Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/b4y23CdQKJMwlXk-rNcwViMo1I0.roa
File:                     b4y23CdQKJMwlXk-rNcwViMo1I0.roa (raw, json)
Hash identifier:          V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=
Subject key identifier:   6F:8C:B6:DC:27:50:28:93:30:95:79:3E:AC:D7:30:56:23:28:D4:8D
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       01961B8BD8717D2C67D5976B54B31B07D02B
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/b4y23CdQKJMwlXk-rNcwViMo1I0.roa
Signing time:             Wed 09 Apr 2025 17:14:31 +0000
ROA not before:           Wed 09 Apr 2025 17:14:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8529
IP address blocks:        80.231.213.0/24 maxlen: 24
                          2a01:3e0:2006::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1b:8b:d8:71:7d:2c:67:d5:97:6b:54:b3:1b:07:d0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Apr  9 17:14:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6f8cb6dc275028933095793eacd730562328d48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d7:ea:80:56:0d:53:a1:3d:9e:63:f1:6a:9e:
                    e5:5b:58:6d:05:50:c1:00:60:00:0b:b3:3e:ad:89:
                    aa:b8:37:df:68:fa:5b:b9:a0:d9:82:a8:26:93:c2:
                    60:5a:7e:3f:27:cf:44:c8:33:f3:75:b8:8a:38:24:
                    95:a2:63:a0:4c:d1:ea:62:95:e0:79:b9:ee:ea:70:
                    03:9b:4e:28:09:52:ba:b5:9e:60:0d:05:92:a2:be:
                    ee:47:fb:33:d2:62:aa:95:81:8f:04:cc:57:60:74:
                    a0:45:04:0a:d8:0e:9c:ee:93:08:c0:de:a6:11:a1:
                    1e:d3:1a:59:7e:df:ee:a3:40:33:1e:87:34:93:51:
                    61:65:02:97:9b:5e:cc:3d:1b:2b:72:38:9e:b6:1d:
                    bc:09:4d:8a:4e:98:69:74:d6:80:32:5f:27:6c:ea:
                    c8:f6:c7:83:eb:4a:b1:4f:1f:ba:82:e9:6d:92:08:
                    6b:4d:44:fd:41:8f:60:67:25:cd:9d:2d:c7:ce:8c:
                    d7:e7:f9:9d:f8:b7:c9:26:db:99:be:c3:1d:f9:f1:
                    de:e7:d8:60:95:0b:f5:f8:c1:84:26:d6:80:c0:f8:
                    18:31:09:15:69:3a:9f:b8:c8:30:71:68:54:d7:b0:
                    4b:7f:2e:e1:c2:c0:50:9f:ac:0a:ad:80:45:29:b1:
                    ac:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8C:B6:DC:27:50:28:93:30:95:79:3E:AC:D7:30:56:23:28:D4:8D
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/b4y23CdQKJMwlXk-rNcwViMo1I0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.231.213.0/24
                IPv6:
                  2a01:3e0:2006::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:e3:e6:67:9b:16:4f:8b:31:d9:5a:e3:90:b2:8a:23:09:0c:
         ba:bc:ad:3e:08:57:b2:fb:f5:0b:b8:89:8f:ec:31:f9:9f:3b:
         8c:08:aa:a3:d5:96:8d:c4:82:eb:63:03:94:af:f3:a7:c0:96:
         03:4a:33:0a:23:4f:e4:26:e7:83:86:5b:c7:22:05:72:2f:ad:
         99:5d:f2:ea:5a:38:04:27:79:17:5e:70:3f:a0:6d:bb:f2:3c:
         91:3c:ce:e5:55:c5:67:44:ed:99:a3:16:4f:d8:81:ed:3d:eb:
         cf:70:7b:d6:80:88:39:8b:03:eb:5a:f7:1b:60:6c:42:9f:ce:
         0b:2f:06:8e:6b:db:00:00:6e:70:7e:7c:2d:e8:bf:df:0d:3e:
         0a:0f:dd:c4:16:d5:83:a0:99:c6:16:56:89:a9:ba:05:41:62:
         26:b2:1d:92:1d:e7:39:b3:65:e3:3a:f4:09:42:f6:cd:75:b7:
         6a:3a:20:b2:c0:6d:cd:e4:f7:8f:bc:8f:c1:0c:1a:77:4b:7d:
         3b:78:af:5a:cc:55:2a:53:7c:13:66:df:14:3f:c6:d0:f1:61:
         fc:7f:35:4f:8b:11:64:88:e6:e0:2b:9c:41:06:03:c8:68:d9:
         e9:e9:c1:73:ca:49:19:77:e4:9f:ec:24:d7:cd:18:fd:83:21:
         f3:7b:c0:a2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZYbi9hxfSxn1ZdrVLMbB9ArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz
MTU4OGMwHhcNMjUwNDA5MTcxNDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjhjYjZkYzI3NTAyODkzMzA5NTc5M2VhY2Q3MzA1NjIzMjhkNDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39fqgFYNU6E9nmPxap7lW1htBVDB
AGAAC7M+rYmquDffaPpbuaDZgqgmk8JgWn4/J89EyDPzdbiKOCSVomOgTNHqYpXg
ebnu6nADm04oCVK6tZ5gDQWSor7uR/sz0mKqlYGPBMxXYHSgRQQK2A6c7pMIwN6m
EaEe0xpZft/uo0AzHoc0k1FhZQKXm17MPRsrcjieth28CU2KTphpdNaAMl8nbOrI
9seD60qxTx+6gultkghrTUT9QY9gZyXNnS3HzozX5/md+LfJJtuZvsMd+fHe59hg
lQv1+MGEJtaAwPgYMQkVaTqfuMgwcWhU17BLfy7hwsBQn6wKrYBFKbGs8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG+MttwnUCiTMJV5PqzXMFYjKNSNMB8GA1UdIwQY
MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt
ZGI0NjNjNWZiMGI0LzEvYjR5MjNDZFFLSk13bFhrLXJOY3dWaU1vMUkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0
LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUOfVMA8E
AgACMAkDBwAqAQPgIAYwDQYJKoZIhvcNAQELBQADggEBAFDj5mebFk+LMdla45Cy
iiMJDLq8rT4IV7L79Qu4iY/sMfmfO4wIqqPVlo3EgutjA5Sv86fAlgNKMwojT+Qm
54OGW8ciBXIvrZld8upaOAQneRdecD+gbbvyPJE8zuVVxWdE7ZmjFk/Yge09689w
e9aAiDmLA+ta9xtgbEKfzgsvBo5r2wAAbnB+fC3ov98NPgoP3cQW1YOgmcYWVomp
ugVBYiayHZId5zmzZeM69AlC9s11t2o6ILLAbc3k94+8j8EMGndLfTt4r1rMVSpT
fBNm3xQ/xtDxYfx/NU+LEWSI5uArnEEGA8ho2enpwXPKSRl35J/sJNfNGP2DIfN7
wKI=
-----END CERTIFICATE-----