Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/Lf1xzTXAc6SiNDJtIVl8iWMf5b4.roa
File:                     Lf1xzTXAc6SiNDJtIVl8iWMf5b4.roa (raw, json)
Hash identifier:          Mlu5t33KkThbOioHblpilqA5fDGAJvYvW4onNzjvD5s=
Subject key identifier:   2D:FD:71:CD:35:C0:73:A4:A2:34:32:6D:21:59:7C:89:63:1F:E5:BE
Certificate issuer:       /CN=6c95fdca367bce19e2f253b78f3608ff341428c9
Certificate serial:       0194D5F1D3D9B7FD3750D403A38290F6CA32
Authority key identifier: 6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/Lf1xzTXAc6SiNDJtIVl8iWMf5b4.roa
Signing time:             Wed 05 Feb 2025 11:49:42 +0000
ROA not before:           Wed 05 Feb 2025 11:49:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215299
IP address blocks:        188.190.114.0/23 maxlen: 23
                          2a14:3ac0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:d5:f1:d3:d9:b7:fd:37:50:d4:03:a3:82:90:f6:ca:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c95fdca367bce19e2f253b78f3608ff341428c9
        Validity
            Not Before: Feb  5 11:49:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2dfd71cd35c073a4a234326d21597c89631fe5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:7b:6a:24:43:74:1a:64:2d:66:86:ac:0a:
                    21:0e:a5:d7:01:38:57:3b:a6:ea:53:8f:d1:fb:f1:
                    24:e5:dc:5a:41:85:a6:d2:dd:04:9d:1d:e8:33:3b:
                    07:54:a1:3e:d3:6f:25:77:e2:95:81:a4:d2:16:df:
                    10:a7:b7:ca:26:75:a1:83:c9:e6:d1:d8:b5:95:b4:
                    ad:61:e7:92:06:74:41:b2:4f:8e:1d:db:0c:c2:a7:
                    5c:8a:11:60:1a:fe:cf:7f:ee:a5:cf:5d:f5:26:e5:
                    73:06:d3:ba:1a:5d:f2:27:44:10:8e:c3:3b:0a:43:
                    eb:7a:df:de:76:c8:5a:c8:8d:b6:dd:5d:2e:0f:32:
                    c1:4e:97:dd:e7:89:2a:67:60:6b:6d:0b:aa:39:90:
                    b3:79:12:73:57:d0:b5:3b:96:c7:5b:8f:6e:81:12:
                    40:8d:1b:4c:2f:2b:55:7e:37:0d:57:a0:ab:4e:46:
                    68:8d:86:5c:e0:dc:3d:82:93:89:ad:28:50:8b:98:
                    62:7a:d9:48:1d:ec:b6:c4:86:30:2a:ea:76:6d:22:
                    16:17:16:4a:28:dd:e7:a3:73:87:70:26:3f:70:9e:
                    29:09:9f:9c:40:b2:dc:0b:8d:03:b3:aa:aa:dc:a4:
                    a3:d6:b2:a6:a3:a5:a9:14:66:cd:9e:d2:4b:15:19:
                    e2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FD:71:CD:35:C0:73:A4:A2:34:32:6D:21:59:7C:89:63:1F:E5:BE
            X509v3 Authority Key Identifier:
                keyid:6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/Lf1xzTXAc6SiNDJtIVl8iWMf5b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.190.114.0/23
                IPv6:
                  2a14:3ac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         ac:9d:cd:6a:24:d5:d3:80:fc:83:29:53:1f:2a:37:57:7b:e6:
         dd:0c:47:5b:7d:23:9b:98:bd:88:03:b9:1a:a0:02:f4:a1:9a:
         06:7e:6d:63:f5:6a:20:c7:54:ee:c4:86:e9:6b:04:3b:37:40:
         1a:cd:c1:94:33:cd:6f:9d:cb:61:5f:79:8c:a7:56:95:0d:ce:
         ea:c6:81:56:bc:63:de:dc:27:0c:ee:ba:69:d9:20:ac:c6:0f:
         a4:6f:ca:fb:21:01:da:eb:48:3c:33:bf:6d:3c:08:4a:9f:31:
         03:f9:51:ad:a3:b8:d2:d9:e9:33:e4:8e:87:cf:ee:56:b5:ac:
         31:db:48:25:e8:89:7a:d6:f1:1d:d0:c1:a9:3b:26:5f:c0:c8:
         94:25:31:c2:4e:8a:a7:56:44:96:31:89:13:e0:58:77:ec:35:
         b6:e8:36:cf:0b:23:fc:04:dd:d0:1d:fe:fd:27:76:69:52:13:
         aa:9a:18:c7:d9:78:78:b0:f2:2d:d4:21:73:3d:cf:e7:85:57:
         c9:92:19:ec:df:5f:9b:1c:46:31:53:cf:54:f3:83:95:35:a4:
         89:ae:a3:d0:52:7b:05:f5:08:ac:5b:6f:be:81:98:12:e9:6f:
         59:29:17:40:5d:78:8d:53:f8:66:d2:61:a4:54:02:9e:c3:52:
         a4:32:d5:64
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZTV8dPZt/03UNQDo4KQ9soyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOTVmZGNhMzY3YmNlMTllMmYyNTNiNzhmMzYwOGZmMzQx
NDI4YzkwHhcNMjUwMjA1MTE0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGZkNzFjZDM1YzA3M2E0YTIzNDMyNmQyMTU5N2M4OTYzMWZlNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRt7aiRDdBpkLWaGrAohDqXXAThX
O6bqU4/R+/Ek5dxaQYWm0t0EnR3oMzsHVKE+028ld+KVgaTSFt8Qp7fKJnWhg8nm
0di1lbStYeeSBnRBsk+OHdsMwqdcihFgGv7Pf+6lz131JuVzBtO6Gl3yJ0QQjsM7
CkPret/edshayI223V0uDzLBTpfd54kqZ2BrbQuqOZCzeRJzV9C1O5bHW49ugRJA
jRtMLytVfjcNV6CrTkZojYZc4Nw9gpOJrShQi5hietlIHey2xIYwKup2bSIWFxZK
KN3no3OHcCY/cJ4pCZ+cQLLcC40Ds6qq3KSj1rKmo6WpFGbNntJLFRniUQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFC39cc01wHOkojQybSFZfIljH+W+MB8GA1UdIwQY
MBaAFGyV/co2e84Z4vJTt482CP80FCjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkpYOXlqWjd6aG5pOGxPM2p6WUlfelFVS01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mMDFhMDItNWE5ZS00NDQxLTliM2Qt
ZDVjMTg4NjJkMDI2LzEvTGYxeHpUWEFjNlNpTkRKdElWbDhpV01mNWI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mMDFhMDItNWE5ZS00NDQxLTliM2QtZDVjMTg4NjJkMDI2
LzEvYkpYOXlqWjd6aG5pOGxPM2p6WUlfelFVS01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBvL5yMA0E
AgACMAcDBQMqFDrAMA0GCSqGSIb3DQEBCwUAA4IBAQCsnc1qJNXTgPyDKVMfKjdX
e+bdDEdbfSObmL2IA7kaoAL0oZoGfm1j9Wogx1TuxIbpawQ7N0AazcGUM81vncth
X3mMp1aVDc7qxoFWvGPe3CcM7rpp2SCsxg+kb8r7IQHa60g8M79tPAhKnzED+VGt
o7jS2ekz5I6Hz+5Wtawx20gl6Il61vEd0MGpOyZfwMiUJTHCToqnVkSWMYkT4Fh3
7DW26DbPCyP8BN3QHf79J3ZpUhOqmhjH2Xh4sPIt1CFzPc/nhVfJkhns31+bHEYx
U89U84OVNaSJrqPQUnsF9QisW2++gZgS6W9ZKRdAXXiNU/hm0mGkVAKew1KkMtVk
-----END CERTIFICATE-----