Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/_6aoVlBUwlPIw613OqnPUhF6Stw.roa
File:                     _6aoVlBUwlPIw613OqnPUhF6Stw.roa (raw, json)
Hash identifier:          cWQaozMHwttAsgSmgf91geachnA2gCeK71KFOrFjrOI=
Subject key identifier:   FF:A6:A8:56:50:54:C2:53:C8:C3:AD:77:3A:A9:CF:52:11:7A:4A:DC
Certificate issuer:       /CN=14a63359e84e00c0f9e2a203ead2781a26d904e6
Certificate serial:       019420685791CCBEE7F67E9A628A35B20BFC
Authority key identifier: 14:A6:33:59:E8:4E:00:C0:F9:E2:A2:03:EA:D2:78:1A:26:D9:04:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKYzWehOAMD54qID6tJ4GibZBOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/_6aoVlBUwlPIw613OqnPUhF6Stw.roa
Signing time:             Wed 01 Jan 2025 05:48:16 +0000
ROA not before:           Wed 01 Jan 2025 05:48:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200203
IP address blocks:        2a13:d800::/32 maxlen: 32
                          2a13:d800:1000::/36 maxlen: 36
                          2a13:d800:2000::/36 maxlen: 36
                          2a13:d800:3000::/36 maxlen: 36
                          2a13:d800:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:57:91:cc:be:e7:f6:7e:9a:62:8a:35:b2:0b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a63359e84e00c0f9e2a203ead2781a26d904e6
        Validity
            Not Before: Jan  1 05:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ffa6a8565054c253c8c3ad773aa9cf52117a4adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:39:4f:5b:e3:e8:4e:29:68:49:96:fa:ae:
                    28:95:32:97:54:10:3a:02:9d:56:17:ef:70:a6:ae:
                    7f:4e:18:9e:f8:2c:ce:fb:b4:1d:b5:09:77:65:87:
                    b2:73:3c:85:df:f1:b3:af:4c:77:0d:db:92:f6:51:
                    d3:a1:36:92:e1:5a:de:3e:5f:82:61:8d:7a:e4:fd:
                    16:a5:45:35:fa:a5:5a:49:3f:ef:62:66:59:04:3c:
                    23:5a:5c:8d:90:d9:e3:33:7d:82:96:aa:93:7b:07:
                    05:da:07:2e:ae:2d:4a:fc:b2:d5:0e:63:39:e1:52:
                    32:30:50:f3:42:30:21:28:fc:cb:a4:44:c3:9b:f7:
                    d7:4b:45:2b:fe:37:7f:66:a3:d2:15:f0:6d:91:08:
                    4e:07:4f:78:e6:fa:e9:05:39:ca:42:34:d5:e0:d6:
                    75:8a:23:09:9e:b8:28:89:af:37:5b:c8:63:97:28:
                    d3:b5:87:f1:74:66:b1:7d:11:bb:77:b1:b8:dc:e6:
                    70:9a:9c:12:b0:07:e8:dd:51:20:d6:16:72:ba:91:
                    a3:35:0f:de:44:a4:24:ec:19:7e:2e:68:ad:24:f5:
                    a0:06:6a:d3:89:17:9a:c2:d9:47:74:d0:08:47:a6:
                    cd:87:d8:66:a8:d3:54:36:1f:78:db:8f:ea:9b:27:
                    46:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A6:A8:56:50:54:C2:53:C8:C3:AD:77:3A:A9:CF:52:11:7A:4A:DC
            X509v3 Authority Key Identifier:
                keyid:14:A6:33:59:E8:4E:00:C0:F9:E2:A2:03:EA:D2:78:1A:26:D9:04:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKYzWehOAMD54qID6tJ4GibZBOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/_6aoVlBUwlPIw613OqnPUhF6Stw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:d800::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:47:f1:2f:16:b2:61:8e:89:30:8c:ac:be:31:0b:ab:ee:19:
         15:2a:c5:5b:88:67:46:48:6a:ce:70:ca:8d:a1:ea:08:bf:e1:
         23:16:a7:6b:83:27:11:4d:c4:ee:5f:c2:0b:60:ce:4b:43:8b:
         ad:03:eb:44:04:a8:d0:ac:68:3f:e1:67:7d:6f:62:79:31:0b:
         f1:a2:68:27:6f:0c:90:9f:36:a0:00:67:1c:f4:a2:33:d5:70:
         19:81:52:97:7b:20:da:11:31:b8:68:38:b7:2b:c3:dc:dd:3a:
         69:be:f0:d0:b8:56:8c:5a:b1:f8:61:9b:4b:28:8e:58:c0:a3:
         7f:9f:cb:1a:a0:f2:60:cb:00:14:88:79:d7:a7:c0:91:29:47:
         77:7e:bb:55:bd:d3:b4:5a:48:fc:22:c9:c4:2e:56:1f:5e:e8:
         8a:73:1b:34:29:23:6c:2a:64:e1:14:19:bb:01:04:bf:91:19:
         2e:5f:f1:2c:bd:38:da:18:5b:b0:b7:fd:df:e9:49:62:9c:4c:
         c9:af:2c:56:6d:2d:f8:8d:64:fe:33:51:57:13:41:97:31:e0:
         a5:01:a0:2e:8b:a1:21:39:2c:fa:49:f1:6a:9d:8e:22:d1:d3:
         13:60:56:08:d0:dc:35:5d:04:7a:17:42:e2:40:e9:c6:51:04:
         f7:0d:d6:f8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQgaFeRzL7n9n6aYoo1sgv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YTYzMzU5ZTg0ZTAwYzBmOWUyYTIwM2VhZDI3ODFhMjZk
OTA0ZTYwHhcNMjUwMTAxMDU0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmE2YTg1NjUwNTRjMjUzYzhjM2FkNzczYWE5Y2Y1MjExN2E0YWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJE5T1vj6E4paEmW+q4olTKXVBA6
Ap1WF+9wpq5/Thie+CzO+7QdtQl3ZYeyczyF3/Gzr0x3DduS9lHToTaS4VrePl+C
YY165P0WpUU1+qVaST/vYmZZBDwjWlyNkNnjM32ClqqTewcF2gcuri1K/LLVDmM5
4VIyMFDzQjAhKPzLpETDm/fXS0Ur/jd/ZqPSFfBtkQhOB0945vrpBTnKQjTV4NZ1
iiMJnrgoia83W8hjlyjTtYfxdGaxfRG7d7G43OZwmpwSsAfo3VEg1hZyupGjNQ/e
RKQk7Bl+LmitJPWgBmrTiReawtlHdNAIR6bNh9hmqNNUNh9424/qmydGNQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFP+mqFZQVMJTyMOtdzqpz1IRekrcMB8GA1UdIwQY
MBaAFBSmM1noTgDA+eKiA+rSeBom2QTmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktZeldlaE9BTUQ1NHFJRDZ0SjRHaWJaQk9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xYjZiMjEtNWViMi00YmY4LWI1NWQt
OWYxNzE1OTdhZTc4LzEvXzZhb1ZsQlV3bFBJdzYxM09xblBVaEY2U3R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xYjZiMjEtNWViMi00YmY4LWI1NWQtOWYxNzE1OTdhZTc4
LzEvRktZeldlaE9BTUQ1NHFJRDZ0SjRHaWJaQk9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhPYADAN
BgkqhkiG9w0BAQsFAAOCAQEAgkfxLxayYY6JMIysvjELq+4ZFSrFW4hnRkhqznDK
jaHqCL/hIxana4MnEU3E7l/CC2DOS0OLrQPrRASo0KxoP+FnfW9ieTEL8aJoJ28M
kJ82oABnHPSiM9VwGYFSl3sg2hExuGg4tyvD3N06ab7w0LhWjFqx+GGbSyiOWMCj
f5/LGqDyYMsAFIh516fAkSlHd367Vb3TtFpI/CLJxC5WH17oinMbNCkjbCpk4RQZ
uwEEv5EZLl/xLL042hhbsLf93+lJYpxMya8sVm0t+I1k/jNRVxNBlzHgpQGgLouh
ITks+knxap2OItHTE2BWCNDcNV0EehdC4kDpxlEE9w3W+A==
-----END CERTIFICATE-----