Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/RKmtjmx8dGmZLS6fAJiBKQnORQs.roa
File:                     RKmtjmx8dGmZLS6fAJiBKQnORQs.roa (raw, json)
Hash identifier:          uAM4Z/WN2c7W0xTj1SOSxZNG72uS1HvTkZghAtYIMtE=
Subject key identifier:   44:A9:AD:8E:6C:7C:74:69:99:2D:2E:9F:00:98:81:29:09:CE:45:0B
Certificate issuer:       /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Certificate serial:       019420687529100D3E9E2DB809F27335E9CE
Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/RKmtjmx8dGmZLS6fAJiBKQnORQs.roa
Signing time:             Wed 01 Jan 2025 05:48:24 +0000
ROA not before:           Wed 01 Jan 2025 05:48:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49703
IP address blocks:        193.24.116.0/24 maxlen: 24
                          2a13:f700::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:75:29:10:0d:3e:9e:2d:b8:09:f2:73:35:e9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
        Validity
            Not Before: Jan  1 05:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=44a9ad8e6c7c7469992d2e9f0098812909ce450b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:32:70:f0:7a:e7:88:1c:24:8f:de:a9:df:41:
                    46:b2:de:86:43:86:51:66:6c:71:a7:14:cf:0c:65:
                    55:57:d8:6a:e0:a8:ea:71:d2:51:98:3c:55:bc:45:
                    ae:4c:ac:b7:70:a7:84:6e:42:67:c9:54:d5:fd:5f:
                    1c:d7:79:ea:21:6b:8e:f1:29:1b:cf:b6:c4:3c:56:
                    86:5b:79:58:38:7a:5c:71:63:c1:a5:89:6f:80:16:
                    f3:26:91:85:e7:34:c2:7d:e6:2f:5e:0c:35:9d:d8:
                    6c:1e:1c:6f:81:90:69:4c:6f:10:c4:0e:8b:bf:68:
                    b0:04:40:b9:7c:8a:ee:21:8e:84:ca:2b:8c:07:16:
                    8c:fc:2b:dd:c3:ac:47:fe:0c:bb:04:a8:02:9a:c7:
                    87:b8:7b:89:56:d4:99:45:ba:9d:2d:b7:ca:fa:c7:
                    ed:b3:d7:aa:57:66:e5:cb:28:a3:21:bf:53:4e:a1:
                    b5:0f:28:51:0b:34:f5:c4:cb:0c:d2:24:06:f0:91:
                    b2:ad:f9:b9:3a:36:20:78:3a:8c:f0:2e:1d:6c:6c:
                    56:aa:61:48:54:9f:c3:24:0c:a5:88:ec:ec:80:9a:
                    05:1d:14:a5:d8:76:ff:d1:1f:0d:7c:ec:97:bf:4f:
                    8d:dc:10:b9:50:81:12:03:c0:11:e0:4d:3d:4f:d1:
                    5f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A9:AD:8E:6C:7C:74:69:99:2D:2E:9F:00:98:81:29:09:CE:45:0B
            X509v3 Authority Key Identifier:
                keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/RKmtjmx8dGmZLS6fAJiBKQnORQs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.24.116.0/24
                IPv6:
                  2a13:f700::/29

    Signature Algorithm: sha256WithRSAEncryption
         9c:a4:6e:72:5e:3c:32:ed:64:91:56:cf:d3:95:d8:e3:e9:d0:
         04:9f:ae:da:1c:cf:e0:c9:27:f2:9c:7c:ce:48:c5:02:0b:46:
         d9:9b:e0:28:e0:30:a4:ff:24:60:95:8e:71:3c:4b:2f:3a:c9:
         ec:38:c3:ba:dd:e8:a4:a2:d2:d6:dd:df:2c:e3:be:68:5a:05:
         f6:6d:06:ac:c2:a7:8e:f9:f5:f9:a5:77:1e:a7:bb:1e:05:b5:
         a5:56:5f:2c:88:ec:22:6d:70:cc:7e:51:2b:13:5a:54:4d:43:
         42:33:bb:41:07:da:52:bc:b6:bf:e4:c0:51:5b:31:d2:43:39:
         3f:f8:f1:a4:83:2b:b2:f0:ce:0b:7b:68:ee:1d:ed:dd:52:62:
         26:e2:e3:23:86:13:72:3c:de:d3:57:16:03:36:8c:40:2f:29:
         17:64:3c:da:50:b1:78:41:5f:4c:58:99:1a:f6:ba:e5:55:60:
         44:72:a1:1e:a2:04:0c:b5:40:c5:7c:1e:3d:85:fb:36:e4:fd:
         17:fa:0e:e9:b7:78:58:aa:1d:15:17:d2:c3:17:a4:ce:36:17:
         ac:99:94:60:5d:c6:79:fb:4c:81:a9:74:b4:bd:6a:54:2f:f0:
         29:ed:56:7a:92:53:eb:49:fc:2e:b0:b5:81:e4:2f:03:2b:98:
         ab:de:63:56
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgaHUpEA0+ni24CfJzNenOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjFhNDJiZjIyNjRjYjVlYmNlYzZlMTkwZDAyYTZkNTUz
YjYyMzMwHhcNMjUwMTAxMDU0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGE5YWQ4ZTZjN2M3NDY5OTkyZDJlOWYwMDk4ODEyOTA5Y2U0NTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DJw8HrniBwkj96p30FGst6GQ4ZR
ZmxxpxTPDGVVV9hq4KjqcdJRmDxVvEWuTKy3cKeEbkJnyVTV/V8c13nqIWuO8Skb
z7bEPFaGW3lYOHpccWPBpYlvgBbzJpGF5zTCfeYvXgw1ndhsHhxvgZBpTG8QxA6L
v2iwBEC5fIruIY6EyiuMBxaM/Cvdw6xH/gy7BKgCmseHuHuJVtSZRbqdLbfK+sft
s9eqV2blyyijIb9TTqG1DyhRCzT1xMsM0iQG8JGyrfm5OjYgeDqM8C4dbGxWqmFI
VJ/DJAyliOzsgJoFHRSl2Hb/0R8NfOyXv0+N3BC5UIESA8AR4E09T9FfpwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFESprY5sfHRpmS0unwCYgSkJzkULMB8GA1UdIwQY
MBaAFIJhpCvyJky1687G4ZDQKm1VO2IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81NGI2NzgtYjJmZS00NDlkLWIzMjYt
ZGNhZTcwZjFjOTNiLzEvUkttdGpteDhkR21aTFM2ZkFKaUJLUW5PUlFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81NGI2NzgtYjJmZS00NDlkLWIzMjYtZGNhZTcwZjFjOTNi
LzEvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwRh0MA0E
AgACMAcDBQMqE/cAMA0GCSqGSIb3DQEBCwUAA4IBAQCcpG5yXjwy7WSRVs/Tldjj
6dAEn67aHM/gySfynHzOSMUCC0bZm+Ao4DCk/yRglY5xPEsvOsnsOMO63eikotLW
3d8s475oWgX2bQaswqeO+fX5pXcep7seBbWlVl8siOwibXDMflErE1pUTUNCM7tB
B9pSvLa/5MBRWzHSQzk/+PGkgyuy8M4Le2juHe3dUmIm4uMjhhNyPN7TVxYDNoxA
LykXZDzaULF4QV9MWJka9rrlVWBEcqEeogQMtUDFfB49hfs25P0X+g7pt3hYqh0V
F9LDF6TONhesmZRgXcZ5+0yBqXS0vWpUL/Ap7VZ6klPrSfwusLWB5C8DK5ir3mNW
-----END CERTIFICATE-----