Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa
File:                     gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (raw, json)
Hash identifier:          D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=
Subject key identifier:   83:11:9F:B0:1C:7A:94:B8:8B:40:3C:4E:6F:82:AC:10:12:4F:3C:3E
Certificate issuer:       /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial:       019422201C839C01759C4F4EEDDAD7729E2E
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa
Signing time:             Wed 01 Jan 2025 13:48:37 +0000
ROA not before:           Wed 01 Jan 2025 13:48:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210198
IP address blocks:        185.137.128.0/22 maxlen: 24
                          2a0c:a980::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:1c:83:9c:01:75:9c:4f:4e:ed:da:d7:72:9e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
        Validity
            Not Before: Jan  1 13:48:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=83119fb01c7a94b88b403c4e6f82ac10124f3c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:bf:fa:5f:49:5c:7b:f8:dd:15:26:f2:2a:
                    51:f7:cb:c5:41:6f:3f:06:11:b3:ec:96:0c:78:7f:
                    76:be:74:06:29:90:ea:40:b0:78:31:c5:f2:cb:2d:
                    0a:5a:b2:d8:c8:a6:2d:2f:3d:64:5a:5f:1f:3f:fd:
                    e2:9b:83:ba:a0:0f:ab:46:69:81:1f:16:08:53:2b:
                    a4:5c:ff:a2:20:aa:8a:94:87:a6:f0:51:5d:ea:91:
                    d2:70:ed:d9:f8:41:5d:6f:97:6b:f4:58:78:df:4b:
                    6e:26:15:7a:b3:cc:9b:34:21:60:83:e5:62:f8:dc:
                    91:71:0b:88:03:d5:55:f2:b3:02:5c:dd:04:89:10:
                    ec:99:26:5c:b7:52:bd:d8:09:09:43:58:0a:7a:04:
                    4b:86:40:6b:43:13:18:8e:09:49:78:0e:25:6c:03:
                    49:c9:5c:4c:8a:14:6f:7f:e1:1e:cf:6d:d8:74:35:
                    1b:94:26:84:75:98:d2:46:68:53:ba:db:53:9c:65:
                    13:ec:8c:ce:87:ed:2d:ec:9a:92:d9:83:c0:41:d7:
                    05:35:9f:3e:51:99:e2:6e:02:5c:f3:27:48:4e:bf:
                    70:42:b7:de:58:a4:14:d8:ef:3b:f5:24:ab:ad:88:
                    b7:24:bc:2c:43:dc:0d:dc:9f:e2:71:52:b0:ee:42:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:11:9F:B0:1C:7A:94:B8:8B:40:3C:4E:6F:82:AC:10:12:4F:3C:3E
            X509v3 Authority Key Identifier:
                keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.128.0/22
                IPv6:
                  2a0c:a980::/29

    Signature Algorithm: sha256WithRSAEncryption
         4f:ad:c1:04:e7:8c:74:a3:46:1b:8f:30:7b:51:16:ab:e7:77:
         c5:45:f3:d5:b8:46:5b:8a:91:5f:9a:6a:79:62:1f:3f:8c:2a:
         83:6b:58:b6:eb:c6:30:41:fd:34:23:a4:6a:5f:88:2f:b8:8b:
         04:61:9e:24:f1:17:f6:22:bf:5a:80:3b:a9:e3:cb:61:5b:82:
         0e:92:52:c9:61:ab:ef:26:f9:f8:6d:11:ec:02:93:55:27:d1:
         45:5b:4b:d4:6e:37:31:2d:d9:12:1e:52:dd:72:7b:2d:df:13:
         2f:36:3f:92:f7:40:19:ea:b4:e8:0c:aa:48:be:5d:31:31:f9:
         6a:7e:da:6f:10:8f:23:5e:cc:2c:9d:0e:73:c5:3a:8d:3b:82:
         66:bc:dd:27:ce:09:99:f8:85:6e:6b:32:85:35:e9:5e:a9:55:
         f9:ca:37:3f:3a:b6:1e:28:9b:24:1a:38:71:c3:5c:15:11:43:
         a1:ad:84:42:8d:ac:23:b4:e9:8b:54:17:c7:6d:3d:3f:e2:e5:
         4c:db:38:c5:8b:41:57:a3:85:83:8c:fc:eb:79:e6:41:52:21:
         00:67:50:f9:be:25:9a:dc:d3:fa:25:8e:20:2c:c2:31:55:52:
         f2:bb:9f:4a:cc:8a:b4:e3:a3:db:fc:d6:2e:be:be:ee:a8:f8:
         ac:9b:4e:ef
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQiIByDnAF1nE9O7drXcp4uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTkwNzc0ZTc3YTg5OTRhNDI4MzEyOGMzNTkyMWQwMzdi
MDZmMjEwHhcNMjUwMTAxMTM0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzExOWZiMDFjN2E5NGI4OGI0MDNjNGU2ZjgyYWMxMDEyNGYzYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA306/+l9JXHv43RUm8ipR98vFQW8/
BhGz7JYMeH92vnQGKZDqQLB4McXyyy0KWrLYyKYtLz1kWl8fP/3im4O6oA+rRmmB
HxYIUyukXP+iIKqKlIem8FFd6pHScO3Z+EFdb5dr9Fh430tuJhV6s8ybNCFgg+Vi
+NyRcQuIA9VV8rMCXN0EiRDsmSZct1K92AkJQ1gKegRLhkBrQxMYjglJeA4lbANJ
yVxMihRvf+Eez23YdDUblCaEdZjSRmhTuttTnGUT7IzOh+0t7JqS2YPAQdcFNZ8+
UZnibgJc8ydITr9wQrfeWKQU2O879SSrrYi3JLwsQ9wN3J/icVKw7kJTRwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIMRn7AcepS4i0A8Tm+CrBASTzw+MB8GA1UdIwQY
MBaAFClZB3TneomUpCgxKMNZIdA3sG8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUt
ZjJjMGRhNjFhYzEzLzEvZ3hHZnNCeDZsTGlMUUR4T2I0S3NFQkpQUEQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUtZjJjMGRhNjFhYzEz
LzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYmAMA0E
AgACMAcDBQMqDKmAMA0GCSqGSIb3DQEBCwUAA4IBAQBPrcEE54x0o0YbjzB7URar
53fFRfPVuEZbipFfmmp5Yh8/jCqDa1i268YwQf00I6RqX4gvuIsEYZ4k8Rf2Ir9a
gDup48thW4IOklLJYavvJvn4bRHsApNVJ9FFW0vUbjcxLdkSHlLdcnst3xMvNj+S
90AZ6rToDKpIvl0xMflqftpvEI8jXswsnQ5zxTqNO4JmvN0nzgmZ+IVuazKFNele
qVX5yjc/OrYeKJskGjhxw1wVEUOhrYRCjawjtOmLVBfHbT0/4uVM2zjFi0FXo4WD
jPzreeZBUiEAZ1D5viWa3NP6JY4gLMIxVVLyu59KzIq046Pb/NYuvr7uqPism07v
-----END CERTIFICATE-----