Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/Jj43cmNIoKGorEX7W3DPdxo2hSk.roa
File:                     Jj43cmNIoKGorEX7W3DPdxo2hSk.roa (raw, json)
Hash identifier:          6uSP/oLXyFgaUacApkUs1MYnVHrOc+Twr1X6HEXy/Ks=
Subject key identifier:   26:3E:37:72:63:48:A0:A1:A8:AC:45:FB:5B:70:CF:77:1A:36:85:29
Certificate issuer:       /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial:       0192DDAD1A88598173EE3DB71225807831D9
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/Jj43cmNIoKGorEX7W3DPdxo2hSk.roa
Signing time:             Wed 30 Oct 2024 13:46:02 +0000
ROA not before:           Wed 30 Oct 2024 13:46:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214345
IP address blocks:        2001:3a80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:dd:ad:1a:88:59:81:73:ee:3d:b7:12:25:80:78:31:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38049be801a136e387abc14498e486044d96278
        Validity
            Not Before: Oct 30 13:46:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=263e37726348a0a1a8ac45fb5b70cf771a368529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:80:e8:c3:5b:2d:a8:b5:12:30:40:4e:4f:32:
                    a8:1c:e2:1f:cd:5c:6a:18:fb:2e:df:33:3f:c7:cc:
                    ef:30:ef:ee:5f:56:6a:c1:a0:d4:4d:b0:6e:40:8a:
                    12:30:90:f3:58:fc:eb:52:9c:8f:89:e4:52:bb:27:
                    05:f4:c8:19:ad:3f:a1:0e:26:8f:c4:a6:c5:42:35:
                    e4:d8:57:10:b7:8e:9f:89:c7:98:f3:a0:57:93:73:
                    8d:7f:6b:e0:81:e8:12:45:b5:82:77:9a:4f:cf:c9:
                    e0:83:ed:d5:8d:e3:b6:b0:86:1c:28:19:6a:19:13:
                    90:9e:4c:a2:c4:28:91:8c:ce:79:68:7d:0b:6a:f4:
                    5c:a7:79:3c:b7:ee:63:58:09:72:a0:5c:7a:6a:3f:
                    ca:be:5d:d9:cb:1d:bd:8d:d5:1d:44:0a:89:7d:1b:
                    fa:9d:b3:d7:03:ee:4b:b8:ac:46:17:46:c7:c8:99:
                    a6:bc:75:07:c3:2c:5d:96:d0:97:fb:9d:53:fb:96:
                    1b:7f:d7:9e:0e:b6:0b:3b:49:5d:ae:5c:d3:92:a1:
                    ed:54:27:fa:d9:cc:98:4e:85:8f:8c:d3:73:64:1c:
                    5c:c3:02:be:29:16:33:34:29:b2:7c:7f:3d:18:49:
                    6a:f4:95:e3:68:bd:55:61:6e:70:d4:b5:b7:0b:6d:
                    07:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3E:37:72:63:48:A0:A1:A8:AC:45:FB:5B:70:CF:77:1A:36:85:29
            X509v3 Authority Key Identifier:
                keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/Jj43cmNIoKGorEX7W3DPdxo2hSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3a80::/29

    Signature Algorithm: sha256WithRSAEncryption
         7b:5c:9b:a0:04:14:31:c4:ef:d8:db:6d:d5:22:a5:0a:57:0a:
         b2:72:91:ef:33:92:15:3b:fb:1b:2b:19:72:6d:96:15:67:7b:
         78:80:37:2b:08:09:07:41:27:fe:86:52:ba:ef:4a:ea:1f:f1:
         90:23:48:68:91:f1:03:74:19:2a:69:7e:93:fd:28:25:0c:a4:
         a2:a5:0d:f0:ab:b6:80:ac:a4:63:4e:28:32:95:72:fc:6c:b8:
         ba:cf:32:97:87:a2:3e:59:d5:36:4f:81:a5:02:ad:5f:9d:67:
         dc:3d:88:f7:9e:7a:da:53:e8:9d:41:1a:26:5e:42:b9:3f:c0:
         14:6e:d5:e2:cd:11:79:a9:a0:46:4f:2e:d4:33:9c:70:0f:18:
         94:f5:2f:cf:15:e5:d1:ae:be:9f:9a:15:da:98:69:de:b3:bf:
         fb:2e:81:d7:79:ed:f4:8e:50:32:3a:4b:62:17:67:e2:ed:31:
         02:6d:57:97:f3:3e:b9:a4:d7:f2:32:61:c8:13:bf:79:2d:d4:
         40:a5:e8:81:68:4d:ca:68:27:8f:3f:4b:ed:f8:79:12:21:fc:
         0d:d1:04:ef:14:df:69:e1:a7:2e:34:3d:ce:29:64:b5:0d:ad:
         04:91:1a:29:8a:e9:d3:e4:1a:0b:5e:53:cf:85:26:10:ad:7d:
         6b:c9:9a:45
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZLdrRqIWYFz7j23EiWAeDHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzODA0OWJlODAxYTEzNmUzODdhYmMxNDQ5OGU0ODYwNDRk
OTYyNzgwHhcNMjQxMDMwMTM0NjAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjNlMzc3MjYzNDhhMGExYThhYzQ1ZmI1YjcwY2Y3NzFhMzY4NTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IDow1stqLUSMEBOTzKoHOIfzVxq
GPsu3zM/x8zvMO/uX1ZqwaDUTbBuQIoSMJDzWPzrUpyPieRSuycF9MgZrT+hDiaP
xKbFQjXk2FcQt46ficeY86BXk3ONf2vggegSRbWCd5pPz8ngg+3VjeO2sIYcKBlq
GROQnkyixCiRjM55aH0LavRcp3k8t+5jWAlyoFx6aj/Kvl3Zyx29jdUdRAqJfRv6
nbPXA+5LuKxGF0bHyJmmvHUHwyxdltCX+51T+5Ybf9eeDrYLO0ldrlzTkqHtVCf6
2cyYToWPjNNzZBxcwwK+KRYzNCmyfH89GElq9JXjaL1VYW5w1LW3C20HiQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCY+N3JjSKChqKxF+1twz3caNoUpMB8GA1UdIwQY
MBaAFPOASb6AGhNuOHq8FEmOSGBE2WJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kZWVkYjQtMjYyMC00NDFiLTg2MTYt
MjhmNGRhZDM3OGZjLzEvSmo0M2NtTklvS0dvckVYN1czRFBkeG8yaFNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9kZWVkYjQtMjYyMC00NDFiLTg2MTYtMjhmNGRhZDM3OGZj
LzEvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAE6gDAN
BgkqhkiG9w0BAQsFAAOCAQEAe1yboAQUMcTv2Ntt1SKlClcKsnKR7zOSFTv7GysZ
cm2WFWd7eIA3KwgJB0En/oZSuu9K6h/xkCNIaJHxA3QZKml+k/0oJQykoqUN8Ku2
gKykY04oMpVy/Gy4us8yl4eiPlnVNk+BpQKtX51n3D2I95562lPonUEaJl5CuT/A
FG7V4s0ReamgRk8u1DOccA8YlPUvzxXl0a6+n5oV2php3rO/+y6B13nt9I5QMjpL
Yhdn4u0xAm1Xl/M+uaTX8jJhyBO/eS3UQKXogWhNymgnjz9L7fh5EiH8DdEE7xTf
aeGnLjQ9zilktQ2tBJEaKYrp0+QaC15Tz4UmEK19a8maRQ==
-----END CERTIFICATE-----