Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/EGu7n5ptipM5eNOhCckU54k5DkQ.roa
File:                     EGu7n5ptipM5eNOhCckU54k5DkQ.roa (raw, json)
Hash identifier:          T5q/E4P5U9BLCmb7DxjfaSe8vQrSmm6xkzEcVmgP2NA=
Subject key identifier:   10:6B:BB:9F:9A:6D:8A:93:39:78:D3:A1:09:C9:14:E7:89:39:0E:44
Certificate issuer:       /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial:       019425219FC2DD1A3435A0FCF458BA2766F4
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/EGu7n5ptipM5eNOhCckU54k5DkQ.roa
Signing time:             Thu 02 Jan 2025 03:49:08 +0000
ROA not before:           Thu 02 Jan 2025 03:49:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205257
IP address blocks:        185.80.33.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:9f:c2:dd:1a:34:35:a0:fc:f4:58:ba:27:66:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
        Validity
            Not Before: Jan  2 03:49:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=106bbb9f9a6d8a933978d3a109c914e789390e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:21:73:31:6e:8a:88:e7:f4:13:2b:50:32:df:
                    c7:0a:c7:f7:06:3f:5c:d5:58:58:4a:d4:f0:e1:f3:
                    54:2f:78:86:33:2e:fa:43:72:be:87:a4:85:6a:b1:
                    b3:9a:37:a4:41:b5:d0:b7:8b:8e:53:bf:55:63:86:
                    79:c3:99:f1:5b:b4:7d:40:a9:9a:14:ba:c3:4b:d1:
                    47:8f:9b:e1:96:d4:76:d0:6e:8c:bf:b6:b7:97:57:
                    b3:03:b1:22:94:e2:2e:8c:e2:90:9f:54:ee:69:c5:
                    1f:41:1b:e9:02:3e:12:42:d2:ed:d3:0a:4c:6e:f8:
                    f4:50:ea:67:d2:59:b1:65:75:ed:d6:62:9c:88:37:
                    45:a2:dc:c4:c1:18:c3:7f:59:a2:7e:29:c3:91:d4:
                    b1:ea:3c:64:b7:bf:65:9e:5b:20:e7:46:e0:87:d3:
                    6f:56:5f:54:c0:19:c9:bf:52:97:57:2b:5e:c9:fc:
                    9c:14:89:a3:b8:f5:f3:ea:12:f5:50:73:98:17:67:
                    0c:d3:2a:53:68:80:03:10:13:53:cf:4b:a2:0a:2a:
                    19:8d:65:f6:d5:3e:37:b3:60:4a:2a:ba:52:40:cc:
                    ab:5e:0b:5a:21:b2:cc:5c:74:60:b7:b5:87:2a:19:
                    91:71:84:c9:50:68:07:93:7d:67:5f:b0:cd:3d:0c:
                    4e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6B:BB:9F:9A:6D:8A:93:39:78:D3:A1:09:C9:14:E7:89:39:0E:44
            X509v3 Authority Key Identifier:
                keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/EGu7n5ptipM5eNOhCckU54k5DkQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:c1:ed:44:70:4e:76:ac:56:fb:94:7d:a0:4a:b0:f8:35:e3:
         1f:b8:4f:76:62:6f:a1:10:e1:c5:20:db:83:8e:7a:4f:df:3e:
         be:c2:31:32:bb:d7:08:b1:b2:c4:b3:1f:aa:f4:62:73:1c:f5:
         e9:0c:cb:8a:77:ae:c9:9f:86:f6:3d:de:fc:68:d3:ce:01:f9:
         09:38:5f:7e:18:cd:08:c0:98:27:0a:52:1b:f7:5b:eb:a3:d3:
         03:6b:19:67:70:50:f7:26:65:e7:cc:fc:1c:59:eb:40:d7:87:
         b2:30:0c:ae:04:2d:75:ef:24:a9:63:b1:25:d5:af:6b:79:a1:
         f5:95:11:6a:b3:19:4b:d1:4f:f0:3b:1a:13:14:3a:6a:2b:8f:
         1e:bc:65:d8:ad:5e:42:25:30:9a:8f:fd:37:cd:c5:14:ac:68:
         25:2d:09:cf:9a:f9:9c:2d:7d:16:91:7b:b2:88:34:9e:4f:0d:
         8d:99:7d:68:c0:a7:fb:19:1b:4b:51:b8:5c:41:0d:2e:e3:78:
         61:48:dd:a0:fa:89:aa:44:08:e2:33:2d:ca:39:02:08:40:9a:
         c6:0e:ed:56:fc:9c:3a:57:25:0e:e7:87:99:f1:51:01:0b:11:
         6d:ce:88:5a:a9:04:c0:3c:bb:bc:6c:5f:f7:08:67:92:df:8d:
         2d:72:7e:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIZ/C3Ro0NaD89Fi6J2b0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNjVkMzE0NDBiZjc1ZDI1YzYwNmY3OTE1YzIzNmNhNjE0
NDY0YTIwHhcNMjUwMTAyMDM0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDZiYmI5ZjlhNmQ4YTkzMzk3OGQzYTEwOWM5MTRlNzg5MzkwZTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCFzMW6KiOf0EytQMt/HCsf3Bj9c
1VhYStTw4fNUL3iGMy76Q3K+h6SFarGzmjekQbXQt4uOU79VY4Z5w5nxW7R9QKma
FLrDS9FHj5vhltR20G6Mv7a3l1ezA7EilOIujOKQn1TuacUfQRvpAj4SQtLt0wpM
bvj0UOpn0lmxZXXt1mKciDdFotzEwRjDf1mifinDkdSx6jxkt79lnlsg50bgh9Nv
Vl9UwBnJv1KXVyteyfycFImjuPXz6hL1UHOYF2cM0ypTaIADEBNTz0uiCioZjWX2
1T43s2BKKrpSQMyrXgtaIbLMXHRgt7WHKhmRcYTJUGgHk31nX7DNPQxOZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBBru5+abYqTOXjToQnJFOeJOQ5EMB8GA1UdIwQY
MBaAFOxl0xRAv3XSXGBveRXCNsphRGSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yYTZkZjUtODIzNi00MTJkLWFkNzkt
ZTI5NTg5ZTg5NjRhLzEvRUd1N241cHRpcE01ZU5PaENja1U1NGs1RGtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yYTZkZjUtODIzNi00MTJkLWFkNzktZTI5NTg5ZTg5NjRh
LzEvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVAhMA0G
CSqGSIb3DQEBCwUAA4IBAQBSwe1EcE52rFb7lH2gSrD4NeMfuE92Ym+hEOHFINuD
jnpP3z6+wjEyu9cIsbLEsx+q9GJzHPXpDMuKd67Jn4b2Pd78aNPOAfkJOF9+GM0I
wJgnClIb91vro9MDaxlncFD3JmXnzPwcWetA14eyMAyuBC117ySpY7El1a9reaH1
lRFqsxlL0U/wOxoTFDpqK48evGXYrV5CJTCaj/03zcUUrGglLQnPmvmcLX0WkXuy
iDSeTw2NmX1owKf7GRtLUbhcQQ0u43hhSN2g+omqRAjiMy3KOQIIQJrGDu1W/Jw6
VyUO54eZ8VEBCxFtzohaqQTAPLu8bF/3CGeS340tcn7n
-----END CERTIFICATE-----