Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/_Jw8Sbh9RaVaWsOz48ZRQ8sz6_0.roa
File:                     _Jw8Sbh9RaVaWsOz48ZRQ8sz6_0.roa (raw, json)
Hash identifier:          g7HJ8RH8z7l+dBFZwSZdGQ6PV3KNP+1s1Ade5CGaJbs=
Subject key identifier:   FC:9C:3C:49:B8:7D:45:A5:5A:5A:C3:B3:E3:C6:51:43:CB:33:EB:FD
Certificate issuer:       /CN=a663abd479cbff76082304bf60d03adc3187d936
Certificate serial:       018CC26D17C5A73E4D5499A5F5060CED1A36
Authority key identifier: A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/_Jw8Sbh9RaVaWsOz48ZRQ8sz6_0.roa
Signing time:             Mon 01 Jan 2024 00:29:38 +0000
ROA not before:           Mon 01 Jan 2024 00:29:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     396356
IP address blocks:        2a0a:8f40:31::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:17:c5:a7:3e:4d:54:99:a5:f5:06:0c:ed:1a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a663abd479cbff76082304bf60d03adc3187d936
        Validity
            Not Before: Jan  1 00:29:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fc9c3c49b87d45a55a5ac3b3e3c65143cb33ebfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:26:74:68:a9:70:d3:1a:7e:d8:7d:7b:4b:
                    7f:3e:25:f4:ae:73:3a:41:15:db:a8:52:5e:b6:9e:
                    93:a9:95:f2:a4:0a:36:70:16:38:84:f3:d2:2f:eb:
                    aa:ca:72:c7:98:ab:86:7a:9a:6c:3d:5c:37:cb:e2:
                    08:f3:bb:69:c5:ca:90:81:2c:a6:66:cb:78:fc:9c:
                    38:52:ba:ee:1e:65:8a:bd:2c:c8:39:f7:b6:71:1e:
                    a5:33:83:9c:c0:48:64:32:fc:7e:0a:4c:62:2f:de:
                    5b:99:59:4d:89:b7:55:6b:2f:29:2a:8c:c1:6c:aa:
                    68:e4:91:c2:81:cb:7a:ac:6d:e9:8a:cf:ca:c8:76:
                    a3:61:ef:f5:f9:90:cf:57:3c:46:9e:07:a6:b4:1a:
                    84:ab:5a:04:72:0c:01:a0:07:73:2d:8b:08:a3:57:
                    b8:a5:af:d6:a4:ed:1f:b9:89:17:a4:c3:05:13:16:
                    c6:7b:16:a2:ad:34:c9:1a:bf:27:2a:fe:03:8a:f7:
                    00:7a:36:36:32:0b:08:6d:9a:3c:a1:4e:b3:2a:11:
                    57:46:45:bd:ab:e9:f7:16:a4:8e:b6:fc:28:d9:e5:
                    75:8a:c2:b7:26:4b:bf:ae:27:fe:4c:bb:3d:2f:41:
                    25:99:53:91:2d:88:0b:6e:1b:87:1a:14:1b:0d:4c:
                    8e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9C:3C:49:B8:7D:45:A5:5A:5A:C3:B3:E3:C6:51:43:CB:33:EB:FD
            X509v3 Authority Key Identifier:
                keyid:A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/_Jw8Sbh9RaVaWsOz48ZRQ8sz6_0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:8f40:31::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:da:6b:71:80:71:a2:1d:4a:ac:39:e6:62:db:05:8d:f1:36:
         e3:ab:d5:e8:75:cd:86:90:59:e8:c0:a0:84:7c:ec:23:5f:a4:
         41:53:60:d4:13:ee:16:26:3e:c9:3f:2d:83:91:59:35:15:50:
         6f:5c:50:78:6a:ed:fa:19:d0:2b:bb:04:c2:54:fa:1d:59:78:
         30:5f:96:25:18:08:68:18:04:78:54:89:08:15:5c:d3:66:8b:
         9a:e6:4b:d5:4f:bf:80:61:74:d5:bc:64:3f:80:f8:0c:bd:81:
         16:b4:3a:63:6d:a8:74:84:7e:be:b2:77:00:5b:de:f8:33:f1:
         e0:d2:08:1f:4c:10:f4:2f:ef:dd:5c:bb:75:08:d2:d3:96:2e:
         50:bc:25:7f:42:97:ff:7d:9a:47:29:6c:2d:86:17:c2:99:4c:
         57:e7:e3:ff:9e:39:14:17:af:7d:22:24:6d:92:c1:06:a2:31:
         8a:ca:34:fc:6e:20:d0:49:01:5b:16:aa:cb:c7:c5:ac:ad:92:
         d1:28:8b:11:65:96:af:3c:0b:8b:2f:06:8d:f7:55:11:62:a9:
         bd:04:0a:1a:52:40:b9:c4:a4:7f:26:41:0f:33:f5:cc:21:69:
         01:4d:fd:68:84:df:6c:3f:ac:cf:bc:8e:e2:ef:be:f9:80:ee:
         48:d3:25:53
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzCbRfFpz5NVJml9QYM7Ro2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjNhYmQ0NzljYmZmNzYwODIzMDRiZjYwZDAzYWRjMzE4
N2Q5MzYwHhcNMjQwMTAxMDAyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzljM2M0OWI4N2Q0NWE1NWE1YWMzYjNlM2M2NTE0M2NiMzNlYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU4mdGipcNMafth9e0t/PiX0rnM6
QRXbqFJetp6TqZXypAo2cBY4hPPSL+uqynLHmKuGeppsPVw3y+II87tpxcqQgSym
Zst4/Jw4UrruHmWKvSzIOfe2cR6lM4OcwEhkMvx+CkxiL95bmVlNibdVay8pKozB
bKpo5JHCgct6rG3pis/KyHajYe/1+ZDPVzxGngemtBqEq1oEcgwBoAdzLYsIo1e4
pa/WpO0fuYkXpMMFExbGexairTTJGr8nKv4DivcAejY2MgsIbZo8oU6zKhFXRkW9
q+n3FqSOtvwo2eV1isK3Jku/rif+TLs9L0ElmVORLYgLbhuHGhQbDUyOmQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPycPEm4fUWlWlrDs+PGUUPLM+v9MB8GA1UdIwQY
MBaAFKZjq9R5y/92CCMEv2DQOtwxh9k2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1PcjFIbkxfM1lJSXdTX1lOQTYzREdIMlRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9mNDI3MjQtZDAwOS00ODdkLWE3OWMt
YmZhMDRmNmNkZTUwLzEvX0p3OFNiaDlSYVZhV3NPejQ4WlJROHN6Nl8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9mNDI3MjQtZDAwOS00ODdkLWE3OWMtYmZhMDRmNmNkZTUw
LzEvcG1PcjFIbkxfM1lJSXdTX1lOQTYzREdIMlRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgqPQAAx
MA0GCSqGSIb3DQEBCwUAA4IBAQCL2mtxgHGiHUqsOeZi2wWN8Tbjq9Xodc2GkFno
wKCEfOwjX6RBU2DUE+4WJj7JPy2DkVk1FVBvXFB4au36GdAruwTCVPodWXgwX5Yl
GAhoGAR4VIkIFVzTZoua5kvVT7+AYXTVvGQ/gPgMvYEWtDpjbah0hH6+sncAW974
M/Hg0ggfTBD0L+/dXLt1CNLTli5QvCV/Qpf/fZpHKWwthhfCmUxX5+P/njkUF699
IiRtksEGojGKyjT8biDQSQFbFqrLx8WsrZLRKIsRZZavPAuLLwaN91URYqm9BAoa
UkC5xKR/JkEPM/XMIWkBTf1ohN9sP6zPvI7i7775gO5I0yVT
-----END CERTIFICATE-----