Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/wRVtvmPKs1QKlKzPVfPIJjhDkLs.roa
File:                     wRVtvmPKs1QKlKzPVfPIJjhDkLs.roa (raw, json)
Hash identifier:          ERuuwbvd4HbsDN0Yyhb4o5NlOjdhByH6kAsdft+2Wzw=
Subject key identifier:   C1:15:6D:BE:63:CA:B3:54:0A:94:AC:CF:55:F3:C8:26:38:43:90:BB
Certificate issuer:       /CN=e74c290b5bccdb7de5383ee45ba615d2f306761f
Certificate serial:       019428230BA5782123A988D773B324931DA0
Authority key identifier: E7:4C:29:0B:5B:CC:DB:7D:E5:38:3E:E4:5B:A6:15:D2:F3:06:76:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/wRVtvmPKs1QKlKzPVfPIJjhDkLs.roa
Signing time:             Thu 02 Jan 2025 17:49:32 +0000
ROA not before:           Thu 02 Jan 2025 17:49:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60239
IP address blocks:        185.34.202.0/24 maxlen: 24
                          2a04:5ec0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:0b:a5:78:21:23:a9:88:d7:73:b3:24:93:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74c290b5bccdb7de5383ee45ba615d2f306761f
        Validity
            Not Before: Jan  2 17:49:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c1156dbe63cab3540a94accf55f3c826384390bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:b6:cb:2d:53:96:4d:e0:c0:8d:62:18:53:
                    2a:27:85:bc:59:66:6a:83:cd:6d:9a:48:e1:25:ec:
                    22:ea:03:b2:37:0d:eb:08:7d:5b:ec:c2:62:7e:bf:
                    4b:9f:c3:31:7a:b6:43:68:89:4f:a4:d6:be:c2:63:
                    54:23:b8:5a:5f:94:cf:a5:59:b3:b1:10:52:0a:e1:
                    33:c7:f4:58:89:42:5b:cc:c3:7e:65:68:48:41:67:
                    77:89:62:af:7d:58:6f:5b:d7:67:50:00:73:d4:48:
                    04:7f:bc:26:bd:4f:fc:74:60:af:bf:3a:a3:e7:cb:
                    b2:89:87:8e:cb:6a:66:b1:e1:56:dc:7f:ad:12:3e:
                    0a:d6:38:81:31:b2:e7:8f:43:d1:f3:55:c4:d9:6f:
                    11:ba:1d:06:7f:e0:00:f8:81:31:79:d7:be:f4:46:
                    6b:d3:e0:e6:8f:66:57:e8:55:8a:50:be:42:e8:d3:
                    20:c5:df:fb:88:04:22:33:ce:51:08:db:1f:28:5d:
                    4d:2d:a0:86:9d:29:33:3c:2d:e6:61:bf:27:23:aa:
                    a8:c9:e1:c7:e1:c4:d0:b8:0b:68:e3:42:73:06:b7:
                    97:74:16:4b:65:63:d4:ba:14:8f:07:b7:3d:65:34:
                    3f:f5:c5:d8:fa:8a:ad:0c:47:0b:93:b6:47:53:69:
                    87:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:15:6D:BE:63:CA:B3:54:0A:94:AC:CF:55:F3:C8:26:38:43:90:BB
            X509v3 Authority Key Identifier:
                keyid:E7:4C:29:0B:5B:CC:DB:7D:E5:38:3E:E4:5B:A6:15:D2:F3:06:76:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/wRVtvmPKs1QKlKzPVfPIJjhDkLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.34.202.0/24
                IPv6:
                  2a04:5ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         0b:2a:05:92:b9:18:5e:18:b5:0f:09:58:50:ba:79:f1:44:b8:
         60:46:b1:20:e8:bc:df:c3:27:d0:59:33:23:53:d2:33:02:cd:
         a1:fa:91:fb:b2:e3:b0:13:de:64:5c:b2:9d:4e:f9:1b:dd:41:
         dc:9b:d1:ce:99:46:de:22:8e:7c:8e:99:64:a5:b6:f5:ea:3d:
         ea:95:18:1c:67:58:df:16:25:bd:a4:80:eb:69:fd:df:c8:8d:
         02:17:54:a7:88:0a:20:77:f6:fa:67:96:ed:3e:e5:93:22:b8:
         af:4f:4f:6b:92:be:61:02:b9:6c:29:26:c8:1d:1a:5e:dd:21:
         d0:38:bb:33:77:c4:ac:0f:2e:79:69:db:c6:9b:37:43:2c:24:
         05:48:69:9e:eb:cc:3c:b6:0e:e4:ad:3e:5e:5e:5e:74:04:45:
         29:3f:0b:66:46:63:6a:f4:10:a0:24:93:99:2e:04:9e:27:1e:
         af:02:95:3e:b4:c0:2c:26:21:ea:64:2c:7c:f5:6e:c7:e6:28:
         0e:d1:fe:5e:3f:53:60:83:9e:bc:86:60:04:d3:e7:6e:d8:b8:
         6a:80:f1:89:52:e1:21:63:b6:1b:c6:d5:a5:37:66:4a:49:ff:
         eb:a1:1d:2a:22:75:25:94:5d:a5:30:f2:01:83:ff:58:a0:8d:
         d7:65:f1:ec
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQoIwuleCEjqYjXc7Mkkx2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NGMyOTBiNWJjY2RiN2RlNTM4M2VlNDViYTYxNWQyZjMw
Njc2MWYwHhcNMjUwMTAyMTc0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTE1NmRiZTYzY2FiMzU0MGE5NGFjY2Y1NWYzYzgyNjM4NDM5MGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+22yy1Tlk3gwI1iGFMqJ4W8WWZq
g81tmkjhJewi6gOyNw3rCH1b7MJifr9Ln8MxerZDaIlPpNa+wmNUI7haX5TPpVmz
sRBSCuEzx/RYiUJbzMN+ZWhIQWd3iWKvfVhvW9dnUABz1EgEf7wmvU/8dGCvvzqj
58uyiYeOy2pmseFW3H+tEj4K1jiBMbLnj0PR81XE2W8Ruh0Gf+AA+IExede+9EZr
0+Dmj2ZX6FWKUL5C6NMgxd/7iAQiM85RCNsfKF1NLaCGnSkzPC3mYb8nI6qoyeHH
4cTQuAto40JzBreXdBZLZWPUuhSPB7c9ZTQ/9cXY+oqtDEcLk7ZHU2mHdwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMEVbb5jyrNUCpSsz1XzyCY4Q5C7MB8GA1UdIwQY
MBaAFOdMKQtbzNt95Tg+5FumFdLzBnYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTB3cEMxdk0yMzNsT0Q3a1c2WVYwdk1HZGg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMjIzNzYtNWNmNi00OTc4LWE4YTMt
ZDc0MWZiMjczMTE2LzEvd1JWdHZtUEtzMVFLbEt6UFZmUElKamhEa0xzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yMjIzNzYtNWNmNi00OTc4LWE4YTMtZDc0MWZiMjczMTE2
LzEvNTB3cEMxdk0yMzNsT0Q3a1c2WVYwdk1HZGg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuSLKMA0E
AgACMAcDBQMqBF7AMA0GCSqGSIb3DQEBCwUAA4IBAQALKgWSuRheGLUPCVhQunnx
RLhgRrEg6LzfwyfQWTMjU9IzAs2h+pH7suOwE95kXLKdTvkb3UHcm9HOmUbeIo58
jplkpbb16j3qlRgcZ1jfFiW9pIDraf3fyI0CF1SniAogd/b6Z5btPuWTIrivT09r
kr5hArlsKSbIHRpe3SHQOLszd8SsDy55advGmzdDLCQFSGme68w8tg7krT5eXl50
BEUpPwtmRmNq9BCgJJOZLgSeJx6vApU+tMAsJiHqZCx89W7H5igO0f5eP1Ngg568
hmAE0+du2LhqgPGJUuEhY7YbxtWlN2ZKSf/roR0qInUllF2lMPIBg/9YoI3XZfHs
-----END CERTIFICATE-----