Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/nHRmCOgf4MDZq-VWKLaXfvZ-bz8.roa
File:                     nHRmCOgf4MDZq-VWKLaXfvZ-bz8.roa (raw, json)
Hash identifier:          5Mcf4NqGw75Ujcm8ujMV0dwvrhU39vCuPFd4mY9vPEw=
Subject key identifier:   9C:74:66:08:E8:1F:E0:C0:D9:AB:E5:56:28:B6:97:7E:F6:7E:6F:3F
Certificate issuer:       /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial:       01941F8C853BD076D6C27F7748FAF85D065E
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/nHRmCOgf4MDZq-VWKLaXfvZ-bz8.roa
Signing time:             Wed 01 Jan 2025 01:48:10 +0000
ROA not before:           Wed 01 Jan 2025 01:48:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208016
IP address blocks:        45.85.48.0/22 maxlen: 22
                          2a0e:b680::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:85:3b:d0:76:d6:c2:7f:77:48:fa:f8:5d:06:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
        Validity
            Not Before: Jan  1 01:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9c746608e81fe0c0d9abe55628b6977ef67e6f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:fe:62:1f:78:35:88:a1:76:8e:7d:e7:d0:
                    2e:57:38:2d:71:8c:77:2b:9a:9c:b8:1f:08:e7:fe:
                    aa:6f:95:16:95:9f:7a:ed:e7:25:2c:a5:73:51:ed:
                    f8:6b:83:d2:f6:73:6f:c4:d7:14:a3:27:3b:63:73:
                    d8:c2:02:63:09:78:79:7a:62:d0:5c:de:ad:5b:a8:
                    e5:3e:60:77:f1:60:c5:6f:18:f8:e3:2c:54:7d:81:
                    37:bf:41:74:f1:60:93:9b:7b:d4:6e:12:d2:45:11:
                    6f:80:22:64:57:35:55:50:49:c2:5e:10:b7:56:95:
                    91:89:6f:b8:6c:46:c6:c5:05:c2:55:6f:f2:6d:7c:
                    e9:9e:7a:65:ff:ed:18:84:df:72:4f:81:b2:48:d1:
                    e1:e7:62:62:75:5c:c1:6a:3f:e7:84:bb:7c:7b:ac:
                    a4:08:b8:10:48:1f:13:68:8a:91:59:20:2d:9a:1c:
                    10:99:07:0e:da:9c:78:a3:10:a3:fe:3e:f2:53:a3:
                    af:0e:4f:aa:33:9e:73:07:ba:d4:dc:c7:1a:a0:3a:
                    76:59:f0:fb:dd:bd:10:31:7a:96:80:66:43:ed:26:
                    f3:00:f0:33:85:e0:7c:7b:91:a7:2e:f7:e4:31:79:
                    3e:a0:f0:bf:4d:d2:0d:02:8d:c5:35:5e:48:3c:a0:
                    2f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:74:66:08:E8:1F:E0:C0:D9:AB:E5:56:28:B6:97:7E:F6:7E:6F:3F
            X509v3 Authority Key Identifier:
                keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/nHRmCOgf4MDZq-VWKLaXfvZ-bz8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.48.0/22
                IPv6:
                  2a0e:b680::/29

    Signature Algorithm: sha256WithRSAEncryption
         5a:be:a1:02:6a:95:6d:70:89:22:55:6a:1b:82:44:b7:20:d6:
         4e:6e:09:bc:29:2e:5f:cd:9d:f1:7a:4d:d8:3d:1e:a7:a4:cb:
         78:e2:6a:f2:cb:b8:c6:72:5c:5f:3f:89:ff:66:e6:39:8f:51:
         d5:f8:34:de:9f:bb:76:7f:9a:59:14:56:9d:6b:64:04:5c:6b:
         7b:d9:34:93:64:73:7a:1b:fe:2b:9f:75:bf:0f:3b:1d:da:8f:
         b7:e2:5f:1a:04:a6:c9:6b:82:f1:8b:8f:2a:f8:49:9f:cb:c8:
         34:37:8a:d0:91:aa:0b:80:f6:26:46:69:54:9e:4d:33:44:bd:
         28:00:d4:78:5b:dd:b4:3b:32:b2:79:ff:b6:3d:49:87:f9:9d:
         10:2a:54:24:c2:f5:64:73:bb:95:98:be:a5:62:a0:16:f2:54:
         e6:7b:0d:1a:b4:71:24:21:0b:fe:7b:b4:ab:bb:11:44:16:a1:
         a9:a3:82:fb:b8:b4:bb:90:27:b8:b8:13:f4:a3:86:06:d7:4e:
         4c:d3:e5:4e:d3:6b:d5:bb:32:34:97:ca:d7:30:a3:cc:95:f4:
         3a:63:68:25:4a:b4:e2:5b:7b:0c:3f:a5:11:95:13:da:d9:cd:
         b5:53:2e:d6:ae:c9:25:5b:69:4f:43:5c:34:1f:2f:bd:10:48:
         5e:d9:5a:ff
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQfjIU70HbWwn93SPr4XQZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmEyNjVjYThhZDcyNzNhOGExMzBhMTc2MzI4M2QyZmYx
YjRkZGEwHhcNMjUwMTAxMDE0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yzc0NjYwOGU4MWZlMGMwZDlhYmU1NTYyOGI2OTc3ZWY2N2U2ZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybT+Yh94NYihdo5959AuVzgtcYx3
K5qcuB8I5/6qb5UWlZ967eclLKVzUe34a4PS9nNvxNcUoyc7Y3PYwgJjCXh5emLQ
XN6tW6jlPmB38WDFbxj44yxUfYE3v0F08WCTm3vUbhLSRRFvgCJkVzVVUEnCXhC3
VpWRiW+4bEbGxQXCVW/ybXzpnnpl/+0YhN9yT4GySNHh52JidVzBaj/nhLt8e6yk
CLgQSB8TaIqRWSAtmhwQmQcO2px4oxCj/j7yU6OvDk+qM55zB7rU3McaoDp2WfD7
3b0QMXqWgGZD7SbzAPAzheB8e5GnLvfkMXk+oPC/TdINAo3FNV5IPKAvYQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJx0ZgjoH+DA2avlVii2l372fm8/MB8GA1UdIwQY
MBaAFMdqJlyorXJzqKEwoXYyg9L/G03aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wMmMyNTQtMzZiZi00YzhjLTk4ZDkt
N2U5ODM3YTkyMjhjLzEvbkhSbUNPZ2Y0TURacS1WV0tMYVhmdlotYno4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wMmMyNTQtMzZiZi00YzhjLTk4ZDktN2U5ODM3YTkyMjhj
LzEveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVUwMA0E
AgACMAcDBQMqDraAMA0GCSqGSIb3DQEBCwUAA4IBAQBavqECapVtcIkiVWobgkS3
INZObgm8KS5fzZ3xek3YPR6npMt44mryy7jGclxfP4n/ZuY5j1HV+DTen7t2f5pZ
FFada2QEXGt72TSTZHN6G/4rn3W/Dzsd2o+34l8aBKbJa4Lxi48q+Emfy8g0N4rQ
kaoLgPYmRmlUnk0zRL0oANR4W920OzKyef+2PUmH+Z0QKlQkwvVkc7uVmL6lYqAW
8lTmew0atHEkIQv+e7SruxFEFqGpo4L7uLS7kCe4uBP0o4YG105M0+VO02vVuzI0
l8rXMKPMlfQ6Y2glSrTiW3sMP6URlRPa2c21Uy7WrsklW2lPQ1w0Hy+9EEhe2Vr/
-----END CERTIFICATE-----