:10:c7:b7:51:be:95:
                    74:3f:9c:eb:a3:4c:e0:4c:e5:e6:f4:6b:89:ee:2c:
                    c2:aa:03:01:ce:83:b3:a1:4e:3d:27:a8:ab:f5:c3:
                    cf:ec:a5:b2:eb:0d:38:49:e4:6e:81:91:2f:71:02:
                    eb:fc:d2:1b:13:a3:5f:f7:ba:58:f2:e2:36:b2:c5:
                    6f:38:df:18:f1:45:56:d7:36:dc:a9:c1:5e:98:22:
                    0c:d5:44:07:1b:c5:72:4f:98:16:19:c5:57:ed:c0:
                    98:af:43:83:73:5b:42:9d:b4:04:58:c0:e1:35:54:
                    1b:22:0c:95:95:18:30:33:87:5f:20:f8:e5:af:9e:
                    1a:9e:ff:d0:bc:c7:69:03:e5:68:32:06:29:53:5c:
                    96:e8:09:bc:75:2e:11:fe:21:91:78:b2:ff:a8:9d:
                    73:1e:e7:fb:95:15:94:63:32:9b:ff:4d:40:02:6d:
                    f8:38:c0:eb:b4:f5:b4:ea:5b:4f:12:ae:2b:9b:7b:
                    0e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:15:A5:49:DC:29:3B:FA:A0:49:D4:92:4F:48:F0:AC:88:76:A3:9B
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/LhWlSdwpO_qgSdSST0jwrIh2o5s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:b440::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:46:b7:f7:8a:09:5d:cb:70:9d:ea:cd:d1:26:e4:a8:4b:cb:
         75:cb:dc:99:9d:71:e1:51:35:62:d2:f0:88:a8:3f:a6:aa:12:
         bc:11:e4:04:13:20:0b:4d:5d:ce:53:63:b8:2e:d3:8b:fe:d5:
         ab:94:c4:10:6f:d0:3d:d2:2f:c1:ff:75:5b:ed:30:e4:06:3b:
         79:07:a5:47:22:41:9a:4a:29:9f:81:56:68:21:45:63:aa:c0:
         b9:10:52:a6:f3:e1:a0:5a:8c:26:67:ca:4d:fd:ec:9c:4d:85:
         05:4c:c5:7c:55:29:bd:48:dc:ae:7b:eb:da:2e:73:a2:17:19:
         be:ca:1a:eb:ba:1c:f9:24:70:ae:05:59:bc:a1:42:29:cd:92:
         14:eb:ce:d9:9d:36:fb:c6:1e:6f:cb:ae:93:71:16:bf:0c:c7:
         80:35:77:f3:e4:ff:b9:4b:f6:c6:98:b2:30:0d:ab:aa:29:fa:
         ae:15:9b:08:40:6c:92:e3:8b:d5:b6:11:8f:31:24:4e:5d:45:
         e2:f5:c9:58:7e:a6:de:87:77:3e:c3:6e:97:44:dd:3d:96:cb:
         e1:09:1b:7a:13:f0:f8:54:fc:b1:a0:f0:cd:a1:ea:cc:f4:9c:
         29:93:9e:e9:9e:12:2e:7d:12:ac:f3:3c:ff:b5:4f:af:6b:0d:
         59:f1:d3:a3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZN3Z4RALan7rxcd2MAIQAwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjQxMTI5MTAxMTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTE1YTU0OWRjMjkzYmZhYTA0OWQ0OTI0ZjQ4ZjBhYzg4NzZhMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sYkSz8rRh2QXFGBHZxaS5aSnxi9
KW0g3xY8PW5tYSMxgJw5idrhqWn7WI3Fo04SRbqqLwm+NjM8JdwdwBWdPgiQGSgQ
x7dRvpV0P5zro0zgTOXm9GuJ7izCqgMBzoOzoU49J6ir9cPP7KWy6w04SeRugZEv
cQLr/NIbE6Nf97pY8uI2ssVvON8Y8UVW1zbcqcFemCIM1UQHG8VyT5gWGcVX7cCY
r0ODc1tCnbQEWMDhNVQbIgyVlRgwM4dfIPjlr54anv/QvMdpA+VoMgYpU1yW6Am8
dS4R/iGReLL/qJ1zHuf7lRWUYzKb/01AAm34OMDrtPW06ltPEq4rm3sO2QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFC4VpUncKTv6oEnUkk9I8KyIdqObMB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvTGhXbFNkd3BPX3FnU2RTU1QwandySWgybzVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKga0QDAN
BgkqhkiG9w0BAQsFAAOCAQEAUUa394oJXctwnerN0SbkqEvLdcvcmZ1x4VE1YtLw
iKg/pqoSvBHkBBMgC01dzlNjuC7Ti/7Vq5TEEG/QPdIvwf91W+0w5AY7eQelRyJB
mkopn4FWaCFFY6rAuRBSpvPhoFqMJmfKTf3snE2FBUzFfFUpvUjcrnvr2i5zohcZ
vsoa67oc+SRwrgVZvKFCKc2SFOvO2Z02+8Yeb8uuk3EWvwzHgDV38+T/uUv2xpiy
MA2rqin6rhWbCEBskuOL1bYRjzEkTl1F4vXJWH6m3od3PsNul0TdPZbL4QkbehPw
+FT8saDwzaHqzPScKZOe6Z4SLn0SrPM8/7VPr2sNWfHTow==
-----END CERTIFICATE-----