Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/jKFJgU1IkNXTMlJ4fb3SLPhpIEs.roa
File:                     jKFJgU1IkNXTMlJ4fb3SLPhpIEs.roa (raw, json)
Hash identifier:          gVNSWZlrE4CqYnhrjWkiPYyY6GBkTGDHd/hL4ezDiUs=
Subject key identifier:   8C:A1:49:81:4D:48:90:D5:D3:32:52:78:7D:BD:D2:2C:F8:69:20:4B
Certificate issuer:       /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial:       0194DAB7F6AD6ED2D06889419947F91390C1
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/jKFJgU1IkNXTMlJ4fb3SLPhpIEs.roa
Signing time:             Thu 06 Feb 2025 10:04:36 +0000
ROA not before:           Thu 06 Feb 2025 10:04:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62392
IP address blocks:        185.175.216.0/22 maxlen: 22
                          2001:67c:1810::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:da:b7:f6:ad:6e:d2:d0:68:89:41:99:47:f9:13:90:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
        Validity
            Not Before: Feb  6 10:04:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8ca149814d4890d5d33252787dbdd22cf869204b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:c1:bf:82:b4:46:1c:e6:0e:12:12:41:de:
                    39:07:67:a1:9e:a4:f2:d4:88:36:8c:0d:d4:8c:74:
                    72:42:0b:6d:d6:12:3f:f7:b7:55:dc:c6:8c:fe:9e:
                    63:38:52:8d:33:a3:40:40:09:83:41:d4:45:6e:55:
                    f8:56:82:e6:d2:07:ef:da:3b:6e:d1:98:53:af:b0:
                    05:7d:b8:14:22:71:c3:48:af:c8:60:d7:04:ec:a4:
                    bb:b6:2c:0a:c5:39:7b:ce:dc:82:a5:cd:65:a9:7e:
                    4f:20:07:fe:d7:8f:b0:1a:8c:09:26:63:95:93:2a:
                    32:aa:4c:82:45:25:46:8c:66:32:cb:44:75:90:5f:
                    af:7f:a0:1b:25:e5:72:85:ca:b3:2e:a8:a4:69:96:
                    8d:2f:bb:73:fd:8f:e8:29:01:96:4d:57:42:6f:87:
                    da:8a:72:ab:5a:40:76:db:6d:da:9e:bb:11:fd:6f:
                    28:07:a0:db:6d:82:34:9c:d8:a3:e4:89:ca:d9:6e:
                    f2:07:7b:f3:3d:11:35:ec:74:e9:fb:c4:02:48:b7:
                    e1:46:af:b3:65:78:42:7e:cd:4f:41:d9:0b:76:29:
                    01:d0:29:51:23:29:d3:1e:a0:21:36:49:22:6c:0c:
                    95:af:9a:81:00:4c:66:e4:87:b7:60:be:29:e1:35:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A1:49:81:4D:48:90:D5:D3:32:52:78:7D:BD:D2:2C:F8:69:20:4B
            X509v3 Authority Key Identifier:
                keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/jKFJgU1IkNXTMlJ4fb3SLPhpIEs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.175.216.0/22
                IPv6:
                  2001:67c:1810::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:a1:d7:0f:5a:0a:eb:96:21:f0:2f:93:bd:6d:00:9d:05:ea:
         70:58:0b:ae:ea:b8:fc:de:96:1b:0f:9f:4f:53:df:98:d2:44:
         94:84:f6:3b:5f:39:e4:2f:58:87:76:10:db:d3:05:cf:f1:ea:
         cc:7d:c4:c6:8a:9f:9a:83:27:ea:8e:a8:05:d1:ca:a5:45:9c:
         fd:3f:73:a8:08:6c:86:85:d9:05:b6:49:9e:9e:40:be:63:f9:
         0f:7c:32:56:b2:96:f3:30:3d:19:37:3f:71:d4:14:fd:d5:30:
         c4:22:c0:cc:58:7f:89:c6:ef:16:41:aa:8e:d5:6b:81:16:12:
         82:b9:60:ab:b6:87:98:5e:46:43:35:23:7c:d1:99:18:6b:fe:
         ab:f7:26:48:7d:64:86:6c:94:52:8f:ba:5f:43:38:0b:fd:40:
         26:1e:86:ab:14:26:88:01:2c:44:bb:1f:c3:41:05:18:86:f5:
         ae:85:8f:8e:5c:fa:c4:5c:64:71:20:c9:e2:f0:71:44:0b:c7:
         cf:90:e9:d9:d5:e6:1d:76:d9:93:5d:02:fe:48:1a:8d:99:2b:
         f0:ae:85:7c:54:c3:fc:fb:5e:93:b0:95:79:b5:cd:35:a6:18:
         23:29:8e:c7:e0:c9:20:2f:2b:66:cc:59:6d:7d:16:c5:1c:c7:
         01:b8:fc:5d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZTat/atbtLQaIlBmUf5E5DBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZDJkOTI4NDIzMTA0ZTVjMzQ4MGUyMWI0YTNlZDE0OThi
MmEyN2UwHhcNMjUwMjA2MTAwNDM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2ExNDk4MTRkNDg5MGQ1ZDMzMjUyNzg3ZGJkZDIyY2Y4NjkyMDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOXBv4K0RhzmDhISQd45B2ehnqTy
1Ig2jA3UjHRyQgtt1hI/97dV3MaM/p5jOFKNM6NAQAmDQdRFblX4VoLm0gfv2jtu
0ZhTr7AFfbgUInHDSK/IYNcE7KS7tiwKxTl7ztyCpc1lqX5PIAf+14+wGowJJmOV
kyoyqkyCRSVGjGYyy0R1kF+vf6AbJeVyhcqzLqikaZaNL7tz/Y/oKQGWTVdCb4fa
inKrWkB2223anrsR/W8oB6DbbYI0nNij5InK2W7yB3vzPRE17HTp+8QCSLfhRq+z
ZXhCfs1PQdkLdikB0ClRIynTHqAhNkkibAyVr5qBAExm5Ie3YL4p4TUBrQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIyhSYFNSJDV0zJSeH290iz4aSBLMB8GA1UdIwQY
MBaAFHfS2ShCMQTlw0gOIbSj7RSYsqJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8yYjllMjktZDU2OC00ZDUzLWIxMjgt
NDg4NzkyMzg4ZTViLzEvaktGSmdVMUlrTlhUTWxKNGZiM1NMUGhwSUVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8yYjllMjktZDU2OC00ZDUzLWIxMjgtNDg4NzkyMzg4ZTVi
LzEvZDlMWktFSXhCT1hEU0E0aHRLUHRGSml5b240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCua/YMA8E
AgACMAkDBwAgAQZ8GBAwDQYJKoZIhvcNAQELBQADggEBAC2h1w9aCuuWIfAvk71t
AJ0F6nBYC67quPzelhsPn09T35jSRJSE9jtfOeQvWId2ENvTBc/x6sx9xMaKn5qD
J+qOqAXRyqVFnP0/c6gIbIaF2QW2SZ6eQL5j+Q98MlaylvMwPRk3P3HUFP3VMMQi
wMxYf4nG7xZBqo7Va4EWEoK5YKu2h5heRkM1I3zRmRhr/qv3Jkh9ZIZslFKPul9D
OAv9QCYehqsUJogBLES7H8NBBRiG9a6Fj45c+sRcZHEgyeLwcUQLx8+Q6dnV5h12
2ZNdAv5IGo2ZK/CuhXxUw/z7XpOwlXm1zTWmGCMpjsfgySAvK2bMWW19FsUcxwG4
/F0=
-----END CERTIFICATE-----