Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5iyOs1XhPN_HG1uZXkjO-EPSk_k.roa
File:                     5iyOs1XhPN_HG1uZXkjO-EPSk_k.roa (raw, json)
Hash identifier:          ostWoXbmJvqsdJKeVjmTx2MuVyUJaYIVcMfanc90tzs=
Subject key identifier:   E6:2C:8E:B3:55:E1:3C:DF:C7:1B:5B:99:5E:48:CE:F8:43:D2:93:F9
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       0195EDAD90FE27A857C11E76487C0FAC5D6D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5iyOs1XhPN_HG1uZXkjO-EPSk_k.roa
Signing time:             Mon 31 Mar 2025 19:28:49 +0000
ROA not before:           Mon 31 Mar 2025 19:28:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     273189
IP address blocks:        45.67.246.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ed:ad:90:fe:27:a8:57:c1:1e:76:48:7c:0f:ac:5d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Mar 31 19:28:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e62c8eb355e13cdfc71b5b995e48cef843d293f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:13:77:78:ea:29:ca:34:95:f5:9a:dc:49:
                    66:f0:f8:4e:48:d4:7a:5d:18:77:31:94:b8:3e:8e:
                    4a:0e:36:e5:15:9b:f6:65:47:60:61:e4:08:16:e3:
                    e6:f2:21:fa:e6:f8:ba:35:f2:27:5d:ba:9e:d9:f1:
                    aa:7b:05:f1:95:ed:88:f8:ce:9e:48:c7:63:87:2f:
                    ce:a6:80:43:44:d8:9b:6d:d2:77:3b:96:9e:2c:77:
                    df:75:06:d6:fd:8a:dc:9d:29:d7:66:65:92:94:2e:
                    37:ae:95:3f:fc:62:39:10:f8:fd:c0:ef:2b:03:c6:
                    cc:6b:97:6a:c8:bf:87:0f:fa:98:ea:c0:b2:db:45:
                    3c:3c:c1:6a:6a:38:7f:81:87:35:bc:98:26:b4:73:
                    7b:81:bc:88:bc:be:c0:2b:ac:d0:f7:22:dd:9c:16:
                    fc:e2:81:a2:a0:08:47:71:95:49:1d:4e:de:04:3a:
                    85:a5:00:9f:3d:f2:87:f8:c9:a2:fb:eb:d6:c3:3c:
                    c9:fd:44:fb:ac:3e:59:75:2b:87:d6:55:05:99:d6:
                    64:fd:eb:76:21:31:57:13:df:4a:f2:0f:b2:a1:0f:
                    61:48:78:35:1c:69:32:d7:03:a6:c9:da:a4:a4:5e:
                    a2:b2:ec:85:ec:7b:b0:98:e4:3c:6a:80:58:11:08:
                    07:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2C:8E:B3:55:E1:3C:DF:C7:1B:5B:99:5E:48:CE:F8:43:D2:93:F9
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5iyOs1XhPN_HG1uZXkjO-EPSk_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:36:b2:75:4d:43:80:ef:ef:40:bb:92:46:a7:ef:92:e8:da:
         75:b1:3b:10:3b:bf:46:af:d8:66:6d:55:ce:2a:65:14:ae:6f:
         23:9b:56:83:6b:62:88:5f:41:37:52:10:af:ed:e0:b7:51:5a:
         46:7e:1d:51:44:10:2b:e5:07:79:17:58:cd:dc:0c:22:89:67:
         12:af:3d:6b:bb:b0:ad:0e:02:a3:eb:4f:de:fd:26:fb:68:32:
         29:ef:ab:2b:23:7d:66:f1:9f:1b:d5:8b:e1:0c:54:ae:8e:23:
         27:a9:2a:cd:cb:43:de:30:5d:b1:0f:88:c8:7b:44:d1:96:e1:
         8f:35:54:83:4e:20:5b:d7:07:a6:a2:2e:d1:d6:66:27:7b:46:
         2e:33:39:60:59:d4:12:10:ef:65:fd:f0:13:52:b0:b5:8c:bb:
         92:3a:f9:1c:2c:0e:b4:47:68:a7:d6:c1:e6:5e:90:b8:2c:4a:
         a9:0d:17:5b:d5:bb:60:80:e9:a4:d7:57:e0:98:18:85:8c:6d:
         83:dd:f3:a5:34:25:a0:ac:d2:41:06:08:7e:18:fe:2c:2e:a9:
         26:8b:5c:45:7d:58:14:41:06:cd:bd:cb:79:82:b9:56:47:03:
         75:d0:4c:0b:29:cb:97:a7:68:19:ba:fd:96:79:c1:18:fd:3a:
         45:6f:70:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXtrZD+J6hXwR52SHwPrF1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUwMzMxMTkyODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjJjOGViMzU1ZTEzY2RmYzcxYjViOTk1ZTQ4Y2VmODQzZDI5M2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLkTd3jqKco0lfWa3Elm8PhOSNR6
XRh3MZS4Po5KDjblFZv2ZUdgYeQIFuPm8iH65vi6NfInXbqe2fGqewXxle2I+M6e
SMdjhy/OpoBDRNibbdJ3O5aeLHffdQbW/YrcnSnXZmWSlC43rpU//GI5EPj9wO8r
A8bMa5dqyL+HD/qY6sCy20U8PMFqajh/gYc1vJgmtHN7gbyIvL7AK6zQ9yLdnBb8
4oGioAhHcZVJHU7eBDqFpQCfPfKH+Mmi++vWwzzJ/UT7rD5ZdSuH1lUFmdZk/et2
ITFXE99K8g+yoQ9hSHg1HGky1wOmydqkpF6isuyF7HuwmOQ8aoBYEQgHJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOYsjrNV4TzfxxtbmV5IzvhD0pP5MB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvNWl5T3MxWGhQTl9IRzF1Wlhrak8tRVBTa19rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLUP2MA0G
CSqGSIb3DQEBCwUAA4IBAQAxNrJ1TUOA7+9Au5JGp++S6Np1sTsQO79Gr9hmbVXO
KmUUrm8jm1aDa2KIX0E3UhCv7eC3UVpGfh1RRBAr5Qd5F1jN3AwiiWcSrz1ru7Ct
DgKj60/e/Sb7aDIp76srI31m8Z8b1YvhDFSujiMnqSrNy0PeMF2xD4jIe0TRluGP
NVSDTiBb1wemoi7R1mYne0YuMzlgWdQSEO9l/fATUrC1jLuSOvkcLA60R2in1sHm
XpC4LEqpDRdb1btggOmk11fgmBiFjG2D3fOlNCWgrNJBBgh+GP4sLqkmi1xFfVgU
QQbNvct5grlWRwN10EwLKcuXp2gZuv2WecEY/TpFb3CV
-----END CERTIFICATE-----