Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Zvza_AEVzZujcB3uf3ENKXzKqQM.roa
File:                     Zvza_AEVzZujcB3uf3ENKXzKqQM.roa (raw, json)
Hash identifier:          57giD/GidN1QIt0FbCVf8xCexXWHCYg5Vqj76NoF+sc=
Subject key identifier:   66:FC:DA:FC:01:15:CD:9B:A3:70:1D:EE:7F:71:0D:29:7C:CA:A9:03
Certificate issuer:       /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial:       019424B384B9F81AACAE4914EEDF879AFBDE
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Zvza_AEVzZujcB3uf3ENKXzKqQM.roa
Signing time:             Thu 02 Jan 2025 01:48:52 +0000
ROA not before:           Thu 02 Jan 2025 01:48:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     51897
IP address blocks:        46.143.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:84:b9:f8:1a:ac:ae:49:14:ee:df:87:9a:fb:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
        Validity
            Not Before: Jan  2 01:48:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=66fcdafc0115cd9ba3701dee7f710d297ccaa903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:10:5a:90:ae:00:92:22:ad:99:d3:44:14:10:
                    36:ab:5d:93:0d:06:46:20:ef:5d:84:1a:27:4a:fb:
                    33:e7:b7:b9:22:a3:6c:0c:e9:32:3a:37:c0:28:e6:
                    b8:fe:3c:c7:66:76:bc:6d:df:3d:3c:af:a9:1e:09:
                    5d:95:8f:38:18:5d:33:0b:12:c4:ad:83:4e:38:28:
                    56:af:af:5d:08:f1:75:eb:16:ae:5d:47:88:1f:b2:
                    d6:b8:99:fa:1d:77:db:2f:3d:68:fe:0a:77:ea:e6:
                    88:00:23:11:62:56:1a:3d:c6:aa:67:38:71:4b:50:
                    78:23:16:b9:a4:18:f8:78:74:7b:65:11:42:a0:e8:
                    c3:80:89:7f:52:72:95:eb:12:5d:33:bf:b1:b6:7e:
                    b8:8d:94:32:d1:3d:91:38:f4:90:65:a7:e9:7c:81:
                    be:33:bd:a7:e2:cb:56:71:e7:08:00:cc:97:2e:b0:
                    83:34:f3:a2:8b:66:20:e7:44:eb:64:6e:f0:79:1f:
                    65:2f:36:e9:b8:15:4f:2a:f8:25:3b:c8:07:83:8d:
                    07:cc:9c:68:6c:d4:a4:21:1c:d1:1b:ea:b1:e1:45:
                    a4:48:52:12:ea:8b:f8:a4:3b:ef:38:cb:7f:03:09:
                    08:37:10:5d:66:c8:ff:b1:b9:b2:a7:f9:3b:1a:9f:
                    67:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FC:DA:FC:01:15:CD:9B:A3:70:1D:EE:7F:71:0D:29:7C:CA:A9:03
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Zvza_AEVzZujcB3uf3ENKXzKqQM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.143.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:41:25:68:b7:c4:20:62:db:a8:1e:83:2f:4d:07:41:dc:df:
         36:c4:56:7c:a7:7a:41:d2:fc:37:65:d8:dc:68:57:02:5e:69:
         18:88:a9:51:26:e8:d0:00:02:73:d6:0e:3b:31:21:3a:78:2f:
         ae:83:2e:92:4e:64:51:d1:1c:0d:22:91:76:b5:c3:f1:1d:94:
         03:02:77:f2:66:0a:f7:76:f2:fb:0b:71:c6:46:56:65:f2:f9:
         38:77:ce:ec:42:89:89:05:49:01:a2:84:fa:c0:f5:0e:66:96:
         35:bb:98:40:63:49:e1:82:3a:c5:94:6c:67:a7:e0:74:91:5c:
         98:4e:26:05:ff:81:93:4e:73:86:f4:62:aa:f5:40:e5:48:ce:
         88:93:e2:c1:25:f6:73:79:9f:c1:44:85:c1:be:a9:3d:8a:85:
         81:d9:00:0f:ac:5a:6d:54:46:ad:27:6b:78:6e:8b:85:67:e3:
         ec:09:22:96:a1:ac:8b:e8:89:3d:bb:86:19:11:c8:58:38:99:
         9e:df:8b:20:55:0b:46:b9:48:d6:fa:3a:c2:72:c8:1d:9b:4a:
         b7:99:68:f8:29:f3:7e:59:58:e7:bf:7c:49:49:29:9d:91:31:
         e9:21:11:29:e4:d8:ec:55:18:64:9b:51:f2:05:9c:78:88:b3:
         b5:b0:7e:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks4S5+BqsrkkU7t+HmvveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0
MTUwOGMwHhcNMjUwMTAyMDE0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmZjZGFmYzAxMTVjZDliYTM3MDFkZWU3ZjcxMGQyOTdjY2FhOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hBakK4AkiKtmdNEFBA2q12TDQZG
IO9dhBonSvsz57e5IqNsDOkyOjfAKOa4/jzHZna8bd89PK+pHgldlY84GF0zCxLE
rYNOOChWr69dCPF16xauXUeIH7LWuJn6HXfbLz1o/gp36uaIACMRYlYaPcaqZzhx
S1B4Ixa5pBj4eHR7ZRFCoOjDgIl/UnKV6xJdM7+xtn64jZQy0T2ROPSQZafpfIG+
M72n4stWcecIAMyXLrCDNPOii2Yg50TrZG7weR9lLzbpuBVPKvglO8gHg40HzJxo
bNSkIRzRG+qx4UWkSFIS6ov4pDvvOMt/AwkINxBdZsj/sbmyp/k7Gp9nVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGb82vwBFc2bo3Ad7n9xDSl8yqkDMB8GA1UdIwQY
MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt
MjlmMWJlYjJmMjgyLzEvWnZ6YV9BRVZ6WnVqY0IzdWYzRU5LWHpLcVFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy
LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLo/AMA0G
CSqGSIb3DQEBCwUAA4IBAQB8QSVot8QgYtuoHoMvTQdB3N82xFZ8p3pB0vw3Zdjc
aFcCXmkYiKlRJujQAAJz1g47MSE6eC+ugy6STmRR0RwNIpF2tcPxHZQDAnfyZgr3
dvL7C3HGRlZl8vk4d87sQomJBUkBooT6wPUOZpY1u5hAY0nhgjrFlGxnp+B0kVyY
TiYF/4GTTnOG9GKq9UDlSM6Ik+LBJfZzeZ/BRIXBvqk9ioWB2QAPrFptVEatJ2t4
bouFZ+PsCSKWoayL6Ik9u4YZEchYOJme34sgVQtGuUjW+jrCcsgdm0q3mWj4KfN+
WVjnv3xJSSmdkTHpIREp5NjsVRhkm1HyBZx4iLO1sH7P
-----END CERTIFICATE-----