Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/vgFKzLdkEw_QXwcykxlgfUNNuHY.roa
File:                     vgFKzLdkEw_QXwcykxlgfUNNuHY.roa (raw, json)
Hash identifier:          fW4NvvBno3EJoszjcJQGXIPYul84FTLzxyOKEefSivA=
Subject key identifier:   BE:01:4A:CC:B7:64:13:0F:D0:5F:07:32:93:19:60:7D:43:4D:B8:76
Certificate issuer:       /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial:       0195F11AA3825F2F64932339A3F9A27E8E75
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/vgFKzLdkEw_QXwcykxlgfUNNuHY.roa
Signing time:             Tue 01 Apr 2025 11:26:49 +0000
ROA not before:           Tue 01 Apr 2025 11:26:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214415
IP address blocks:        2a13:5947:134::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f1:1a:a3:82:5f:2f:64:93:23:39:a3:f9:a2:7e:8e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
        Validity
            Not Before: Apr  1 11:26:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=be014accb764130fd05f07329319607d434db876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:78:47:dc:81:79:e9:2a:8b:5d:7f:30:01:
                    7d:cc:99:d8:95:7a:28:f0:16:27:3a:84:6e:99:1b:
                    b2:ce:a1:d0:0d:fa:d9:88:9d:0d:7b:91:94:2c:f1:
                    97:0b:8d:bb:93:27:45:6b:60:cc:a0:d3:a7:d5:d6:
                    ba:c8:46:53:a3:63:c3:23:6f:76:27:4d:83:9e:c3:
                    d0:fd:3f:8a:49:ee:cf:03:63:43:23:ec:c8:60:cf:
                    e1:a0:18:4f:93:2d:47:90:e1:d4:69:2e:f1:ae:17:
                    9f:74:e3:93:86:4a:67:d3:5a:fb:db:47:42:89:6b:
                    f6:70:a0:a4:11:57:13:3e:c3:8e:ed:dc:ec:da:18:
                    e1:2f:c6:37:df:83:10:1f:6d:b1:07:5a:5b:cd:4a:
                    02:92:b2:a7:3a:d8:81:7d:ae:d3:91:10:bf:4a:e5:
                    fc:f9:3f:8f:37:d8:d1:79:67:0a:f6:23:99:1a:c9:
                    bb:5e:07:31:be:32:ba:a1:f1:c0:11:3c:37:ab:54:
                    70:52:2c:4e:b9:26:df:ce:09:be:c3:66:06:d4:89:
                    38:6f:ea:80:3b:df:8f:c3:cf:1c:67:5a:37:85:ca:
                    06:1e:61:39:65:81:9e:65:1d:82:ef:f4:3b:54:52:
                    19:6f:25:56:c8:2f:04:aa:bf:7a:b7:4e:18:9d:84:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:01:4A:CC:B7:64:13:0F:D0:5F:07:32:93:19:60:7D:43:4D:B8:76
            X509v3 Authority Key Identifier:
                keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/vgFKzLdkEw_QXwcykxlgfUNNuHY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:5947:134::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:5b:80:bc:88:23:2a:0a:cb:a8:ed:63:36:2c:41:5d:e8:c2:
         d7:2f:80:6d:fc:3f:67:76:fe:9e:9e:a7:9b:67:80:1c:07:f0:
         32:f6:f4:ac:49:ac:15:f3:a0:ad:eb:01:07:5a:2a:19:46:4e:
         03:1b:7d:3d:c0:c2:57:dc:ca:bc:9b:92:95:1a:07:38:dd:3f:
         df:9b:8d:90:00:d7:7f:05:01:b7:19:9b:95:43:c1:29:5b:c9:
         65:f1:44:c4:48:2b:4c:52:c5:fd:cd:df:d7:a1:2a:fc:da:df:
         8c:6a:e5:39:02:7a:ee:11:85:6a:c9:c2:73:9f:1f:52:3a:aa:
         a3:ad:ad:1f:da:01:0a:27:c6:11:d2:6c:1b:72:e4:2a:76:19:
         b6:20:f0:ed:13:0f:d6:d7:80:d9:a1:af:23:51:b5:53:b9:8e:
         51:28:9d:3e:d8:e3:51:7d:ab:f4:6b:34:55:be:21:8f:25:7e:
         9d:e6:a0:3a:ce:55:f5:dd:de:72:40:20:dc:16:09:16:b2:11:
         48:29:c9:d3:2f:dc:33:ba:e8:83:41:55:6a:17:67:dd:62:a7:
         51:f5:21:e6:da:4b:44:13:4f:aa:65:b4:e9:69:e9:7b:c4:48:
         a7:e8:05:8e:27:10:12:00:db:47:4e:06:b7:0a:fe:fa:2f:36:
         c8:97:64:8c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZXxGqOCXy9kkyM5o/mifo51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZTI2NTMxNzljYWZlNWZmNjY1MWM2MDU4YjY3YWQyZDJj
ODQ4NWUwHhcNMjUwNDAxMTEyNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTAxNGFjY2I3NjQxMzBmZDA1ZjA3MzI5MzE5NjA3ZDQzNGRiODc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Eh4R9yBeekqi11/MAF9zJnYlXoo
8BYnOoRumRuyzqHQDfrZiJ0Ne5GULPGXC427kydFa2DMoNOn1da6yEZTo2PDI292
J02DnsPQ/T+KSe7PA2NDI+zIYM/hoBhPky1HkOHUaS7xrhefdOOThkpn01r720dC
iWv2cKCkEVcTPsOO7dzs2hjhL8Y334MQH22xB1pbzUoCkrKnOtiBfa7TkRC/SuX8
+T+PN9jReWcK9iOZGsm7XgcxvjK6ofHAETw3q1RwUixOuSbfzgm+w2YG1Ik4b+qA
O9+Pw88cZ1o3hcoGHmE5ZYGeZR2C7/Q7VFIZbyVWyC8Eqr96t04YnYSF1QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL4BSsy3ZBMP0F8HMpMZYH1DTbh2MB8GA1UdIwQY
MBaAFOriZTF5yv5f9mUcYFi2etLSyEheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnVKbE1YbktfbF8yWlJ4Z1dMWjYwdExJU0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xOWU5YzUtODJlMi00MzhiLWEwZTkt
OTkyZDc5N2Y0YmJiLzEvdmdGS3pMZGtFd19RWHdjeWt4bGdmVU5OdUhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xOWU5YzUtODJlMi00MzhiLWEwZTktOTkyZDc5N2Y0YmJi
LzEvNnVKbE1YbktfbF8yWlJ4Z1dMWjYwdExJU0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhNZRwE0
MA0GCSqGSIb3DQEBCwUAA4IBAQB1W4C8iCMqCsuo7WM2LEFd6MLXL4Bt/D9ndv6e
nqebZ4AcB/Ay9vSsSawV86Ct6wEHWioZRk4DG309wMJX3Mq8m5KVGgc43T/fm42Q
ANd/BQG3GZuVQ8EpW8ll8UTESCtMUsX9zd/XoSr82t+MauU5AnruEYVqycJznx9S
Oqqjra0f2gEKJ8YR0mwbcuQqdhm2IPDtEw/W14DZoa8jUbVTuY5RKJ0+2ONRfav0
azRVviGPJX6d5qA6zlX13d5yQCDcFgkWshFIKcnTL9wzuuiDQVVqF2fdYqdR9SHm
2ktEE0+qZbTpael7xEin6AWOJxASANtHTga3Cv76LzbIl2SM
-----END CERTIFICATE-----