Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/m0urSftBhVugiQE6mFeNiCtZVI8.roa
File:                     m0urSftBhVugiQE6mFeNiCtZVI8.roa (raw, json)
Hash identifier:          xOqBMnBvPEbbfCmZX1QX9FuTGPEracGRpzNmhAwuxVM=
Subject key identifier:   9B:4B:AB:49:FB:41:85:5B:A0:89:01:3A:98:57:8D:88:2B:59:54:8F
Certificate issuer:       /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial:       0194221FEF74B3D2F8F8D00E38C6454C1946
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/m0urSftBhVugiQE6mFeNiCtZVI8.roa
Signing time:             Wed 01 Jan 2025 13:48:25 +0000
ROA not before:           Wed 01 Jan 2025 13:48:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57801
IP address blocks:        2a04:2b00:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:ef:74:b3:d2:f8:f8:d0:0e:38:c6:45:4c:19:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
        Validity
            Not Before: Jan  1 13:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9b4bab49fb41855ba089013a98578d882b59548f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:26:e7:a5:73:7a:46:4c:6e:f2:fe:b2:5f:3a:
                    d1:36:fb:1a:bb:17:8a:55:71:28:73:1a:8f:a0:4b:
                    dd:f9:34:d7:e3:95:fe:f6:cc:8d:41:ea:cc:58:d2:
                    75:aa:e4:e6:cd:0b:8f:85:ca:26:be:54:5e:3b:c8:
                    69:49:c7:f8:31:83:8b:35:a2:1b:07:4f:50:98:16:
                    fa:19:82:61:ed:79:35:27:01:c5:97:b2:52:d2:e9:
                    20:1b:79:ec:bd:e1:a2:91:ab:50:d8:bf:aa:6a:a5:
                    22:25:5f:84:c7:31:d3:64:d5:11:13:31:c0:3d:f2:
                    47:bd:4c:60:3d:7b:69:92:91:43:28:39:37:b1:a0:
                    5a:7b:24:23:ff:b5:7c:e1:c3:67:2a:66:72:73:fb:
                    09:6f:5a:9e:48:f3:36:d1:c9:d8:2e:c3:3f:0b:fa:
                    84:87:b0:71:ce:ca:3c:96:25:fb:e0:61:07:9f:67:
                    51:87:2c:81:c6:d5:c8:34:ea:80:8e:f2:78:c2:ed:
                    5b:15:93:a1:17:3e:93:58:40:de:ea:75:dc:89:b3:
                    b4:81:8e:43:97:10:07:77:7d:51:9b:b8:7a:f2:76:
                    1f:b7:b2:00:fd:34:e9:89:9b:21:37:af:a5:6b:8c:
                    e4:84:bc:6e:82:ef:aa:de:15:6e:ef:78:55:39:d3:
                    8e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4B:AB:49:FB:41:85:5B:A0:89:01:3A:98:57:8D:88:2B:59:54:8F
            X509v3 Authority Key Identifier:
                keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/m0urSftBhVugiQE6mFeNiCtZVI8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:2b00:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:c4:af:b2:8e:6b:7a:58:90:8b:c1:0f:ee:ec:7b:e9:78:ad:
         da:27:cb:75:57:1a:97:1d:51:df:35:06:16:9d:a5:01:90:dd:
         12:a0:18:c8:a8:13:71:d1:f5:a0:e8:d9:fb:ce:72:59:97:60:
         d3:36:1a:a7:d4:77:1f:99:39:51:86:91:cd:fc:ac:b4:91:26:
         2e:87:99:ba:62:48:9f:38:c4:d6:9c:0d:d9:b9:ea:3e:7c:85:
         20:02:6b:44:ac:5b:36:c1:65:3c:6d:ba:2c:1b:ac:d6:e1:74:
         7a:8c:17:b3:2f:52:57:64:bb:15:c9:39:01:de:6b:48:16:c8:
         1e:9a:96:8d:f7:c7:ec:00:50:e0:f7:1a:c2:83:e8:e0:fa:5f:
         9a:00:58:af:9e:7b:4a:69:e9:79:ce:42:c0:5a:67:30:16:a8:
         0e:67:5a:93:61:69:5d:03:38:50:80:e0:cc:47:12:aa:56:ee:
         ba:32:5a:38:88:98:2d:bf:a1:cd:fd:61:4d:9f:66:e7:27:e7:
         30:df:a2:76:42:ff:88:97:43:5c:fd:f0:47:58:6c:8c:d2:e4:
         18:18:f0:1c:30:ae:89:67:0d:70:71:6c:6c:85:76:56:f4:df:
         50:93:91:e6:a4:99:1a:bf:1a:cd:e0:9d:38:c9:e7:08:14:60:
         01:33:7f:55
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiH+90s9L4+NAOOMZFTBlGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3
ZGY4ZDMwHhcNMjUwMTAxMTM0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjRiYWI0OWZiNDE4NTViYTA4OTAxM2E5ODU3OGQ4ODJiNTk1NDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CbnpXN6Rkxu8v6yXzrRNvsauxeK
VXEocxqPoEvd+TTX45X+9syNQerMWNJ1quTmzQuPhcomvlReO8hpScf4MYOLNaIb
B09QmBb6GYJh7Xk1JwHFl7JS0ukgG3nsveGikatQ2L+qaqUiJV+ExzHTZNUREzHA
PfJHvUxgPXtpkpFDKDk3saBaeyQj/7V84cNnKmZyc/sJb1qeSPM20cnYLsM/C/qE
h7Bxzso8liX74GEHn2dRhyyBxtXINOqAjvJ4wu1bFZOhFz6TWEDe6nXcibO0gY5D
lxAHd31Rm7h68nYft7IA/TTpiZshN6+la4zkhLxugu+q3hVu73hVOdOOAQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJtLq0n7QYVboIkBOphXjYgrWVSPMB8GA1UdIwQY
MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt
MDUzOGU5NWYzZjEyLzEvbTB1clNmdEJoVnVnaVFFNm1GZU5pQ3RaVkk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy
LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgQrAAEA
MA0GCSqGSIb3DQEBCwUAA4IBAQBxxK+yjmt6WJCLwQ/u7HvpeK3aJ8t1VxqXHVHf
NQYWnaUBkN0SoBjIqBNx0fWg6Nn7znJZl2DTNhqn1HcfmTlRhpHN/Ky0kSYuh5m6
YkifOMTWnA3Zueo+fIUgAmtErFs2wWU8bbosG6zW4XR6jBezL1JXZLsVyTkB3mtI
FsgempaN98fsAFDg9xrCg+jg+l+aAFivnntKael5zkLAWmcwFqgOZ1qTYWldAzhQ
gODMRxKqVu66Mlo4iJgtv6HN/WFNn2bnJ+cw36J2Qv+Il0Nc/fBHWGyM0uQYGPAc
MK6JZw1wcWxshXZW9N9Qk5HmpJkavxrN4J04yecIFGABM39V
-----END CERTIFICATE-----