Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/8JnpLlF6ouYCq_pQniNXbCodhsg.roa
File:                     8JnpLlF6ouYCq_pQniNXbCodhsg.roa (raw, json)
Hash identifier:          3w9gQ6ISRWOwFH7sOq0mD8XYTAeUJvnIkcQX2VgiAHE=
Subject key identifier:   F0:99:E9:2E:51:7A:A2:E6:02:AB:FA:50:9E:23:57:6C:2A:1D:86:C8
Certificate issuer:       /CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Certificate serial:       019420682BCAE3258F1AF0831A939BEDB0AD
Authority key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/8JnpLlF6ouYCq_pQniNXbCodhsg.roa
Signing time:             Wed 01 Jan 2025 05:48:05 +0000
ROA not before:           Wed 01 Jan 2025 05:48:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15435
IP address blocks:        2001:67c:2e64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:2b:ca:e3:25:8f:1a:f0:83:1a:93:9b:ed:b0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
        Validity
            Not Before: Jan  1 05:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f099e92e517aa2e602abfa509e23576c2a1d86c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:b6:74:49:9f:c0:fc:20:b2:71:d6:15:9a:
                    e2:4b:d8:fa:94:da:d0:31:48:4c:95:20:a4:27:3d:
                    d5:92:99:50:b1:fd:46:13:46:36:61:f0:b7:31:63:
                    da:0e:1a:70:95:8e:31:81:b7:f7:ce:50:90:92:37:
                    d3:97:cb:cc:bf:3d:e4:8b:59:e6:da:00:bc:99:b4:
                    f2:fe:aa:86:76:c1:f1:bf:5f:93:a2:93:24:2b:43:
                    e0:5a:01:16:c2:b1:2e:dc:0f:28:28:04:81:bb:bf:
                    94:b9:0e:ed:02:e9:c2:29:4e:92:6c:d7:df:65:a1:
                    cf:fe:54:cb:a5:22:3a:2c:35:62:c7:76:6a:b6:b8:
                    dc:15:a8:4c:ac:ea:5f:16:75:ff:2c:47:a7:3f:60:
                    2c:2b:02:1d:d9:0c:16:bf:b6:1d:7b:10:fd:7d:91:
                    af:60:89:0d:b0:d3:9c:56:e6:ce:3a:ab:09:99:a1:
                    6d:c2:a1:53:cc:b6:46:2e:de:e0:19:4f:76:91:ec:
                    14:00:f5:68:90:d5:af:76:94:15:96:b5:5a:77:8a:
                    a7:c8:af:61:cc:22:f1:1a:13:3f:75:c6:ab:f5:bb:
                    fd:0c:46:7a:96:67:5e:01:31:b5:5b:f6:32:0e:37:
                    ad:8e:aa:00:06:6a:b3:4a:3e:ba:2b:db:b2:94:4b:
                    47:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:99:E9:2E:51:7A:A2:E6:02:AB:FA:50:9E:23:57:6C:2A:1D:86:C8
            X509v3 Authority Key Identifier:
                keyid:4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/8JnpLlF6ouYCq_pQniNXbCodhsg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2e64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:f6:28:5b:4e:01:5b:f9:e7:4a:b7:4e:e8:67:8e:42:6a:
         45:f2:a1:dc:a4:ef:d4:3d:c2:32:8f:8b:97:24:78:37:f2:d4:
         49:aa:50:e4:ae:af:b5:32:7e:d4:9a:c4:06:63:d6:69:c1:f1:
         87:18:4b:a7:2c:e8:c4:14:09:fa:3f:a4:ee:d3:c0:fd:d9:1d:
         b7:10:81:c9:f8:f9:59:a5:9c:10:0c:91:f4:1f:14:63:c8:fc:
         2e:37:a0:3b:53:0e:35:31:9f:e5:34:8a:7d:b1:10:48:3d:2d:
         f8:5e:89:b4:83:17:e7:6f:7c:08:10:60:db:80:94:28:7f:11:
         33:e5:15:bb:3b:e6:e2:0d:1e:4b:ae:7f:34:f3:29:f9:0c:48:
         95:2b:25:f5:45:f8:e0:ae:d9:44:9d:76:50:27:1f:d3:3d:c9:
         09:30:e4:40:18:07:54:f2:23:d3:7c:3c:9c:96:e7:ea:86:61:
         a7:f2:7b:ce:d2:e2:b7:64:df:42:6e:89:92:d4:c7:76:cd:d6:
         85:f4:1a:6c:12:7a:9b:1b:ba:c0:87:aa:28:e4:4e:a8:cb:c0:
         be:4f:5b:ce:b4:aa:70:b8:4a:a2:c8:fe:30:98:d7:5b:a5:c7:
         a1:be:7a:27:d7:7d:7e:f1:46:72:0d:9a:c4:05:f4:07:bd:22:
         71:3d:e1:af
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQgaCvK4yWPGvCDGpOb7bCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZTJkYzJjMWM5Mzg0N2JmOTc5ZjliMDEwZWRjNGNkYTg0
OWY0ZjgwHhcNMjUwMTAxMDU0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDk5ZTkyZTUxN2FhMmU2MDJhYmZhNTA5ZTIzNTc2YzJhMWQ4NmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRS2dEmfwPwgsnHWFZriS9j6lNrQ
MUhMlSCkJz3VkplQsf1GE0Y2YfC3MWPaDhpwlY4xgbf3zlCQkjfTl8vMvz3ki1nm
2gC8mbTy/qqGdsHxv1+TopMkK0PgWgEWwrEu3A8oKASBu7+UuQ7tAunCKU6SbNff
ZaHP/lTLpSI6LDVix3ZqtrjcFahMrOpfFnX/LEenP2AsKwId2QwWv7YdexD9fZGv
YIkNsNOcVubOOqsJmaFtwqFTzLZGLt7gGU92kewUAPVokNWvdpQVlrVad4qnyK9h
zCLxGhM/dcar9bv9DEZ6lmdeATG1W/YyDjetjqoABmqzSj66K9uylEtHhwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPCZ6S5ReqLmAqv6UJ4jV2wqHYbIMB8GA1UdIwQY
MBaAFE3i3Cwck4R7+Xn5sBDtxM2oSfT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGVMY0xCeVRoSHY1ZWZtd0VPM0V6YWhKOVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yN2UxY2EtZTYxZi00ZThjLWFkOWMt
MTQ1YzM2ZTM4Mjc2LzEvOEpucExsRjZvdVlDcV9wUW5pTlhiQ29kaHNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yN2UxY2EtZTYxZi00ZThjLWFkOWMtMTQ1YzM2ZTM4Mjc2
LzEvVGVMY0xCeVRoSHY1ZWZtd0VPM0V6YWhKOVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC5k
MA0GCSqGSIb3DQEBCwUAA4IBAQCd6vYoW04BW/nnSrdO6GeOQmpF8qHcpO/UPcIy
j4uXJHg38tRJqlDkrq+1Mn7UmsQGY9ZpwfGHGEunLOjEFAn6P6Tu08D92R23EIHJ
+PlZpZwQDJH0HxRjyPwuN6A7Uw41MZ/lNIp9sRBIPS34Xom0gxfnb3wIEGDbgJQo
fxEz5RW7O+biDR5Lrn808yn5DEiVKyX1RfjgrtlEnXZQJx/TPckJMORAGAdU8iPT
fDyclufqhmGn8nvO0uK3ZN9CbomS1Md2zdaF9BpsEnqbG7rAh6oo5E6oy8C+T1vO
tKpwuEqiyP4wmNdbpcehvnon131+8UZyDZrEBfQHvSJxPeGv
-----END CERTIFICATE-----