Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/0AdevnLlsxFU0_MXijL2HLDuliU.roa
File:                     0AdevnLlsxFU0_MXijL2HLDuliU.roa (raw, json)
Hash identifier:          Oq6mu5Hbl5chx/r3WVWbX/YQvEZQoJ2rWVh4OUcVSO0=
Subject key identifier:   D0:07:5E:BE:72:E5:B3:11:54:D3:F3:17:8A:32:F6:1C:B0:EE:96:25
Certificate issuer:       /CN=5b2c470db2443482e19523953a78c1ef0a169479
Certificate serial:       01942748728ED115CE94BCE2BE4BD303366A
Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/0AdevnLlsxFU0_MXijL2HLDuliU.roa
Signing time:             Thu 02 Jan 2025 13:50:46 +0000
ROA not before:           Thu 02 Jan 2025 13:50:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209719
IP address blocks:        193.107.67.0/24 maxlen: 24
                          2001:67c:940::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:72:8e:d1:15:ce:94:bc:e2:be:4b:d3:03:36:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479
        Validity
            Not Before: Jan  2 13:50:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d0075ebe72e5b31154d3f3178a32f61cb0ee9625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:91:3f:ca:d8:de:ab:83:4e:fb:96:ab:60:a0:
                    07:4b:76:c2:d2:a1:5a:24:c5:21:b2:95:1d:1e:26:
                    fc:54:ed:e2:ed:91:c8:8a:a2:9a:00:17:be:95:18:
                    a4:65:df:65:67:98:4a:2d:49:3e:7a:fb:3e:6a:06:
                    03:88:dd:e9:20:c2:f8:57:60:90:46:2c:2a:d5:75:
                    8d:bc:78:20:95:3a:e4:63:82:3b:4d:04:80:43:81:
                    21:ee:8c:f2:91:4d:24:21:fe:13:b5:9f:b3:53:59:
                    9a:48:99:fa:19:1e:79:3f:3d:0b:7f:80:5e:6b:60:
                    26:9c:57:a2:d8:ed:c7:a0:fd:8a:f6:a1:f5:06:03:
                    f5:14:43:a1:b9:a2:99:9e:59:0e:89:dc:50:22:70:
                    da:80:10:83:08:72:10:df:33:17:47:f9:14:2f:31:
                    8b:22:d0:02:6e:7a:89:02:01:72:5a:d5:5d:72:c2:
                    62:87:d0:b8:7a:ff:f5:68:2b:e2:79:ce:bc:ba:17:
                    53:d7:47:a0:c5:46:45:1c:4c:9c:72:c4:7e:58:cd:
                    70:0d:43:ce:6f:49:6f:c0:27:02:d2:81:42:ce:37:
                    3c:0c:40:21:72:24:eb:b5:8c:ee:fc:37:a6:74:27:
                    81:7e:49:b7:26:f6:50:19:c3:c8:6d:46:1f:ca:d3:
                    b1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:07:5E:BE:72:E5:B3:11:54:D3:F3:17:8A:32:F6:1C:B0:EE:96:25
            X509v3 Authority Key Identifier:
                keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/0AdevnLlsxFU0_MXijL2HLDuliU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.67.0/24
                IPv6:
                  2001:67c:940::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:0b:f9:e4:ba:4f:cb:04:4c:09:f9:83:9e:bd:5a:65:3c:0a:
         ad:9b:0d:a1:fa:db:b6:bc:e1:43:17:4f:01:26:18:39:28:fb:
         e0:c8:4a:e3:fa:96:da:76:d3:ad:90:e7:75:7a:19:ae:2f:3d:
         91:79:29:b6:0b:2d:7a:97:a9:e5:18:43:91:84:cf:3b:a7:5f:
         fe:60:60:52:8b:03:44:61:65:b2:f4:a0:3d:59:46:1c:9f:2e:
         c9:0a:4e:c3:22:04:5f:f1:1c:0a:47:2c:86:7f:bd:85:7e:d2:
         1e:45:ca:ba:39:f9:81:44:c1:ba:2a:9c:dd:35:60:7d:44:bd:
         69:a9:59:5a:06:86:85:5a:6a:54:32:4a:46:5f:6d:73:7d:a5:
         aa:75:4b:e8:f7:b5:33:b5:6d:96:18:50:7a:37:11:ce:00:64:
         80:98:51:1d:12:ed:50:6c:a3:17:40:a8:ee:36:c0:7b:2a:db:
         ff:ec:d6:78:da:c1:70:c5:2b:3d:40:31:a3:84:e4:0d:cd:ac:
         21:a4:3b:dd:63:c5:09:e7:5f:31:bf:1e:27:0a:86:46:33:5b:
         d7:44:fa:5f:71:de:69:58:5a:27:88:01:35:4c:0f:30:de:52:
         71:db:34:f4:9b:b8:b3:cb:c5:33:b8:1d:d6:15:73:26:93:8b:
         92:2e:64:88
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQnSHKO0RXOlLzivkvTAzZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMmM0NzBkYjI0NDM0ODJlMTk1MjM5NTNhNzhjMWVmMGEx
Njk0NzkwHhcNMjUwMTAyMTM1MDQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDA3NWViZTcyZTViMzExNTRkM2YzMTc4YTMyZjYxY2IwZWU5NjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZE/ytjeq4NO+5arYKAHS3bC0qFa
JMUhspUdHib8VO3i7ZHIiqKaABe+lRikZd9lZ5hKLUk+evs+agYDiN3pIML4V2CQ
Riwq1XWNvHgglTrkY4I7TQSAQ4Eh7ozykU0kIf4TtZ+zU1maSJn6GR55Pz0Lf4Be
a2AmnFei2O3HoP2K9qH1BgP1FEOhuaKZnlkOidxQInDagBCDCHIQ3zMXR/kULzGL
ItACbnqJAgFyWtVdcsJih9C4ev/1aCviec68uhdT10egxUZFHEyccsR+WM1wDUPO
b0lvwCcC0oFCzjc8DEAhciTrtYzu/DemdCeBfkm3JvZQGcPIbUYfytOxgQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNAHXr5y5bMRVNPzF4oy9hyw7pYlMB8GA1UdIwQY
MBaAFFssRw2yRDSC4ZUjlTp4we8KFpR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3l4SERiSkVOSUxobFNPVk9uakI3d29XbEhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xNDdhZTQtNzc1Yi00YzQ4LWIwZGEt
YzM3OWY4YzIzZmMxLzEvMEFkZXZuTGxzeEZVMF9NWGlqTDJITER1bGlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xNDdhZTQtNzc1Yi00YzQ4LWIwZGEtYzM3OWY4YzIzZmMx
LzEvV3l4SERiSkVOSUxobFNPVk9uakI3d29XbEhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwWtDMA8E
AgACMAkDBwAgAQZ8CUAwDQYJKoZIhvcNAQELBQADggEBAGQL+eS6T8sETAn5g569
WmU8Cq2bDaH627a84UMXTwEmGDko++DISuP6ltp2062Q53V6Ga4vPZF5KbYLLXqX
qeUYQ5GEzzunX/5gYFKLA0RhZbL0oD1ZRhyfLskKTsMiBF/xHApHLIZ/vYV+0h5F
yro5+YFEwboqnN01YH1EvWmpWVoGhoVaalQySkZfbXN9pap1S+j3tTO1bZYYUHo3
Ec4AZICYUR0S7VBsoxdAqO42wHsq2//s1njawXDFKz1AMaOE5A3NrCGkO91jxQnn
XzG/HicKhkYzW9dE+l9x3mlYWieIATVMDzDeUnHbNPSbuLPLxTO4HdYVcyaTi5Iu
ZIg=
-----END CERTIFICATE-----