Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/ZPoCpq3pmnhAPIwck7l7sD56f3g.roa
File:                     ZPoCpq3pmnhAPIwck7l7sD56f3g.roa (raw, json)
Hash identifier:          zMHDyTabQ6MFQ9QbuOgdVnq/gWPOmwSEqWlxMKx33/M=
Subject key identifier:   64:FA:02:A6:AD:E9:9A:78:40:3C:8C:1C:93:B9:7B:B0:3E:7A:7F:78
Certificate issuer:       /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial:       019427B61A9C09D672851B57CBA8CF18D6AD
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/ZPoCpq3pmnhAPIwck7l7sD56f3g.roa
Signing time:             Thu 02 Jan 2025 15:50:33 +0000
ROA not before:           Thu 02 Jan 2025 15:50:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199513
IP address blocks:        194.102.62.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:1a:9c:09:d6:72:85:1b:57:cb:a8:cf:18:d6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
        Validity
            Not Before: Jan  2 15:50:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=64fa02a6ade99a78403c8c1c93b97bb03e7a7f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c8:f4:5c:52:71:89:c9:88:40:d9:3e:e9:84:
                    56:48:41:2b:7e:a3:39:16:b9:56:b6:1b:ab:78:88:
                    04:79:eb:62:88:7e:9f:10:ab:67:58:2a:6d:31:30:
                    3d:39:09:52:b0:ea:6f:f0:5b:97:56:39:2b:3f:9e:
                    83:9c:ee:19:4d:7a:6b:3c:fc:b0:ee:1b:85:65:8e:
                    f4:3d:d1:67:e6:0c:40:4c:18:9c:57:a4:47:71:23:
                    22:2b:c3:2b:4e:79:32:88:e2:09:7f:6c:c4:04:5b:
                    7f:ce:9a:36:77:a7:6f:25:d0:5d:a1:8f:59:35:26:
                    f3:45:9b:54:f5:f5:ba:94:7c:ab:ae:2b:84:99:de:
                    c1:0e:59:ea:e1:15:ea:d1:fe:dd:88:22:2b:41:c8:
                    1b:6d:41:8c:13:70:ee:1a:10:ae:ce:78:f9:89:f5:
                    a9:c2:42:c9:77:79:93:a3:75:74:5b:09:f4:47:13:
                    a5:39:52:b1:79:aa:46:1b:d3:fb:c6:7a:4f:db:ea:
                    a2:53:b4:3e:03:cb:7d:17:54:a2:fa:b8:3f:77:57:
                    a4:fe:80:9f:d3:d7:23:66:31:b6:0c:34:30:1e:2d:
                    02:3a:6c:e9:56:91:ff:fb:27:cb:77:11:06:23:dc:
                    bf:0b:60:09:cd:d6:6f:8c:b1:aa:69:e8:38:a8:a4:
                    91:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FA:02:A6:AD:E9:9A:78:40:3C:8C:1C:93:B9:7B:B0:3E:7A:7F:78
            X509v3 Authority Key Identifier:
                keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/ZPoCpq3pmnhAPIwck7l7sD56f3g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.102.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:a9:63:f8:a0:ba:b2:bc:9f:d0:c3:fc:c9:f3:b3:ad:6c:a9:
         50:a4:e9:8f:d4:88:14:9d:61:be:7e:2b:0f:63:ea:d1:fb:4f:
         3a:51:bc:a5:a9:7b:a1:81:f0:31:fc:a2:c6:80:0d:de:1c:c2:
         c9:c5:7d:2f:36:65:bf:cc:54:61:72:f5:c2:84:f8:4d:75:5f:
         c3:ec:2b:b7:1a:34:1d:9d:cb:e1:34:28:db:b5:79:ad:a8:d3:
         a9:39:b8:38:27:52:4d:f2:a8:c0:99:6e:01:25:04:b6:e0:86:
         0a:b0:1e:52:a6:fc:86:7e:9f:cf:9c:65:5c:9a:d5:e8:de:9f:
         80:a8:9d:fd:10:70:ee:e6:2d:db:ce:1b:e9:f4:d4:ad:d0:fe:
         42:e1:e0:bd:a2:7a:63:b2:ff:02:eb:af:fc:69:33:ec:4c:1d:
         c5:e3:62:62:36:c4:0a:f8:0e:68:e6:fa:b3:b3:d8:f8:df:df:
         77:0c:35:84:26:73:95:ad:d9:4f:46:e7:3c:ea:03:d9:ad:34:
         1f:19:6c:11:dc:aa:20:9c:4f:2b:33:7e:43:ad:ed:ec:55:14:
         ef:e8:1d:bd:e8:70:cc:ab:29:8e:93:a6:ff:2d:d5:50:c4:ee:
         07:f9:d3:bc:89:67:fc:fb:d5:d7:93:2c:9b:49:1e:ab:10:38:
         dd:f0:b0:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnthqcCdZyhRtXy6jPGNatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZmZlZTI1MDUyYzBhYWJmNmNiMzcxZTNmMmUwNzZmNDRm
YzFjM2MwHhcNMjUwMTAyMTU1MDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGZhMDJhNmFkZTk5YTc4NDAzYzhjMWM5M2I5N2JiMDNlN2E3Zjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosj0XFJxicmIQNk+6YRWSEErfqM5
FrlWthureIgEeetiiH6fEKtnWCptMTA9OQlSsOpv8FuXVjkrP56DnO4ZTXprPPyw
7huFZY70PdFn5gxATBicV6RHcSMiK8MrTnkyiOIJf2zEBFt/zpo2d6dvJdBdoY9Z
NSbzRZtU9fW6lHyrriuEmd7BDlnq4RXq0f7diCIrQcgbbUGME3DuGhCuznj5ifWp
wkLJd3mTo3V0Wwn0RxOlOVKxeapGG9P7xnpP2+qiU7Q+A8t9F1Si+rg/d1ek/oCf
09cjZjG2DDQwHi0COmzpVpH/+yfLdxEGI9y/C2AJzdZvjLGqaeg4qKSRQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGT6Aqat6Zp4QDyMHJO5e7A+en94MB8GA1UdIwQY
MBaAFBf/7iUFLAqr9ss3Hj8uB29E/Bw8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wNDUyMjItNWFjZS00ZTdlLTk1YjIt
YTJlODgwZmQ1ODUwLzEvWlBvQ3BxM3BtbmhBUEl3Y2s3bDdzRDU2ZjNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wNDUyMjItNWFjZS00ZTdlLTk1YjItYTJlODgwZmQ1ODUw
LzEvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwmY+MA0G
CSqGSIb3DQEBCwUAA4IBAQCpqWP4oLqyvJ/Qw/zJ87OtbKlQpOmP1IgUnWG+fisP
Y+rR+086UbylqXuhgfAx/KLGgA3eHMLJxX0vNmW/zFRhcvXChPhNdV/D7Cu3GjQd
ncvhNCjbtXmtqNOpObg4J1JN8qjAmW4BJQS24IYKsB5SpvyGfp/PnGVcmtXo3p+A
qJ39EHDu5i3bzhvp9NSt0P5C4eC9onpjsv8C66/8aTPsTB3F42JiNsQK+A5o5vqz
s9j43993DDWEJnOVrdlPRuc86gPZrTQfGWwR3KognE8rM35Dre3sVRTv6B296HDM
qymOk6b/LdVQxO4H+dO8iWf8+9XXkyybSR6rEDjd8LC3
-----END CERTIFICATE-----