Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/cOfIzPHzxzO1k9-eyVc6POQcSq8.roa
File:                     cOfIzPHzxzO1k9-eyVc6POQcSq8.roa (raw, json)
Hash identifier:          p+iWrAPwc3HN52EdbThkLHZjd5jV8Cs8TQ72IX/IMH4=
Subject key identifier:   70:E7:C8:CC:F1:F3:C7:33:B5:93:DF:9E:C9:57:3A:3C:E4:1C:4A:AF
Certificate issuer:       /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial:       018CC4930C38F3FF44D4E79F83FB81E1AEA9
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/cOfIzPHzxzO1k9-eyVc6POQcSq8.roa
Signing time:             Mon 01 Jan 2024 10:30:20 +0000
ROA not before:           Mon 01 Jan 2024 10:30:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199216
IP address blocks:        2a01:190:15ec::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:0c:38:f3:ff:44:d4:e7:9f:83:fb:81:e1:ae:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
        Validity
            Not Before: Jan  1 10:30:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=70e7c8ccf1f3c733b593df9ec9573a3ce41c4aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:47:26:d8:a1:89:3d:dd:3c:89:05:80:3e:
                    33:40:ee:2f:5a:94:53:46:e6:c2:8d:b3:a8:77:bb:
                    d3:64:55:41:7c:6a:f9:31:bd:a0:75:77:4c:83:7a:
                    17:29:fb:ec:d1:5b:7d:b0:69:05:0b:2a:e5:57:29:
                    1a:fb:1f:20:2b:19:38:80:3e:de:fd:fc:ac:22:50:
                    be:b5:d0:79:e3:7e:55:eb:7f:3c:df:9e:b0:b9:49:
                    ab:d4:7a:20:70:2e:80:de:4c:a0:fe:f4:04:53:a5:
                    11:6e:e4:74:a3:b2:2d:73:ca:94:27:87:8a:70:2f:
                    2c:e3:d5:d4:93:9a:d8:a1:25:58:ab:8a:9e:1a:36:
                    d1:51:59:dd:a0:8b:5a:5e:96:d1:63:5f:f7:5f:38:
                    56:dd:8c:87:bf:95:93:18:d3:60:45:00:fe:ce:5b:
                    8e:04:3a:91:ff:16:09:30:21:b4:8a:4b:e7:a5:8a:
                    d0:c2:c9:fb:e6:53:94:a1:c4:83:3d:6d:49:8b:f2:
                    eb:a8:bd:ab:ce:fe:08:38:93:e2:59:07:9f:41:ca:
                    8d:c0:fa:84:c9:1c:6a:d6:04:a6:e7:71:5e:e0:4e:
                    65:5b:1f:59:85:69:2b:a5:9e:06:ad:6e:b3:87:f8:
                    dc:a4:97:25:99:a5:ea:b8:4c:33:2e:c6:4a:a4:11:
                    3a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E7:C8:CC:F1:F3:C7:33:B5:93:DF:9E:C9:57:3A:3C:E4:1C:4A:AF
            X509v3 Authority Key Identifier:
                keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/cOfIzPHzxzO1k9-eyVc6POQcSq8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:190:15ec::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:e3:d5:13:06:e0:79:c5:87:d9:14:03:68:97:df:51:4f:82:
         e0:74:1f:10:4a:33:3f:f0:8a:f7:74:14:19:46:54:7c:f2:4a:
         93:47:9c:d6:37:1e:13:63:42:d0:af:7a:b6:6e:76:e0:c9:0d:
         20:28:bc:34:f2:16:81:bf:f9:4a:c9:b1:50:e4:d0:e6:95:16:
         50:22:80:5b:a2:c9:40:ad:01:a0:2e:28:4d:e7:a1:b2:37:ba:
         35:bc:02:07:8b:40:f8:65:5a:92:46:33:57:21:0c:a4:88:1c:
         f6:ec:1a:cb:44:66:d1:09:24:17:0c:26:02:b9:52:96:4b:0d:
         0d:fd:9c:f5:90:ff:9e:8d:93:4e:1a:1a:bf:ed:41:b3:5f:57:
         0e:43:3e:a9:42:83:af:79:66:47:5f:9a:57:11:e8:9c:29:26:
         77:1d:b4:22:23:7e:3f:83:7d:e5:2f:43:56:4a:bb:3b:4c:c5:
         b1:ad:d9:67:2c:0c:d4:d4:75:1e:1d:ad:84:86:82:5b:e9:25:
         82:80:b2:f9:ab:28:79:60:8f:62:69:0e:c0:85:47:a9:58:9c:
         b7:ef:03:82:ba:13:a4:29:66:02:92:f8:77:dc:53:ce:87:33:
         66:07:e3:16:be:d1:b3:a3:88:26:2c:b7:eb:5e:6e:d7:e4:7a:
         4f:c0:e4:7c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzEkww48/9E1Oefg/uB4a6pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw
YjQ1MDYwHhcNMjQwMTAxMTAzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGU3YzhjY2YxZjNjNzMzYjU5M2RmOWVjOTU3M2EzY2U0MWM0YWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm9HJtihiT3dPIkFgD4zQO4vWpRT
RubCjbOod7vTZFVBfGr5Mb2gdXdMg3oXKfvs0Vt9sGkFCyrlVyka+x8gKxk4gD7e
/fysIlC+tdB5435V6388356wuUmr1HogcC6A3kyg/vQEU6URbuR0o7Itc8qUJ4eK
cC8s49XUk5rYoSVYq4qeGjbRUVndoItaXpbRY1/3XzhW3YyHv5WTGNNgRQD+zluO
BDqR/xYJMCG0ikvnpYrQwsn75lOUocSDPW1Ji/LrqL2rzv4IOJPiWQefQcqNwPqE
yRxq1gSm53Fe4E5lWx9ZhWkrpZ4GrW6zh/jcpJclmaXquEwzLsZKpBE6+QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHDnyMzx88cztZPfnslXOjzkHEqvMB8GA1UdIwQY
MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt
OGVlYjc1N2NmNTQ1LzEvY09mSXpQSHp4ek8xazktZXlWYzZQT1FjU3E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1
LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEBkBXs
MA0GCSqGSIb3DQEBCwUAA4IBAQCz49UTBuB5xYfZFANol99RT4LgdB8QSjM/8Ir3
dBQZRlR88kqTR5zWNx4TY0LQr3q2bnbgyQ0gKLw08haBv/lKybFQ5NDmlRZQIoBb
oslArQGgLihN56GyN7o1vAIHi0D4ZVqSRjNXIQykiBz27BrLRGbRCSQXDCYCuVKW
Sw0N/Zz1kP+ejZNOGhq/7UGzX1cOQz6pQoOveWZHX5pXEeicKSZ3HbQiI34/g33l
L0NWSrs7TMWxrdlnLAzU1HUeHa2EhoJb6SWCgLL5qyh5YI9iaQ7AhUepWJy37wOC
uhOkKWYCkvh33FPOhzNmB+MWvtGzo4gmLLfrXm7X5HpPwOR8
-----END CERTIFICATE-----