Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/vBSBdj2OCoXaEpQRipaC3URAVOE.roa
File:                     vBSBdj2OCoXaEpQRipaC3URAVOE.roa (raw, json)
Hash identifier:          vQo5BKdcQ8mybchYS0b6OND/jgp45Cgrwk0rvQie8Uk=
Subject key identifier:   BC:14:81:76:3D:8E:0A:85:DA:12:94:11:8A:96:82:DD:44:40:54:E1
Certificate issuer:       /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial:       018CC7261803A962359A14296B1C55FC9178
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/vBSBdj2OCoXaEpQRipaC3URAVOE.roa
Signing time:             Mon 01 Jan 2024 22:30:11 +0000
ROA not before:           Mon 01 Jan 2024 22:30:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210250
IP address blocks:        194.1.147.0/24 maxlen: 24
                          2001:67c:51c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:26:18:03:a9:62:35:9a:14:29:6b:1c:55:fc:91:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
        Validity
            Not Before: Jan  1 22:30:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bc1481763d8e0a85da1294118a9682dd444054e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a8:69:7f:6d:32:a5:78:f3:ce:0f:db:f8:dc:
                    c0:a0:ca:1e:8e:38:07:5d:ba:f2:c0:50:a4:13:48:
                    66:93:04:dc:fa:ff:ba:64:64:90:03:f2:26:17:f0:
                    a5:f2:4f:b6:82:42:d8:50:be:fd:64:75:4a:7f:77:
                    74:b1:39:6a:52:41:bc:42:c5:67:ec:63:e4:3c:f8:
                    9f:57:ae:1c:13:0c:66:be:fc:32:15:81:be:e8:c0:
                    77:02:2c:95:72:e1:b5:8f:2f:36:22:02:3e:06:08:
                    fa:13:9a:3e:a3:c2:c1:ae:11:1c:9e:ff:3c:57:dc:
                    a4:18:0b:f7:60:76:a0:94:3d:20:50:d9:2c:82:01:
                    61:6f:33:91:f9:7c:59:e5:04:29:ab:eb:b5:ae:ad:
                    c6:6c:b3:41:9b:7e:e0:de:4c:53:25:65:65:a8:5a:
                    45:61:35:da:41:2c:2c:4d:95:6d:0b:60:c3:98:97:
                    37:f2:54:1b:b5:a2:fd:13:c2:dc:59:3b:fc:9c:05:
                    96:b2:95:3b:2e:c3:3c:e3:be:29:f9:30:28:98:f3:
                    82:55:91:be:27:c6:5f:db:02:53:96:dd:69:a7:bc:
                    7f:66:a8:b9:82:24:0a:f2:52:de:d8:fc:1c:fe:85:
                    8a:b3:2a:e4:6c:03:09:b6:f8:52:52:22:af:66:02:
                    66:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:14:81:76:3D:8E:0A:85:DA:12:94:11:8A:96:82:DD:44:40:54:E1
            X509v3 Authority Key Identifier:
                keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/vBSBdj2OCoXaEpQRipaC3URAVOE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.1.147.0/24
                IPv6:
                  2001:67c:51c::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:5c:e6:58:42:95:9f:f7:7f:cb:4d:f3:39:c6:65:12:d8:73:
         91:24:7d:ec:36:8d:d4:9a:5a:3c:ba:17:d4:18:b8:45:79:8f:
         46:b3:01:01:cf:25:9f:ed:c6:0e:e3:10:76:b4:72:cb:78:bf:
         6e:9f:94:1f:d2:e9:bb:ca:cb:45:30:c4:63:99:2b:94:de:10:
         f5:70:19:6b:6c:57:77:c6:1b:50:59:93:e5:73:42:15:ad:a8:
         82:0d:eb:26:29:ed:60:02:0f:80:7e:4d:86:dd:fb:71:a9:ad:
         4d:11:6e:08:88:37:af:a7:77:61:65:c1:ea:8f:89:14:19:13:
         dd:2b:31:1e:0c:6c:9c:e6:1d:b0:e1:24:e8:38:08:36:6c:4d:
         42:f5:aa:22:7a:cf:4c:cc:11:8b:b4:04:45:a2:e9:e7:b4:c5:
         33:95:8e:b7:da:dd:41:fa:3c:a7:c9:11:42:1d:d8:ed:d3:ad:
         a2:3d:43:6f:de:0a:fa:66:46:d7:a5:3e:74:cd:27:fe:3a:03:
         59:56:0b:02:93:a9:a5:18:86:50:97:af:bc:94:f2:17:8a:c4:
         ba:7b:4b:85:c8:27:44:79:7a:58:c4:f3:ba:bc:eb:3b:08:f7:
         e9:e4:71:ad:c0:2d:49:c1:25:b8:64:8f:b6:fb:74:a3:bd:89:
         cf:b7:b7:c3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzHJhgDqWI1mhQpaxxV/JF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Zjc2OWQ0NDMzYjc3MDRkZjcwM2QxNjQ1YjdmZWE4ZWZi
ZjkyNmUwHhcNMjQwMTAxMjIzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzE0ODE3NjNkOGUwYTg1ZGExMjk0MTE4YTk2ODJkZDQ0NDA1NGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6hpf20ypXjzzg/b+NzAoMoejjgH
XbrywFCkE0hmkwTc+v+6ZGSQA/ImF/Cl8k+2gkLYUL79ZHVKf3d0sTlqUkG8QsVn
7GPkPPifV64cEwxmvvwyFYG+6MB3AiyVcuG1jy82IgI+Bgj6E5o+o8LBrhEcnv88
V9ykGAv3YHaglD0gUNksggFhbzOR+XxZ5QQpq+u1rq3GbLNBm37g3kxTJWVlqFpF
YTXaQSwsTZVtC2DDmJc38lQbtaL9E8LcWTv8nAWWspU7LsM8474p+TAomPOCVZG+
J8Zf2wJTlt1pp7x/Zqi5giQK8lLe2Pwc/oWKsyrkbAMJtvhSUiKvZgJmRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLwUgXY9jgqF2hKUEYqWgt1EQFThMB8GA1UdIwQY
MBaAFLn3adRDO3cE33A9FkW3/qjvv5JuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80ZGZiZDQtOGVkNy00NWYyLTk1MGQt
M2FlYjdjZGUwMzZjLzEvdkJTQmRqMk9Db1hhRXBRUmlwYUMzVVJBVk9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS80ZGZiZDQtOGVkNy00NWYyLTk1MGQtM2FlYjdjZGUwMzZj
LzEvdWZkcDFFTTdkd1RmY0QwV1JiZi1xTy1fa200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgGTMA8E
AgACMAkDBwAgAQZ8BRwwDQYJKoZIhvcNAQELBQADggEBAClc5lhClZ/3f8tN8znG
ZRLYc5Ekfew2jdSaWjy6F9QYuEV5j0azAQHPJZ/txg7jEHa0cst4v26flB/S6bvK
y0UwxGOZK5TeEPVwGWtsV3fGG1BZk+VzQhWtqIIN6yYp7WACD4B+TYbd+3GprU0R
bgiIN6+nd2FlweqPiRQZE90rMR4MbJzmHbDhJOg4CDZsTUL1qiJ6z0zMEYu0BEWi
6ee0xTOVjrfa3UH6PKfJEUId2O3TraI9Q2/eCvpmRtelPnTNJ/46A1lWCwKTqaUY
hlCXr7yU8heKxLp7S4XIJ0R5eljE87q86zsI9+nkca3ALUnBJbhkj7b7dKO9ic+3
t8M=
-----END CERTIFICATE-----