Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa
File:                     BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa (raw, json)
Hash identifier:          /0KB5Sq+IlIDTZoBY7qyhjJDP3PWs+GzGp/8C87RpPw=
Subject key identifier:   06:20:06:14:FB:C1:69:2F:BF:DF:F4:F4:02:9F:5B:DC:97:C9:18:20
Certificate issuer:       /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial:       019425FDA23FF07677CECF8749C869FFFADA
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa
Signing time:             Thu 02 Jan 2025 07:49:26 +0000
ROA not before:           Thu 02 Jan 2025 07:49:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     50169
IP address blocks:        2001:678:280::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:a2:3f:f0:76:77:ce:cf:87:49:c8:69:ff:fa:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
        Validity
            Not Before: Jan  2 07:49:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=06200614fbc1692fbfdff4f4029f5bdc97c91820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ba:c1:7c:ae:96:86:53:a1:3e:e8:72:8a:45:
                    c8:40:96:1a:ec:bd:35:46:f0:a5:1f:99:d3:fc:ee:
                    b1:c7:e8:fd:e4:57:c4:db:3c:6e:d2:7b:36:ae:2f:
                    5f:68:47:49:6f:3f:ee:00:4c:74:cf:e2:62:a4:76:
                    6d:07:2e:b0:a0:59:be:f2:5a:28:1c:71:1d:f5:1b:
                    86:83:bb:65:22:2d:68:00:8a:73:85:08:93:b9:56:
                    d8:18:8e:15:0c:3d:5d:5f:fb:f6:16:0d:15:33:11:
                    7d:2e:80:32:8c:88:75:de:d5:17:38:49:76:78:50:
                    00:1e:5e:24:a1:08:e9:51:2a:ba:93:3e:43:43:d3:
                    77:cd:e1:1f:e6:26:cf:f9:19:d1:49:07:56:de:b1:
                    17:dd:b9:3f:aa:3b:c1:22:c8:df:14:59:a5:ed:15:
                    3e:ec:d3:b2:b1:2c:78:99:49:46:dd:fe:3c:17:4d:
                    0e:7d:ea:dc:fc:ec:22:bc:56:47:0e:6f:49:e9:82:
                    b0:7d:60:f5:0f:40:21:27:da:2c:5c:6a:f6:0c:fb:
                    2c:ff:82:75:a1:7c:aa:76:1f:da:a1:a8:2f:63:97:
                    42:7f:f8:89:3b:81:ba:17:8b:fe:3c:05:6b:67:39:
                    46:22:57:21:bd:b4:41:eb:1c:3b:5a:2b:c7:08:94:
                    12:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:20:06:14:FB:C1:69:2F:BF:DF:F4:F4:02:9F:5B:DC:97:C9:18:20
            X509v3 Authority Key Identifier:
                keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:280::/48

    Signature Algorithm: sha256WithRSAEncryption
         d9:94:f7:48:1a:99:9d:7e:a7:10:78:7c:8c:bb:68:a1:cd:a8:
         65:49:4f:dd:d4:fd:86:80:70:df:73:03:e0:1f:88:0a:d9:0c:
         c5:66:b7:32:70:78:56:ec:8c:53:01:b0:ec:17:bb:21:9f:bf:
         23:21:11:56:21:56:ba:20:c9:7f:95:a9:f3:0a:dd:ef:fa:a0:
         bd:ea:f3:86:3a:f6:a0:5f:ac:97:58:13:d3:7d:94:76:b9:53:
         1c:17:7c:8d:33:21:2c:16:ef:1c:80:12:c6:70:32:73:9a:b9:
         53:1e:bc:46:b5:02:b0:8f:6c:d1:98:97:2c:9e:17:7e:72:99:
         77:24:68:e7:66:79:92:b5:63:e2:72:2b:e5:5c:cc:60:7c:dd:
         9a:31:c5:47:a8:45:b1:83:ff:c7:eb:8c:87:5c:ef:a3:11:7c:
         a8:10:a6:c1:ba:bb:e7:80:3f:b6:09:58:12:35:3f:a5:7a:43:
         8c:d6:9b:50:a0:7f:c9:16:94:47:c7:47:35:4a:0e:ee:c5:1b:
         b1:58:89:e0:3c:95:8d:40:fb:56:77:0b:94:81:3e:ba:e5:8b:
         57:50:a6:1f:82:ee:37:37:f1:36:3b:80:79:19:20:79:37:ee:
         2e:e9:f8:82:06:d1:60:17:f3:4a:28:6a:39:87:48:09:22:39:
         f6:7c:6e:d8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQl/aI/8HZ3zs+HSchp//raMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmRlM2MxYjBjNzlmZmIyNzgyMmUwOTQ3ZmRjMzhlNTFm
Y2M1Y2EwHhcNMjUwMTAyMDc0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjIwMDYxNGZiYzE2OTJmYmZkZmY0ZjQwMjlmNWJkYzk3YzkxODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbrBfK6WhlOhPuhyikXIQJYa7L01
RvClH5nT/O6xx+j95FfE2zxu0ns2ri9faEdJbz/uAEx0z+JipHZtBy6woFm+8loo
HHEd9RuGg7tlIi1oAIpzhQiTuVbYGI4VDD1dX/v2Fg0VMxF9LoAyjIh13tUXOEl2
eFAAHl4koQjpUSq6kz5DQ9N3zeEf5ibP+RnRSQdW3rEX3bk/qjvBIsjfFFml7RU+
7NOysSx4mUlG3f48F00Oferc/OwivFZHDm9J6YKwfWD1D0AhJ9osXGr2DPss/4J1
oXyqdh/aoagvY5dCf/iJO4G6F4v+PAVrZzlGIlchvbRB6xw7WivHCJQSmQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAYgBhT7wWkvv9/09AKfW9yXyRggMB8GA1UdIwQY
MBaAFBtt48Gwx5/7J4IuCUf9w45R/MXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzIzandiREhuX3NuZ2k0SlJfM0RqbEg4eGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jNWU1NTctOGJlNS00ZjM5LTk1NjUt
ZDk5ZTA4Njg0NmI3LzEvQmlBR0ZQdkJhUy1fM19UMEFwOWIzSmZKR0NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jNWU1NTctOGJlNS00ZjM5LTk1NjUtZDk5ZTA4Njg0NmI3
LzEvRzIzandiREhuX3NuZ2k0SlJfM0RqbEg4eGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAKA
MA0GCSqGSIb3DQEBCwUAA4IBAQDZlPdIGpmdfqcQeHyMu2ihzahlSU/d1P2GgHDf
cwPgH4gK2QzFZrcycHhW7IxTAbDsF7shn78jIRFWIVa6IMl/lanzCt3v+qC96vOG
OvagX6yXWBPTfZR2uVMcF3yNMyEsFu8cgBLGcDJzmrlTHrxGtQKwj2zRmJcsnhd+
cpl3JGjnZnmStWPicivlXMxgfN2aMcVHqEWxg//H64yHXO+jEXyoEKbBurvngD+2
CVgSNT+lekOM1ptQoH/JFpRHx0c1Sg7uxRuxWIngPJWNQPtWdwuUgT665YtXUKYf
gu43N/E2O4B5GSB5N+4u6fiCBtFgF/NKKGo5h0gJIjn2fG7Y
-----END CERTIFICATE-----