Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/OZJun1Q-CVUcx3YjhwoASyQC3kg.roa
File:                     OZJun1Q-CVUcx3YjhwoASyQC3kg.roa (raw, json)
Hash identifier:          AerFdTKvnElQ0HlH3KxN8PEvtOTqyGZOqgZ1hav9nNg=
Subject key identifier:   39:92:6E:9F:54:3E:09:55:1C:C7:76:23:87:0A:00:4B:24:02:DE:48
Certificate issuer:       /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial:       018CC4932847BE102CD0432C73A055A7DA61
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/OZJun1Q-CVUcx3YjhwoASyQC3kg.roa
Signing time:             Mon 01 Jan 2024 10:30:27 +0000
ROA not before:           Mon 01 Jan 2024 10:30:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50293
IP address blocks:        193.39.195.0/24 maxlen: 24
                          2a10:e440::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:28:47:be:10:2c:d0:43:2c:73:a0:55:a7:da:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
        Validity
            Not Before: Jan  1 10:30:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=39926e9f543e09551cc77623870a004b2402de48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6f:ff:a6:fa:07:98:0b:8f:54:7b:c1:46:8a:
                    50:a6:20:a5:43:05:42:c6:d7:ca:f8:19:50:9c:c7:
                    e1:d3:d4:fd:95:b2:12:53:e2:0e:05:b2:4f:d7:37:
                    c1:d7:d5:e7:6b:36:30:69:cd:f4:76:7f:82:bb:53:
                    c5:f7:fb:0d:3c:16:02:2d:a0:9c:79:ff:a8:14:22:
                    c6:a2:a2:8b:20:b4:ad:ea:e6:d1:5d:4f:02:bf:98:
                    f8:ae:f1:87:49:dc:34:b1:ed:bc:3a:26:fa:84:02:
                    61:cd:6b:41:84:d1:91:52:ef:9c:20:31:51:9e:86:
                    7f:76:46:c5:b2:c0:e7:7b:57:a7:49:db:fb:39:f7:
                    63:3b:f4:96:48:8c:46:f2:2c:aa:15:80:20:81:92:
                    b9:59:73:01:74:b1:a0:9c:2a:64:27:d6:67:75:37:
                    0a:c5:0e:a7:a8:f2:4a:1d:6b:10:6c:8c:49:a9:b7:
                    c1:14:f0:f5:f7:4a:fd:d9:9f:8a:0e:3c:ef:2f:6e:
                    7f:d0:5f:bc:f4:6c:d0:c1:37:37:7e:bc:b3:d8:8f:
                    1d:3b:e5:13:d5:a5:cc:cd:7e:a6:5e:c7:38:d6:36:
                    b1:f4:59:37:b9:c3:a0:42:c0:cc:01:77:c0:18:91:
                    74:91:bb:68:63:58:b5:ac:1e:af:92:72:6b:91:cf:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:92:6E:9F:54:3E:09:55:1C:C7:76:23:87:0A:00:4B:24:02:DE:48
            X509v3 Authority Key Identifier:
                keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/OZJun1Q-CVUcx3YjhwoASyQC3kg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.39.195.0/24
                IPv6:
                  2a10:e440::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:c5:60:fa:6a:12:88:35:51:08:41:c4:2f:34:f6:26:26:c5:
         5a:54:43:ea:4c:7f:8e:4a:fa:63:df:e6:75:6b:0e:b8:51:4e:
         f4:10:13:2b:2c:9e:cf:53:d9:21:3a:6d:b9:0c:b4:39:f8:42:
         28:87:b4:9a:5c:dd:23:ef:7c:a7:95:27:f8:cb:3c:f4:4b:e0:
         97:a2:0c:72:ec:9a:89:cc:80:8f:0c:f4:91:bd:74:78:5c:d5:
         8e:b6:95:9b:23:aa:2d:26:be:c6:74:b2:a2:f1:2b:ea:67:26:
         3d:e9:21:ec:85:88:32:0b:d1:f7:1a:84:cc:8f:70:6e:00:09:
         e8:0f:45:e7:99:59:07:dc:92:a8:a4:fb:7b:83:7c:0f:91:19:
         4d:71:df:96:35:e6:06:3f:3a:f5:a9:61:63:73:bc:b4:cf:b4:
         68:d9:a9:1b:8f:0e:e3:cf:3d:d2:f7:9b:32:8d:2b:ee:a5:41:
         33:b0:14:60:ad:21:59:64:65:72:0c:62:d4:c9:50:ae:e1:da:
         0e:ce:aa:84:86:c8:88:fa:7c:f6:35:20:24:16:0e:03:cf:7a:
         de:ea:a3:31:ed:f0:45:c0:be:72:3b:8d:02:38:ca:4d:55:2b:
         9d:5e:c0:ec:4b:bc:df:7b:52:35:82:5f:94:a9:a3:52:6e:07:
         bc:f5:0e:1b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzEkyhHvhAs0EMsc6BVp9phMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMjViZTcwNDA2ZDM4MWU3MjVkM2UyYmVmMTJmNmE4ZjNk
ZDgyNTcwHhcNMjQwMTAxMTAzMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTkyNmU5ZjU0M2UwOTU1MWNjNzc2MjM4NzBhMDA0YjI0MDJkZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W//pvoHmAuPVHvBRopQpiClQwVC
xtfK+BlQnMfh09T9lbISU+IOBbJP1zfB19XnazYwac30dn+Cu1PF9/sNPBYCLaCc
ef+oFCLGoqKLILSt6ubRXU8Cv5j4rvGHSdw0se28Oib6hAJhzWtBhNGRUu+cIDFR
noZ/dkbFssDne1enSdv7OfdjO/SWSIxG8iyqFYAggZK5WXMBdLGgnCpkJ9ZndTcK
xQ6nqPJKHWsQbIxJqbfBFPD190r92Z+KDjzvL25/0F+89GzQwTc3fryz2I8dO+UT
1aXMzX6mXsc41jax9Fk3ucOgQsDMAXfAGJF0kbtoY1i1rB6vknJrkc+C6QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDmSbp9UPglVHMd2I4cKAEskAt5IMB8GA1UdIwQY
MBaAFH0lvnBAbTgecl0+K+8S9qjz3YJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82YTMwMWMtODUzMi00NmYwLWEzM2Ut
ZWI2NWYxZjQ2ZTBiLzEvT1pKdW4xUS1DVlVjeDNZamh3b0FTeVFDM2tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS82YTMwMWMtODUzMi00NmYwLWEzM2UtZWI2NWYxZjQ2ZTBi
LzEvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSfDMA0E
AgACMAcDBQAqEORAMA0GCSqGSIb3DQEBCwUAA4IBAQAlxWD6ahKINVEIQcQvNPYm
JsVaVEPqTH+OSvpj3+Z1aw64UU70EBMrLJ7PU9khOm25DLQ5+EIoh7SaXN0j73yn
lSf4yzz0S+CXogxy7JqJzICPDPSRvXR4XNWOtpWbI6otJr7GdLKi8SvqZyY96SHs
hYgyC9H3GoTMj3BuAAnoD0XnmVkH3JKopPt7g3wPkRlNcd+WNeYGPzr1qWFjc7y0
z7Ro2akbjw7jzz3S95syjSvupUEzsBRgrSFZZGVyDGLUyVCu4doOzqqEhsiI+nz2
NSAkFg4Dz3re6qMx7fBFwL5yO40COMpNVSudXsDsS7zfe1I1gl+UqaNSbge89Q4b
-----END CERTIFICATE-----