Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa
File:                     fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa (raw, json)
Hash identifier:          k+pBFiGRIlpDeHFyJ2TjGWDmfTvqV2e7W4zXwUECFg0=
Subject key identifier:   7C:E1:9A:61:F9:82:6E:0A:32:50:87:D8:AB:49:E3:E9:DA:77:82:0B
Certificate issuer:       /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial:       0194228DE3B23A720AD57D1737BC6938BD00
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa
Signing time:             Wed 01 Jan 2025 15:48:31 +0000
ROA not before:           Wed 01 Jan 2025 15:48:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200490
IP address blocks:        185.243.20.0/22 maxlen: 22
                          2001:67c:22f4::/48 maxlen: 48
                          2a0c:fe80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:e3:b2:3a:72:0a:d5:7d:17:37:bc:69:38:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
        Validity
            Not Before: Jan  1 15:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7ce19a61f9826e0a325087d8ab49e3e9da77820b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:5e:ce:e7:e0:2b:08:cd:4b:89:8a:09:cd:
                    ba:d0:98:4e:fa:16:39:72:ba:64:12:88:39:04:81:
                    5b:5a:4f:c1:aa:41:07:6a:db:bd:f0:47:70:65:82:
                    4b:67:14:12:77:49:df:2b:7d:f5:fe:49:eb:52:a6:
                    09:b2:f2:ac:20:de:16:ce:b7:7a:f9:50:4e:ec:c2:
                    fb:40:5f:f6:88:4a:04:57:71:44:dd:7a:00:00:d5:
                    63:0f:5d:9f:d4:8e:e7:a1:95:46:30:99:ee:e1:f9:
                    f6:06:6e:d2:34:98:7a:cf:99:ab:29:53:76:4d:80:
                    3c:cc:1e:9f:bc:1a:64:5a:e1:d9:27:d6:97:30:80:
                    ad:b6:4b:ea:d7:68:ff:92:19:fc:91:66:8f:da:53:
                    e4:7f:a5:46:07:65:22:02:11:b1:e0:15:dd:d3:1f:
                    d0:61:d7:fb:d2:9c:6a:4f:7e:bc:01:dd:1a:7c:e5:
                    45:1a:46:36:9a:49:69:97:03:85:a8:8d:81:9b:83:
                    01:a6:ef:c3:39:11:1a:19:4c:16:5d:dd:c2:36:78:
                    54:40:b6:c6:ce:96:74:dc:48:b4:59:f8:81:10:7c:
                    45:0c:f8:c4:67:c8:c2:a9:a1:f6:42:ec:8f:44:96:
                    4e:7d:85:a7:88:56:27:2b:db:25:54:3d:f4:2e:bd:
                    a4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E1:9A:61:F9:82:6E:0A:32:50:87:D8:AB:49:E3:E9:DA:77:82:0B
            X509v3 Authority Key Identifier:
                keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.20.0/22
                IPv6:
                  2001:67c:22f4::/48
                  2a0c:fe80::/29

    Signature Algorithm: sha256WithRSAEncryption
         5e:5b:50:22:7f:36:ce:eb:67:06:0c:87:69:f1:7f:58:6c:66:
         89:12:ad:c3:0d:d7:e6:ec:24:99:4d:2c:ca:ae:89:8d:89:79:
         55:32:d9:fb:45:79:ec:9c:da:0b:23:05:24:33:30:0a:a2:cb:
         a9:c1:04:81:1c:23:ae:cb:47:a4:dc:7c:f6:cd:8d:b2:7f:c4:
         51:60:15:53:9c:f7:4d:fc:89:27:04:b0:5c:2f:a8:be:7d:33:
         d3:c0:02:64:f4:33:c1:9b:e5:ca:7f:77:13:a6:7b:75:eb:0e:
         7b:28:08:03:5c:0d:ce:be:e1:26:14:8a:ef:9f:42:6c:a1:8e:
         ac:d3:fb:70:6f:40:64:d4:1a:e0:29:d2:96:e5:41:e4:27:99:
         29:2d:8e:4c:ef:50:23:d8:a3:df:c9:85:74:db:78:a1:3b:01:
         25:ba:06:cd:5d:04:e9:ad:e8:ef:6f:4e:30:fb:6b:5a:96:50:
         20:72:41:e3:a9:cc:17:a3:a1:d3:e1:6c:be:fb:4d:d7:49:d9:
         6a:bf:16:14:85:c8:de:d1:b9:24:65:a4:12:c4:ac:d9:62:9b:
         91:b4:07:da:4f:20:7c:d0:a9:19:b0:e4:f0:1e:bf:41:22:1a:
         3c:37:78:21:8a:03:3d:10:e9:f3:5d:eb:57:be:d3:13:06:c8:
         7d:ec:01:0f
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQijeOyOnIK1X0XN7xpOL0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWEwNjA0ZTc2ODc2ZmEwM2U2YWQ4Njg3ZmExZGI2YzYz
ZDM5MDgwHhcNMjUwMTAxMTU0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2UxOWE2MWY5ODI2ZTBhMzI1MDg3ZDhhYjQ5ZTNlOWRhNzc4MjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm9ezufgKwjNS4mKCc260JhO+hY5
crpkEog5BIFbWk/BqkEHatu98EdwZYJLZxQSd0nfK331/knrUqYJsvKsIN4Wzrd6
+VBO7ML7QF/2iEoEV3FE3XoAANVjD12f1I7noZVGMJnu4fn2Bm7SNJh6z5mrKVN2
TYA8zB6fvBpkWuHZJ9aXMICttkvq12j/khn8kWaP2lPkf6VGB2UiAhGx4BXd0x/Q
Ydf70pxqT368Ad0afOVFGkY2mklplwOFqI2Bm4MBpu/DOREaGUwWXd3CNnhUQLbG
zpZ03Ei0WfiBEHxFDPjEZ8jCqaH2QuyPRJZOfYWniFYnK9slVD30Lr2kIwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHzhmmH5gm4KMlCH2KtJ4+nad4ILMB8GA1UdIwQY
MBaAFLBaBgTnaHb6A+athof6HbbGPTkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1Nzgt
YTYwNTcxN2QzNGFlLzEvZk9HYVlmbUNiZ295VUlmWXEwbmo2ZHAzZ2dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1NzgtYTYwNTcxN2QzNGFl
LzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCufMUMBYE
AgACMBADBwAgAQZ8IvQDBQMqDP6AMA0GCSqGSIb3DQEBCwUAA4IBAQBeW1AifzbO
62cGDIdp8X9YbGaJEq3DDdfm7CSZTSzKromNiXlVMtn7RXnsnNoLIwUkMzAKosup
wQSBHCOuy0ek3Hz2zY2yf8RRYBVTnPdN/IknBLBcL6i+fTPTwAJk9DPBm+XKf3cT
pnt16w57KAgDXA3OvuEmFIrvn0JsoY6s0/twb0Bk1BrgKdKW5UHkJ5kpLY5M71Aj
2KPfyYV023ihOwElugbNXQTprejvb04w+2tallAgckHjqcwXo6HT4Wy++03XSdlq
vxYUhcje0bkkZaQSxKzZYpuRtAfaTyB80KkZsOTwHr9BIho8N3ghigM9EOnzXetX
vtMTBsh97AEP
-----END CERTIFICATE-----