Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/Z6cP8UU8ou5UZa2tgmGF-TWXv7o.roa
File:                     Z6cP8UU8ou5UZa2tgmGF-TWXv7o.roa (raw, json)
Hash identifier:          4wKWfKiX6etE7Y85veoMkmwG3aEsU0NvUo1kjzyAViY=
Subject key identifier:   67:A7:0F:F1:45:3C:A2:EE:54:65:AD:AD:82:61:85:F9:35:97:BF:BA
Certificate issuer:       /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial:       01942444E85A4B8D751CC46ED5D5A8780FA9
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/Z6cP8UU8ou5UZa2tgmGF-TWXv7o.roa
Signing time:             Wed 01 Jan 2025 23:48:03 +0000
ROA not before:           Wed 01 Jan 2025 23:48:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20910
IP address blocks:        178.213.48.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:e8:5a:4b:8d:75:1c:c4:6e:d5:d5:a8:78:0f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
        Validity
            Not Before: Jan  1 23:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67a70ff1453ca2ee5465adad826185f93597bfba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:09:1e:55:2e:fe:98:6a:43:3d:d3:cf:3f:
                    c9:b5:60:d6:54:5f:f5:54:e1:e9:cf:f7:49:cd:c9:
                    91:aa:65:c6:1d:32:03:a5:25:b9:0e:2d:ec:52:e7:
                    05:d2:fd:17:e3:5c:98:d0:70:62:03:61:d8:e9:30:
                    f6:94:a8:67:24:5e:ca:99:c3:2a:67:91:46:2b:33:
                    c2:b9:1b:68:54:8f:9e:65:d6:46:f7:28:a7:cc:ce:
                    41:e6:0b:f9:c2:cd:a7:b9:39:38:81:ca:f2:1d:e4:
                    b7:c0:7a:f0:a1:44:d0:48:f5:1c:e2:1f:3c:6e:b5:
                    9e:fa:ba:7a:7b:ae:b7:41:2d:b8:f2:4c:ee:80:c5:
                    ca:36:c8:ff:f9:2c:fa:eb:ba:05:5f:2d:48:58:22:
                    40:33:03:b8:e0:dd:1d:cb:6e:26:a3:2e:36:78:f4:
                    30:38:e6:3f:8d:e6:a7:55:98:ea:70:3c:e3:d1:fb:
                    ea:ea:bd:d1:06:d0:e1:8d:75:db:f9:50:66:b6:e4:
                    cb:33:16:10:b5:c6:f1:b2:0d:46:bc:41:99:04:93:
                    24:cf:30:5c:d6:73:f3:3c:85:9c:e5:3a:41:38:03:
                    c1:1f:d8:d3:e0:34:21:c5:cb:f5:0c:40:61:a5:b5:
                    29:e3:7d:ce:3f:0a:86:bf:64:5e:0a:65:52:8e:16:
                    54:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A7:0F:F1:45:3C:A2:EE:54:65:AD:AD:82:61:85:F9:35:97:BF:BA
            X509v3 Authority Key Identifier:
                keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/Z6cP8UU8ou5UZa2tgmGF-TWXv7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.213.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:b4:12:cf:9b:75:51:77:d6:41:5d:cf:a5:e6:8e:c8:91:bc:
         65:8c:dc:1c:e9:4a:62:97:d1:7d:59:7a:92:ae:28:55:f8:90:
         db:98:f6:6c:b8:23:80:b3:25:6e:db:a1:8a:0e:f4:98:29:2b:
         5c:c3:00:e5:88:42:b9:b3:c8:78:91:8d:43:a4:cb:36:61:fb:
         a1:6e:84:25:14:91:07:1e:0b:8d:f1:96:cb:9a:b1:64:4d:87:
         de:d6:3d:83:0e:5c:82:af:fc:18:65:b8:95:ae:7e:9a:3e:bc:
         fb:1e:8b:47:37:dd:27:73:52:a1:49:96:b3:96:70:02:56:15:
         6f:c1:9a:62:61:d0:4d:a5:21:68:3c:3a:a2:27:d1:93:1c:1d:
         8c:14:9d:42:5d:6b:e2:d6:03:bc:06:82:14:16:9a:3a:a2:9f:
         18:bf:ea:a4:38:da:0e:43:a5:92:ca:5e:f1:60:52:5f:c5:6e:
         3c:95:32:03:8e:95:b8:1f:06:db:4e:8e:72:0b:56:db:9c:94:
         8b:0c:32:f1:84:d4:9f:36:b2:13:d1:ea:4c:49:05:09:be:de:
         7c:b2:e3:84:5d:57:95:85:05:b5:2c:44:02:ec:4b:ee:86:a7:
         db:77:e4:51:0b:66:97:58:5c:ce:17:9d:51:05:bf:c1:56:c7:
         a4:11:2b:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkROhaS411HMRu1dWoeA+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlOGVkMzNiNzBiZTZjYzIwYzg5ZmJiYWM3N2E1OWNhM2I0
YzA5MzQwHhcNMjUwMTAxMjM0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2E3MGZmMTQ1M2NhMmVlNTQ2NWFkYWQ4MjYxODVmOTM1OTdiZmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvEJHlUu/phqQz3Tzz/JtWDWVF/1
VOHpz/dJzcmRqmXGHTIDpSW5Di3sUucF0v0X41yY0HBiA2HY6TD2lKhnJF7KmcMq
Z5FGKzPCuRtoVI+eZdZG9yinzM5B5gv5ws2nuTk4gcryHeS3wHrwoUTQSPUc4h88
brWe+rp6e663QS248kzugMXKNsj/+Sz667oFXy1IWCJAMwO44N0dy24moy42ePQw
OOY/jeanVZjqcDzj0fvq6r3RBtDhjXXb+VBmtuTLMxYQtcbxsg1GvEGZBJMkzzBc
1nPzPIWc5TpBOAPBH9jT4DQhxcv1DEBhpbUp433OPwqGv2ReCmVSjhZU5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGenD/FFPKLuVGWtrYJhhfk1l7+6MB8GA1UdIwQY
MBaAFK6O0ztwvmzCDIn7usd6Wco7TAk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUt
MDRkYmM5YWMxNDQ0LzEvWjZjUDhVVThvdTVVWmEydGdtR0YtVFdYdjdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUtMDRkYmM5YWMxNDQ0
LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstUwMA0G
CSqGSIb3DQEBCwUAA4IBAQACtBLPm3VRd9ZBXc+l5o7IkbxljNwc6Upil9F9WXqS
rihV+JDbmPZsuCOAsyVu26GKDvSYKStcwwDliEK5s8h4kY1DpMs2YfuhboQlFJEH
HguN8ZbLmrFkTYfe1j2DDlyCr/wYZbiVrn6aPrz7HotHN90nc1KhSZazlnACVhVv
wZpiYdBNpSFoPDqiJ9GTHB2MFJ1CXWvi1gO8BoIUFpo6op8Yv+qkONoOQ6WSyl7x
YFJfxW48lTIDjpW4HwbbTo5yC1bbnJSLDDLxhNSfNrIT0epMSQUJvt58suOEXVeV
hQW1LEQC7Evuhqfbd+RRC2aXWFzOF51RBb/BVsekESs4
-----END CERTIFICATE-----