Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/RvvULY1y4xBfF8ZuGzWFY0OKEEg.roa
File:                     RvvULY1y4xBfF8ZuGzWFY0OKEEg.roa (raw, json)
Hash identifier:          NY71LOvBCM5qGOh91dHK/WKKwDoM07O+dhz3A0gNPUc=
Subject key identifier:   46:FB:D4:2D:8D:72:E3:10:5F:17:C6:6E:1B:35:85:63:43:8A:10:48
Certificate issuer:       /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial:       01942067E6B647908EE832065313839480F7
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/RvvULY1y4xBfF8ZuGzWFY0OKEEg.roa
Signing time:             Wed 01 Jan 2025 05:47:47 +0000
ROA not before:           Wed 01 Jan 2025 05:47:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202914
IP address blocks:        103.37.180.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:e6:b6:47:90:8e:e8:32:06:53:13:83:94:80:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
        Validity
            Not Before: Jan  1 05:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=46fbd42d8d72e3105f17c66e1b358563438a1048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f9:b7:1f:d0:e9:84:36:2f:99:58:e5:21:f5:
                    a1:25:88:4c:0e:c9:90:e1:6b:82:63:98:0f:ac:6d:
                    4b:a0:46:48:38:dc:9c:d9:89:9d:f9:40:d7:0d:a1:
                    93:1b:32:c4:14:01:2e:2a:3d:3f:f9:13:ac:60:18:
                    95:c0:a1:1c:e2:f4:2a:a8:fc:95:82:f5:25:c8:a1:
                    aa:f5:47:56:db:ff:d7:3f:5e:bb:86:5b:55:61:fd:
                    8d:3c:a2:bf:a5:5d:6d:9e:28:c5:80:56:42:2b:fd:
                    20:7c:29:7c:3a:f4:7f:ef:b3:88:9f:ff:d6:37:44:
                    13:cb:3c:00:27:14:c0:44:9e:79:8b:a0:86:c4:56:
                    2f:ef:87:35:59:7f:a3:7e:fa:0b:71:36:e7:12:f9:
                    9f:f0:a3:b7:7e:67:da:f8:27:13:0c:f4:e9:48:4f:
                    0c:88:9d:2a:dc:ed:c0:a0:80:b4:5a:0c:2b:a8:fc:
                    13:e9:50:57:a7:4d:92:14:38:e1:10:15:56:0c:a9:
                    00:94:2e:ed:52:e0:b4:a1:4b:75:37:1c:c3:4f:f8:
                    1a:1d:3e:09:0b:ea:46:5c:38:29:a9:57:49:a5:66:
                    96:8e:f2:2d:c2:a3:e6:5b:4e:5c:8e:fc:20:62:b4:
                    7f:8b:9e:ff:15:c1:f9:ba:c2:52:59:56:53:72:fb:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FB:D4:2D:8D:72:E3:10:5F:17:C6:6E:1B:35:85:63:43:8A:10:48
            X509v3 Authority Key Identifier:
                keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/RvvULY1y4xBfF8ZuGzWFY0OKEEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:6d:83:56:40:e3:d2:33:d1:0f:52:ee:37:8d:0f:66:ed:47:
         b8:e3:d3:4e:8c:a5:71:68:5e:26:c6:24:12:ef:cb:42:a1:96:
         c9:5f:bc:91:ae:d8:01:37:53:a5:b2:97:0b:e7:63:f7:5c:75:
         50:cb:71:85:57:bd:2c:e2:7c:39:fb:0e:00:57:f7:3e:71:0c:
         e8:5c:a7:6a:a2:76:1b:e5:e4:99:69:e9:81:4c:cb:6a:fb:2b:
         3d:40:9d:65:54:e4:c7:35:82:00:44:4a:49:9e:91:2f:82:89:
         22:87:67:91:12:78:5e:34:41:08:5c:9b:11:06:13:76:34:55:
         cb:e0:d4:72:e8:cd:16:a9:80:1e:0f:c6:c9:c0:7b:05:3c:c1:
         bd:53:c2:9b:0e:f7:03:95:35:a4:15:e3:d3:b5:c2:f2:cc:0b:
         db:7e:3b:68:54:f4:ba:ad:2e:4c:de:d9:50:f4:e6:83:00:b1:
         f6:e1:d3:89:72:c1:e3:a3:a2:36:f4:1b:6f:bf:38:ba:0f:f3:
         8d:e3:94:72:d7:dd:b8:ea:8e:52:44:8e:78:3d:67:37:65:b1:
         a9:32:53:95:99:25:c0:e4:39:14:fd:f0:4b:a0:d7:28:0a:ed:
         ef:ed:2d:4b:be:be:ee:1f:c8:29:24:f9:8e:4e:17:2d:8a:83:
         3f:9d:0b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----