Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/7Q18JYmAuxaMa6IHufbofG2Nif4.roa
File:                     7Q18JYmAuxaMa6IHufbofG2Nif4.roa (raw, json)
Hash identifier:          SgEEylWwu8UHfA3f6YmbRxIxeIe/WWwb7mO+pnXONBI=
Subject key identifier:   ED:0D:7C:25:89:80:BB:16:8C:6B:A2:07:B9:F6:E8:7C:6D:8D:89:FE
Certificate issuer:       /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial:       0194258F6CF8D1C70CE26F3DC1489E867B8B
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/7Q18JYmAuxaMa6IHufbofG2Nif4.roa
Signing time:             Thu 02 Jan 2025 05:49:03 +0000
ROA not before:           Thu 02 Jan 2025 05:49:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31662
IP address blocks:        193.186.252.0/24 maxlen: 24
                          2001:67c:934::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:6c:f8:d1:c7:0c:e2:6f:3d:c1:48:9e:86:7b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
        Validity
            Not Before: Jan  2 05:49:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ed0d7c258980bb168c6ba207b9f6e87c6d8d89fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:5b:27:79:42:b0:90:ee:01:fd:7b:b6:57:
                    0f:c2:c2:ed:1d:31:76:8a:3a:57:8f:1a:00:fa:4e:
                    d2:fd:f8:6c:31:57:a3:bd:fd:91:f8:d7:8c:35:1a:
                    c6:40:0b:3b:57:b8:6d:d3:e6:d5:3c:53:dc:7a:d6:
                    e6:3b:cc:09:11:fb:05:c7:ad:94:2e:52:ad:07:cf:
                    a5:7a:1d:9c:be:9c:df:ba:b6:13:25:cb:76:8c:0c:
                    d1:50:54:22:04:bc:ac:56:36:cf:d4:b9:df:c6:9e:
                    8f:4e:ff:6e:63:7e:59:8b:3d:b3:e0:bb:a9:2b:e9:
                    b6:46:54:a5:a0:0b:b8:ee:f5:c7:52:bc:fa:6e:94:
                    67:b1:cf:5e:a5:a1:52:01:7b:c1:dc:df:e7:77:c6:
                    c0:3a:df:00:c7:20:1d:7f:6e:63:cb:28:4b:90:2d:
                    4a:30:20:55:15:f2:c1:dc:33:05:c6:1d:32:3d:16:
                    11:30:47:c0:f1:1f:d1:55:53:ab:9a:d9:4e:b6:4d:
                    83:f6:61:4d:3f:00:b8:8c:6d:65:54:be:61:19:94:
                    72:45:84:52:7b:5f:76:1c:1f:d2:06:e3:52:b5:c4:
                    7f:2d:86:a7:51:73:a7:61:92:38:e1:de:ac:69:f8:
                    f0:42:9d:e6:67:97:d2:ef:84:6c:cb:92:8b:c4:59:
                    1b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0D:7C:25:89:80:BB:16:8C:6B:A2:07:B9:F6:E8:7C:6D:8D:89:FE
            X509v3 Authority Key Identifier:
                keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/7Q18JYmAuxaMa6IHufbofG2Nif4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.186.252.0/24
                IPv6:
                  2001:67c:934::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:8f:69:ce:fd:3d:13:b4:dc:08:08:de:00:af:86:76:ca:a4:
         51:93:ed:e1:6e:5b:b4:b7:50:a2:32:21:b7:ab:b1:33:c5:c4:
         6a:c3:51:3e:e7:9b:6c:f5:71:a3:2c:45:f2:92:78:5e:d6:1e:
         49:e3:e2:a3:21:ed:df:ee:8d:d1:92:9b:be:5e:01:e6:d8:d6:
         b5:df:8c:18:42:79:ea:e1:a9:38:07:10:ce:03:60:f6:be:fe:
         a9:11:63:db:bf:a4:2e:67:7e:d2:95:c6:38:39:a5:77:76:43:
         b2:d3:35:d1:66:f4:5b:91:46:2c:9f:01:88:f6:bb:da:31:a9:
         b8:e7:8c:d6:f6:4e:22:6e:c3:99:3c:08:ef:e1:71:8d:72:e7:
         8d:8d:b5:6d:a0:84:aa:cf:1d:dc:61:7a:f6:37:e2:bd:70:4e:
         1e:10:3a:0a:ed:56:0d:9b:7d:c3:b2:7a:f4:83:af:b6:0b:e1:
         ca:47:d1:f4:23:ea:89:5c:0c:2e:d9:10:88:22:42:5f:dd:05:
         84:8f:72:e3:79:8e:bb:a9:84:8e:a8:dd:87:0d:7b:32:e1:0c:
         7f:35:03:ab:e9:93:26:c2:f8:11:d6:86:af:2f:cd:26:89:94:
         ea:a6:cb:7c:5e:d4:2a:1a:4b:88:05:92:ab:0b:04:69:e4:c7:
         c2:2f:83:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQlj2z40ccM4m89wUiehnuLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NTRiZDhhODYzYTMxODk1Y2M2Y2I5MjJmMzAwOGIzZjA4
YWFkYWUwHhcNMjUwMTAyMDU0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDBkN2MyNTg5ODBiYjE2OGM2YmEyMDdiOWY2ZTg3YzZkOGQ4OWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZxbJ3lCsJDuAf17tlcPwsLtHTF2
ijpXjxoA+k7S/fhsMVejvf2R+NeMNRrGQAs7V7ht0+bVPFPcetbmO8wJEfsFx62U
LlKtB8+leh2cvpzfurYTJct2jAzRUFQiBLysVjbP1Lnfxp6PTv9uY35Ziz2z4Lup
K+m2RlSloAu47vXHUrz6bpRnsc9epaFSAXvB3N/nd8bAOt8AxyAdf25jyyhLkC1K
MCBVFfLB3DMFxh0yPRYRMEfA8R/RVVOrmtlOtk2D9mFNPwC4jG1lVL5hGZRyRYRS
e192HB/SBuNStcR/LYanUXOnYZI44d6safjwQp3mZ5fS74Rsy5KLxFkbJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO0NfCWJgLsWjGuiB7n26HxtjYn+MB8GA1UdIwQY
MBaAFJhUvYqGOjGJXMbLki8wCLPwiq2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODIt
YzUyMmI3NGRkY2ZkLzEvN1ExOEpZbUF1eGFNYTZJSHVmYm9mRzJOaWY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODItYzUyMmI3NGRkY2Zk
LzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwbr8MA8E
AgACMAkDBwAgAQZ8CTQwDQYJKoZIhvcNAQELBQADggEBAK+Pac79PRO03AgI3gCv
hnbKpFGT7eFuW7S3UKIyIbersTPFxGrDUT7nm2z1caMsRfKSeF7WHknj4qMh7d/u
jdGSm75eAebY1rXfjBhCeerhqTgHEM4DYPa+/qkRY9u/pC5nftKVxjg5pXd2Q7LT
NdFm9FuRRiyfAYj2u9oxqbjnjNb2TiJuw5k8CO/hcY1y542NtW2ghKrPHdxhevY3
4r1wTh4QOgrtVg2bfcOyevSDr7YL4cpH0fQj6olcDC7ZEIgiQl/dBYSPcuN5jrup
hI6o3YcNezLhDH81A6vpkybC+BHWhq8vzSaJlOqmy3xe1CoaS4gFkqsLBGnkx8Iv
gwI=
-----END CERTIFICATE-----