Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/_AGKWozlzWCnt0EVUV_nIRjWGDc.roa
File:                     _AGKWozlzWCnt0EVUV_nIRjWGDc.roa (raw, json)
Hash identifier:          u4jnpeyvwfIgkyOL/DVIQbqgyc9sUOLPqmAM+WUWM1s=
Subject key identifier:   FC:01:8A:5A:8C:E5:CD:60:A7:B7:41:15:51:5F:E7:21:18:D6:18:37
Certificate issuer:       /CN=1627b80681f5b48e126898295983e0df29971b98
Certificate serial:       01942746D48F59C3B2392710FCE8F71FD486
Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/_AGKWozlzWCnt0EVUV_nIRjWGDc.roa
Signing time:             Thu 02 Jan 2025 13:49:00 +0000
ROA not before:           Thu 02 Jan 2025 13:49:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39387
IP address blocks:        195.178.118.0/23 maxlen: 23
                          2001:67c:300::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:46:d4:8f:59:c3:b2:39:27:10:fc:e8:f7:1f:d4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627b80681f5b48e126898295983e0df29971b98
        Validity
            Not Before: Jan  2 13:49:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fc018a5a8ce5cd60a7b74115515fe72118d61837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:99:f7:9b:ae:89:d5:f1:32:58:11:ea:c5:
                    4a:cc:ab:48:a8:bb:f3:3f:88:5b:d4:b2:9e:0e:c3:
                    e3:b5:1d:ff:e8:46:ba:76:92:dd:a8:d1:04:f9:e1:
                    21:5e:10:1b:72:f0:70:b8:d2:2d:c1:5e:8a:c6:b4:
                    ea:69:c8:88:71:06:33:b5:95:ab:fb:43:e3:a4:0a:
                    b0:c9:ed:72:38:3b:ea:9c:1a:48:9a:f3:ce:14:cb:
                    61:1f:e3:ac:18:a5:90:86:98:f3:98:a7:9b:58:50:
                    bc:6e:1f:63:7e:22:39:9e:1d:f0:b8:5a:93:5b:40:
                    21:5a:59:c9:ec:3c:53:39:d0:f5:8d:54:6d:32:c8:
                    40:1b:44:0c:ee:71:3c:51:2f:7d:3b:8a:19:59:e8:
                    7c:92:19:c8:42:59:24:75:89:5b:ef:14:78:16:59:
                    1e:c8:d5:5e:48:9f:15:71:a6:a1:0b:33:88:f8:7e:
                    b3:da:22:46:05:16:62:6a:1f:3a:a4:c2:7d:2d:98:
                    25:18:fd:9c:57:35:3c:87:8d:41:a9:54:6c:16:e8:
                    9c:29:02:2f:43:5b:d0:86:42:5b:2b:c1:b8:38:10:
                    8d:6d:39:0b:d8:28:6d:ba:9e:c4:c8:5c:76:49:f6:
                    c4:f3:36:99:2c:e6:b5:10:98:75:84:dd:a5:50:72:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:01:8A:5A:8C:E5:CD:60:A7:B7:41:15:51:5F:E7:21:18:D6:18:37
            X509v3 Authority Key Identifier:
                keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/_AGKWozlzWCnt0EVUV_nIRjWGDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.118.0/23
                IPv6:
                  2001:67c:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:db:d9:86:aa:39:22:fa:85:bf:fa:ac:3f:19:ec:ba:c7:0b:
         ac:cd:2f:f7:d7:27:ab:1f:d1:f8:be:b7:25:76:7b:d8:2e:78:
         20:bf:87:aa:bc:8d:1e:65:e4:5e:01:a2:93:9d:dc:35:da:6b:
         17:84:ae:ce:0e:76:60:f6:7c:91:41:78:64:34:07:9b:1c:52:
         d5:41:fe:b5:b7:70:a1:57:06:76:1a:93:f4:25:77:52:e4:ac:
         28:57:ab:52:92:71:2c:16:84:7d:fe:41:ed:d3:d7:28:0e:f1:
         61:35:f0:4d:87:2d:0f:ae:5e:97:a7:bc:0c:07:c6:f4:5b:c0:
         87:8c:b1:9c:06:d0:b6:dd:37:70:41:f6:df:c1:f6:6e:cb:97:
         3c:18:96:a9:00:cb:9d:ae:b4:05:09:3b:fc:2c:5f:72:14:89:
         e4:f7:b3:36:b0:15:c5:b5:a9:3d:1d:5f:bc:5f:0c:09:73:3c:
         ed:48:a0:77:00:b4:5d:98:58:5e:b6:d5:a9:61:87:54:40:bf:
         3b:fa:95:f9:7b:cd:cb:dd:ab:ca:64:6b:3b:27:9d:50:5b:dc:
         d3:22:e2:bc:c0:a2:15:81:d6:f9:81:1a:96:0c:11:b2:7e:fd:
         cf:23:f2:05:79:fd:41:51:0e:f2:01:21:f4:bc:07:8e:0f:95:
         51:b9:2d:c6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQnRtSPWcOyOScQ/Oj3H9SGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MjdiODA2ODFmNWI0OGUxMjY4OTgyOTU5ODNlMGRmMjk5
NzFiOTgwHhcNMjUwMTAyMTM0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzAxOGE1YThjZTVjZDYwYTdiNzQxMTU1MTVmZTcyMTE4ZDYxODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqaZ95uuidXxMlgR6sVKzKtIqLvz
P4hb1LKeDsPjtR3/6Ea6dpLdqNEE+eEhXhAbcvBwuNItwV6KxrTqaciIcQYztZWr
+0PjpAqwye1yODvqnBpImvPOFMthH+OsGKWQhpjzmKebWFC8bh9jfiI5nh3wuFqT
W0AhWlnJ7DxTOdD1jVRtMshAG0QM7nE8US99O4oZWeh8khnIQlkkdYlb7xR4Flke
yNVeSJ8VcaahCzOI+H6z2iJGBRZiah86pMJ9LZglGP2cVzU8h41BqVRsFuicKQIv
Q1vQhkJbK8G4OBCNbTkL2Chtup7EyFx2SfbE8zaZLOa1EJh1hN2lUHLyjQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPwBilqM5c1gp7dBFVFf5yEY1hg3MB8GA1UdIwQY
MBaAFBYnuAaB9bSOEmiYKVmD4N8plxuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmllNEJvSDF0STRTYUpncFdZUGczeW1YRzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iZjg2YjAtYzVlZC00YmRkLWE5MTct
NjgyY2QzYmQ0MTAyLzEvX0FHS1dvemx6V0NudDBFVlVWX25JUmpXR0RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iZjg2YjAtYzVlZC00YmRkLWE5MTctNjgyY2QzYmQ0MTAy
LzEvRmllNEJvSDF0STRTYUpncFdZUGczeW1YRzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw7J2MA8E
AgACMAkDBwAgAQZ8AwAwDQYJKoZIhvcNAQELBQADggEBADzb2YaqOSL6hb/6rD8Z
7LrHC6zNL/fXJ6sf0fi+tyV2e9gueCC/h6q8jR5l5F4BopOd3DXaaxeErs4OdmD2
fJFBeGQ0B5scUtVB/rW3cKFXBnYak/Qld1LkrChXq1KScSwWhH3+Qe3T1ygO8WE1
8E2HLQ+uXpenvAwHxvRbwIeMsZwG0LbdN3BB9t/B9m7LlzwYlqkAy52utAUJO/ws
X3IUieT3szawFcW1qT0dX7xfDAlzPO1IoHcAtF2YWF621alhh1RAvzv6lfl7zcvd
q8pkazsnnVBb3NMi4rzAohWB1vmBGpYMEbJ+/c8j8gV5/UFRDvIBIfS8B44PlVG5
LcY=
-----END CERTIFICATE-----