Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/Bx50PRq6KcDkdxbj0-_pFidcJWw.roa
File:                     Bx50PRq6KcDkdxbj0-_pFidcJWw.roa (raw, json)
Hash identifier:          YY2WvnOzjX98gUiJi9jeyqU66NYG8yYekvXH8i5CTIo=
Subject key identifier:   07:1E:74:3D:1A:BA:29:C0:E4:77:16:E3:D3:EF:E9:16:27:5C:25:6C
Certificate issuer:       /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial:       0194228E31C91741810CE73C50FA87688691
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/Bx50PRq6KcDkdxbj0-_pFidcJWw.roa
Signing time:             Wed 01 Jan 2025 15:48:51 +0000
ROA not before:           Wed 01 Jan 2025 15:48:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209916
IP address blocks:        193.39.79.0/24 maxlen: 24
                          2a0e:8a80::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:31:c9:17:41:81:0c:e7:3c:50:fa:87:68:86:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
        Validity
            Not Before: Jan  1 15:48:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=071e743d1aba29c0e47716e3d3efe916275c256c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c8:a1:07:3f:5c:8a:12:87:f7:33:01:50:0f:
                    e1:5d:e6:b7:2c:a0:f7:29:31:f7:30:fb:81:7d:f9:
                    88:51:2d:df:55:de:be:99:07:54:d1:3e:de:94:c5:
                    65:dc:21:ed:8e:dd:9a:13:1b:01:0e:c1:2a:ce:08:
                    d1:36:0e:e8:2f:c4:6f:bb:0f:02:1c:d6:4c:df:55:
                    23:98:ca:d7:1d:76:ab:26:a9:83:97:af:96:c0:19:
                    16:98:31:5e:c8:48:e0:02:c1:0e:81:f5:cc:95:11:
                    35:f2:f8:e9:62:9a:f7:73:87:42:b3:66:53:fb:d1:
                    c9:f3:22:19:8e:12:2d:05:c2:db:b5:e1:00:af:d9:
                    dd:f7:5b:6e:06:2b:63:7a:ef:34:b1:d1:31:7b:ca:
                    d0:c9:13:a1:56:6e:ac:a3:ea:54:57:de:47:6e:c0:
                    aa:32:2d:72:42:8e:d7:6d:ef:7f:5b:79:44:e8:f8:
                    e1:27:88:1e:9d:75:16:18:35:40:b4:b7:19:09:cd:
                    ff:c9:79:e8:02:81:ec:ad:b2:c6:25:17:16:88:6e:
                    37:02:fe:66:4b:35:0d:f2:da:0b:f5:2b:72:d8:11:
                    63:a5:64:5b:a8:66:73:88:82:90:b3:42:7f:4f:38:
                    85:64:dd:f6:b6:2c:91:3a:c8:58:3a:e5:54:b3:3e:
                    36:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1E:74:3D:1A:BA:29:C0:E4:77:16:E3:D3:EF:E9:16:27:5C:25:6C
            X509v3 Authority Key Identifier:
                keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/Bx50PRq6KcDkdxbj0-_pFidcJWw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.39.79.0/24
                IPv6:
                  2a0e:8a80::/29

    Signature Algorithm: sha256WithRSAEncryption
         46:0e:2e:d5:04:d7:db:15:ed:cc:63:1b:70:6b:ff:d5:7d:27:
         65:d9:7d:a7:98:ef:c6:bb:6c:8b:6f:d2:e5:65:4b:ff:44:84:
         7d:19:23:ff:c8:a5:dd:44:a6:2c:a0:27:3f:f0:b6:59:28:92:
         15:21:95:81:d6:ee:3a:12:73:18:31:2a:07:78:d5:05:c5:bc:
         13:b7:d0:be:05:97:f5:df:66:cb:f2:6b:d6:e9:ce:cf:39:27:
         f5:ad:3c:5f:74:73:d7:a2:95:17:ba:9d:47:02:2b:eb:4a:5b:
         7e:87:8a:31:3c:c4:e2:f8:f0:70:08:b9:be:d6:5b:a1:08:46:
         06:c6:a7:b7:80:bc:8a:e4:99:35:e6:27:b3:0c:b3:63:68:17:
         71:29:b0:1e:dd:8d:49:e1:c3:f3:7f:b1:b8:88:5c:bc:29:b1:
         c3:ab:42:b9:89:f6:f9:75:6d:d3:2d:8e:16:c1:73:7a:e9:1c:
         37:df:46:ae:68:3c:d7:a0:3a:46:91:a5:07:69:1d:9d:54:cc:
         e4:b5:a0:b7:98:e3:41:52:5d:31:dc:da:6d:05:69:62:27:ed:
         ed:99:a6:4c:80:45:9f:af:15:14:86:ab:0c:87:51:24:af:31:
         0e:7c:4a:ad:ae:68:17:80:68:74:ac:c2:0e:07:fd:f0:cb:c2:
         d8:6e:4c:5b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijjHJF0GBDOc8UPqHaIaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMTEzZGQ1ZDA3NTljMDMwMDkzODAxNDBjNjY4ZWJiZDFm
OWMxNjgwHhcNMjUwMTAxMTU0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzFlNzQzZDFhYmEyOWMwZTQ3NzE2ZTNkM2VmZTkxNjI3NWMyNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcihBz9cihKH9zMBUA/hXea3LKD3
KTH3MPuBffmIUS3fVd6+mQdU0T7elMVl3CHtjt2aExsBDsEqzgjRNg7oL8Rvuw8C
HNZM31UjmMrXHXarJqmDl6+WwBkWmDFeyEjgAsEOgfXMlRE18vjpYpr3c4dCs2ZT
+9HJ8yIZjhItBcLbteEAr9nd91tuBitjeu80sdExe8rQyROhVm6so+pUV95HbsCq
Mi1yQo7Xbe9/W3lE6PjhJ4genXUWGDVAtLcZCc3/yXnoAoHsrbLGJRcWiG43Av5m
SzUN8toL9Sty2BFjpWRbqGZziIKQs0J/TziFZN32tiyROshYOuVUsz42sQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAcedD0auinA5HcW49Pv6RYnXCVsMB8GA1UdIwQY
MBaAFNARPdXQdZwDAJOAFAxmjrvR+cFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjct
YTJkNjM2ZjMyNWU2LzEvQng1MFBScTZLY0RrZHhiajAtX3BGaWRjSld3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjctYTJkNjM2ZjMyNWU2
LzEvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSdPMA0E
AgACMAcDBQMqDoqAMA0GCSqGSIb3DQEBCwUAA4IBAQBGDi7VBNfbFe3MYxtwa//V
fSdl2X2nmO/Gu2yLb9LlZUv/RIR9GSP/yKXdRKYsoCc/8LZZKJIVIZWB1u46EnMY
MSoHeNUFxbwTt9C+BZf132bL8mvW6c7POSf1rTxfdHPXopUXup1HAivrSlt+h4ox
PMTi+PBwCLm+1luhCEYGxqe3gLyK5Jk15iezDLNjaBdxKbAe3Y1J4cPzf7G4iFy8
KbHDq0K5ifb5dW3TLY4WwXN66Rw330auaDzXoDpGkaUHaR2dVMzktaC3mONBUl0x
3NptBWliJ+3tmaZMgEWfrxUUhqsMh1EkrzEOfEqtrmgXgGh0rMIOB/3wy8LYbkxb
-----END CERTIFICATE-----