Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/gGx-x2iRamyRfnlhx5me1YxCw6s.roa
File:                     gGx-x2iRamyRfnlhx5me1YxCw6s.roa (raw, json)
Hash identifier:          JLnMtxeLdoGYGRa/pvkNkIdX/aY0zlXxd7zsjwME0tw=
Subject key identifier:   80:6C:7E:C7:68:91:6A:6C:91:7E:79:61:C7:99:9E:D5:8C:42:C3:AB
Certificate issuer:       /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial:       01942522368D5C9C7EC6C3D1DE1A258BC8C2
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/gGx-x2iRamyRfnlhx5me1YxCw6s.roa
Signing time:             Thu 02 Jan 2025 03:49:46 +0000
ROA not before:           Thu 02 Jan 2025 03:49:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211289
IP address blocks:        5.181.52.0/24 maxlen: 24
                          2a05:3440::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:36:8d:5c:9c:7e:c6:c3:d1:de:1a:25:8b:c8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
        Validity
            Not Before: Jan  2 03:49:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=806c7ec768916a6c917e7961c7999ed58c42c3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:5c:a2:c4:55:77:dd:26:7d:c8:c6:3a:65:
                    82:11:91:96:41:57:75:ee:f4:7d:57:9f:93:ab:15:
                    7d:9d:2f:6d:ff:cc:aa:cc:2b:b0:cc:74:61:b3:2a:
                    00:9f:85:2c:a1:0b:12:54:a6:55:d5:47:62:bc:52:
                    96:77:32:8d:9d:6a:6e:62:24:13:f5:78:c6:97:7f:
                    54:14:d9:f0:ed:71:48:8d:ab:39:82:1c:8c:94:61:
                    21:43:0f:76:6a:46:64:65:bc:6a:ea:a2:b0:c9:50:
                    f8:23:c9:3e:d2:48:c8:96:83:1b:49:de:39:a1:89:
                    3b:a4:c7:fd:52:60:cb:13:fa:54:23:ea:86:4f:cf:
                    a2:3c:4c:4b:07:8f:59:f4:c2:e2:85:15:ed:f8:0d:
                    3e:8a:0a:39:02:b5:a5:75:7d:af:57:f8:d6:10:80:
                    40:46:19:6e:26:6e:36:00:5d:12:2b:78:8a:2a:14:
                    89:2c:f7:53:90:5d:af:70:10:33:3a:40:95:8d:63:
                    44:f7:6e:83:a8:f4:bd:e3:ff:c8:8c:f6:3e:31:a5:
                    8b:d6:b3:e4:0b:a3:c7:df:7d:c7:c6:b2:8c:c2:1f:
                    59:39:4c:77:27:01:77:a2:be:9f:fb:09:21:9c:33:
                    92:bc:53:39:4a:6b:5c:04:21:22:dc:44:06:33:95:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6C:7E:C7:68:91:6A:6C:91:7E:79:61:C7:99:9E:D5:8C:42:C3:AB
            X509v3 Authority Key Identifier:
                keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/gGx-x2iRamyRfnlhx5me1YxCw6s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.52.0/24
                IPv6:
                  2a05:3440::/29

    Signature Algorithm: sha256WithRSAEncryption
         6e:88:54:c7:bf:a9:a4:d4:21:be:ab:ce:50:b8:4e:a3:a2:d2:
         52:43:dc:e6:f3:80:a0:90:dd:fc:53:f7:4e:fe:2a:7c:d0:1a:
         35:20:7b:40:5f:96:bf:b6:a4:bc:3e:22:85:43:d5:b3:10:f8:
         b2:58:14:22:9b:ee:91:93:60:e4:7b:5d:f6:3a:a3:a3:14:74:
         7d:94:66:0e:1a:44:c0:85:33:be:3f:db:c9:ae:de:c2:f2:a0:
         31:86:9d:cc:c8:a0:10:25:07:45:15:22:bf:23:6f:9f:69:d7:
         2b:3b:0c:b9:22:ba:de:d6:c9:af:ae:9a:b1:c8:74:d9:6f:0b:
         18:38:43:d7:61:c2:8d:ee:4c:74:3c:a9:4b:54:2a:64:f1:35:
         7c:69:02:c7:94:df:aa:ad:10:8f:5c:33:49:7e:2f:29:df:77:
         be:d3:c1:90:30:ef:6d:b0:f6:42:af:8a:97:9c:80:0a:5f:06:
         46:70:2a:66:c3:0a:10:eb:ba:37:b1:9e:9d:a6:30:88:21:23:
         fc:4f:08:c4:ab:11:55:79:3b:28:74:d3:03:7c:70:35:a4:ae:
         88:6f:99:d5:80:53:f5:ca:f5:0d:54:f6:cb:ee:4e:3e:9d:f3:
         49:ba:7b:e9:34:79:2e:0b:30:86:ef:c0:4d:84:dc:bc:47:e8:
         60:54:b6:4d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlIjaNXJx+xsPR3holi8jCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MDYyMGVhNWRhZjhhNTRhYWVhMTdmMmNiOWVjZGYzNWQ3
ODUzMDYwHhcNMjUwMTAyMDM0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDZjN2VjNzY4OTE2YTZjOTE3ZTc5NjFjNzk5OWVkNThjNDJjM2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqExcosRVd90mfcjGOmWCEZGWQVd1
7vR9V5+TqxV9nS9t/8yqzCuwzHRhsyoAn4UsoQsSVKZV1UdivFKWdzKNnWpuYiQT
9XjGl39UFNnw7XFIjas5ghyMlGEhQw92akZkZbxq6qKwyVD4I8k+0kjIloMbSd45
oYk7pMf9UmDLE/pUI+qGT8+iPExLB49Z9MLihRXt+A0+igo5ArWldX2vV/jWEIBA
RhluJm42AF0SK3iKKhSJLPdTkF2vcBAzOkCVjWNE926DqPS94//IjPY+MaWL1rPk
C6PH333HxrKMwh9ZOUx3JwF3or6f+wkhnDOSvFM5SmtcBCEi3EQGM5UktwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIBsfsdokWpskX55YceZntWMQsOrMB8GA1UdIwQY
MBaAFNQGIOpdr4pUquoX8suezfNdeFMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUFZZzZsMnZpbFNxNmhmeXk1N044MTE0VXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83OThmYzUtYjU0Yy00MWMxLThhZmUt
ZjA5ZTQ2YzY5YmY4LzEvZ0d4LXgyaVJhbXlSZm5saHg1bWUxWXhDdzZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi83OThmYzUtYjU0Yy00MWMxLThhZmUtZjA5ZTQ2YzY5YmY4
LzEvMUFZZzZsMnZpbFNxNmhmeXk1N044MTE0VXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQABbU0MA0E
AgACMAcDBQMqBTRAMA0GCSqGSIb3DQEBCwUAA4IBAQBuiFTHv6mk1CG+q85QuE6j
otJSQ9zm84CgkN38U/dO/ip80Bo1IHtAX5a/tqS8PiKFQ9WzEPiyWBQim+6Rk2Dk
e132OqOjFHR9lGYOGkTAhTO+P9vJrt7C8qAxhp3MyKAQJQdFFSK/I2+fadcrOwy5
Irre1smvrpqxyHTZbwsYOEPXYcKN7kx0PKlLVCpk8TV8aQLHlN+qrRCPXDNJfi8p
33e+08GQMO9tsPZCr4qXnIAKXwZGcCpmwwoQ67o3sZ6dpjCIISP8TwjEqxFVeTso
dNMDfHA1pK6Ib5nVgFP1yvUNVPbL7k4+nfNJunvpNHkuCzCG78BNhNy8R+hgVLZN
-----END CERTIFICATE-----