Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/1XNJWBeFIM2IRAvxd79b-HcAo9o.roa
File:                     1XNJWBeFIM2IRAvxd79b-HcAo9o.roa (raw, json)
Hash identifier:          FW3/MZh4Uk7LDpQNsxMFINYM6j9D7wIMnyrZzis42ZE=
Subject key identifier:   D5:73:49:58:17:85:20:CD:88:44:0B:F1:77:BF:5B:F8:77:00:A3:DA
Certificate issuer:       /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Certificate serial:       019424455A1ABEFAA38D8F0C2B682471726D
Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/1XNJWBeFIM2IRAvxd79b-HcAo9o.roa
Signing time:             Wed 01 Jan 2025 23:48:32 +0000
ROA not before:           Wed 01 Jan 2025 23:48:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56588
IP address blocks:        46.226.136.0/21 maxlen: 21
                          2a00:6a00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:5a:1a:be:fa:a3:8d:8f:0c:2b:68:24:71:72:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
        Validity
            Not Before: Jan  1 23:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d5734958178520cd88440bf177bf5bf87700a3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:8e:53:76:d6:87:ff:35:c2:d4:74:04:e6:
                    1b:0e:11:94:e0:32:42:d5:f2:31:0a:db:f0:55:a1:
                    c8:9b:26:20:1f:a3:a0:65:fc:f1:e2:66:5a:26:98:
                    1b:0a:d3:66:9a:2d:3d:d6:fe:11:b8:e2:f5:b2:a9:
                    ef:53:9a:ea:83:00:43:84:6f:34:05:cb:31:0f:08:
                    39:75:ad:31:da:23:6c:db:e9:64:43:59:66:b5:b9:
                    b3:ac:92:b9:ad:7f:ec:17:5f:91:fb:5d:d7:94:98:
                    b9:b8:9c:2a:78:05:e2:f2:e7:51:f4:52:8c:e4:53:
                    56:2b:ef:10:57:69:44:7d:5d:76:d9:10:21:f0:00:
                    a6:8f:8b:e4:9b:6c:6e:f6:a2:3c:8f:b2:50:3c:9f:
                    48:62:fb:0b:13:6f:f7:2a:68:aa:79:0c:11:a6:18:
                    c6:3e:0b:6d:50:82:94:a1:a0:a6:44:fa:95:f5:64:
                    d7:c4:1f:fd:25:bb:88:bd:7e:a1:b3:61:9d:a7:f3:
                    03:d1:2d:2a:1f:23:3b:7c:6a:ef:14:db:c9:48:41:
                    d9:39:5c:12:40:84:49:00:20:a6:a9:50:15:46:16:
                    67:fd:82:88:d3:e4:9a:e9:65:59:ac:f4:82:4b:d3:
                    29:17:26:83:fc:28:e3:7c:36:dc:f1:df:fe:62:41:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:73:49:58:17:85:20:CD:88:44:0B:F1:77:BF:5B:F8:77:00:A3:DA
            X509v3 Authority Key Identifier:
                keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/1XNJWBeFIM2IRAvxd79b-HcAo9o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.136.0/21
                IPv6:
                  2a00:6a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:25:d5:11:12:26:27:29:7f:0a:14:aa:f7:59:9b:ad:10:6a:
         41:5f:71:eb:21:7d:d4:4e:77:52:88:6a:41:ba:0e:d8:5c:c5:
         50:0e:80:1f:06:d3:57:50:ad:09:90:c1:4e:ca:72:32:53:90:
         b4:e1:dc:ac:f5:82:24:bc:ac:d0:10:9f:d9:3d:fd:97:35:25:
         64:2f:ca:be:cf:56:96:c2:63:12:6b:f9:b2:3b:64:74:31:1a:
         bc:7b:2d:69:ed:3e:72:7f:91:df:38:7d:b2:85:c9:b3:6b:3b:
         3b:b1:09:7c:fd:71:57:59:f3:a7:b9:d3:e6:e8:56:41:bf:1b:
         cb:a0:ba:f9:89:bb:7e:03:bd:1e:b5:8e:50:87:af:a0:05:6b:
         2a:76:b3:b5:cb:f6:e9:f4:0d:d3:f5:de:34:6f:58:40:84:53:
         69:42:cf:07:ac:66:31:58:85:98:b1:a2:04:be:4b:2c:37:d4:
         23:19:3b:7f:d8:dc:52:2c:16:04:94:f5:ca:0a:4d:a5:c2:e9:
         89:00:c4:21:5d:bb:b1:1c:e9:b0:e0:f5:e2:d5:38:1f:63:c2:
         ca:5e:58:90:48:d8:af:37:88:75:72:fc:8f:7b:95:43:21:42:
         f3:08:74:8e:a9:91:ce:14:bd:d8:e4:10:58:79:6b:4d:f6:a7:
         bd:85:e5:14
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQkRVoavvqjjY8MK2gkcXJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDQ4YjVmODE1MjM1YzM5M2ZlYTc2MWUwN2ViOGI4YmJm
ODdmZDMwHhcNMjUwMTAxMjM0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTczNDk1ODE3ODUyMGNkODg0NDBiZjE3N2JmNWJmODc3MDBhM2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH+OU3bWh/81wtR0BOYbDhGU4DJC
1fIxCtvwVaHImyYgH6OgZfzx4mZaJpgbCtNmmi091v4RuOL1sqnvU5rqgwBDhG80
BcsxDwg5da0x2iNs2+lkQ1lmtbmzrJK5rX/sF1+R+13XlJi5uJwqeAXi8udR9FKM
5FNWK+8QV2lEfV122RAh8ACmj4vkm2xu9qI8j7JQPJ9IYvsLE2/3KmiqeQwRphjG
PgttUIKUoaCmRPqV9WTXxB/9JbuIvX6hs2Gdp/MD0S0qHyM7fGrvFNvJSEHZOVwS
QIRJACCmqVAVRhZn/YKI0+Sa6WVZrPSCS9MpFyaD/CjjfDbc8d/+YkEKfwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNVzSVgXhSDNiEQL8Xe/W/h3AKPaMB8GA1UdIwQY
MBaAFAwEi1+BUjXDk/6nYeB+uLi7+H/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZDdjMWMtOGViZC00MjQ2LTgzZjkt
NWYzY2MzMThmMTgwLzEvMVhOSldCZUZJTTJJUkF2eGQ3OWItSGNBbzlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82ZDdjMWMtOGViZC00MjQ2LTgzZjktNWYzY2MzMThmMTgw
LzEvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLuKIMA0E
AgACMAcDBQAqAGoAMA0GCSqGSIb3DQEBCwUAA4IBAQCYJdUREiYnKX8KFKr3WZut
EGpBX3HrIX3UTndSiGpBug7YXMVQDoAfBtNXUK0JkMFOynIyU5C04dys9YIkvKzQ
EJ/ZPf2XNSVkL8q+z1aWwmMSa/myO2R0MRq8ey1p7T5yf5HfOH2yhcmzazs7sQl8
/XFXWfOnudPm6FZBvxvLoLr5ibt+A70etY5Qh6+gBWsqdrO1y/bp9A3T9d40b1hA
hFNpQs8HrGYxWIWYsaIEvkssN9QjGTt/2NxSLBYElPXKCk2lwumJAMQhXbuxHOmw
4PXi1TgfY8LKXliQSNivN4h1cvyPe5VDIULzCHSOqZHOFL3Y5BBYeWtN9qe9heUU
-----END CERTIFICATE-----