Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/3J6u_zYJ7Y8Ll0yocqGaWf6DfUg.roa
File:                     3J6u_zYJ7Y8Ll0yocqGaWf6DfUg.roa (raw, json)
Hash identifier:          ALMRzRIN48A1/6B9bYTNcvthe8nl2VpZFs9P6rEV/zs=
Subject key identifier:   DC:9E:AE:FF:36:09:ED:8F:0B:97:4C:A8:72:A1:9A:59:FE:83:7D:48
Certificate issuer:       /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial:       0194282618EE4553672F64C088D19A46FC42
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/3J6u_zYJ7Y8Ll0yocqGaWf6DfUg.roa
Signing time:             Thu 02 Jan 2025 17:52:52 +0000
ROA not before:           Thu 02 Jan 2025 17:52:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202431
IP address blocks:        195.90.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:26:18:ee:45:53:67:2f:64:c0:88:d1:9a:46:fc:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
        Validity
            Not Before: Jan  2 17:52:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dc9eaeff3609ed8f0b974ca872a19a59fe837d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:83:a7:6a:a1:12:4a:61:d3:24:ee:84:44:
                    5d:ff:78:e8:c3:2c:3e:80:c6:13:66:a0:43:36:99:
                    b6:f4:fc:d4:27:f2:58:f3:6a:08:88:39:c3:4a:63:
                    27:bb:ae:6b:8c:73:fc:38:f8:9b:f4:09:76:d9:cd:
                    46:45:6a:8e:eb:c7:88:01:3d:05:02:39:ee:79:b3:
                    15:88:a0:f8:2d:32:7b:0a:3f:72:56:d4:94:d5:bd:
                    b9:eb:cf:0b:c1:d7:33:d2:6c:4b:4f:c2:e4:16:fd:
                    f8:46:6b:09:eb:96:4a:0e:6f:5b:00:b8:ff:bd:96:
                    b3:d1:8a:dd:df:b9:d7:2a:95:d5:32:23:ae:15:30:
                    b8:c2:ce:12:54:de:89:09:74:08:20:09:58:00:42:
                    b4:74:82:80:60:1c:8f:5c:a2:5e:15:aa:e6:64:bc:
                    a7:56:c4:59:b2:ab:f6:7e:28:5a:1c:58:ca:e9:e5:
                    1a:d9:26:c2:7f:50:a2:26:04:5f:d8:f7:6a:ef:ec:
                    b9:ef:de:3e:ef:31:df:24:9b:02:c3:9e:71:12:d5:
                    f4:74:11:ee:73:64:c1:2c:74:32:cd:72:9a:64:3f:
                    78:cd:bb:a9:a2:b5:f2:ce:c8:9f:0b:85:59:51:49:
                    88:50:0b:1f:49:9b:f0:20:b8:89:6c:64:ff:04:ed:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9E:AE:FF:36:09:ED:8F:0B:97:4C:A8:72:A1:9A:59:FE:83:7D:48
            X509v3 Authority Key Identifier:
                keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/3J6u_zYJ7Y8Ll0yocqGaWf6DfUg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.90.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:1d:4d:1b:93:46:ee:be:c4:e5:74:7a:bb:40:c8:51:41:31:
         ba:80:ba:dc:1f:18:69:ba:90:9b:de:c4:0d:18:ef:10:93:2a:
         d1:3b:84:8c:7c:e6:0f:e6:cd:da:45:58:90:db:af:df:e1:09:
         2d:51:d2:f5:b2:6f:85:85:c6:60:b7:e3:8e:7b:7e:48:c0:0b:
         52:a0:f3:f1:97:74:41:f1:12:55:ef:f2:c5:bb:b0:5b:83:7b:
         ed:c1:35:10:cb:d1:1e:f2:62:96:3a:41:42:d6:a6:6b:e3:f1:
         78:8f:41:2b:32:7a:86:15:60:71:f6:f2:49:6c:2f:50:8f:5f:
         df:99:a1:ad:a5:c2:84:ab:c5:21:b9:9d:d8:84:3e:0e:f1:86:
         3e:86:37:9a:b3:b9:97:9d:4d:69:b5:56:f3:1d:7d:3d:24:d6:
         00:7c:12:f6:76:46:97:64:8f:3f:4f:ed:50:0a:c1:09:90:e8:
         97:23:81:93:c7:1b:4d:0b:c0:f6:f4:26:c1:87:63:f9:73:44:
         98:72:68:0b:85:ad:e1:3d:a6:35:88:8d:db:e4:d9:f7:9d:11:
         8e:91:a0:c2:e1:1e:e4:a0:43:96:51:c5:20:78:f4:57:75:85:
         9f:fd:5d:62:28:5b:97:2f:bc:ba:90:e4:7b:c1:bb:ba:59:9d:
         ba:47:de:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJhjuRVNnL2TAiNGaRvxCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzZhZTA5YWIxYmM5NGFjZTgzZmE2ZmQzNmFjNTIyODY3
YjkyZWEwHhcNMjUwMTAyMTc1MjUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzllYWVmZjM2MDllZDhmMGI5NzRjYTg3MmExOWE1OWZlODM3ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz72Dp2qhEkph0yTuhERd/3jowyw+
gMYTZqBDNpm29PzUJ/JY82oIiDnDSmMnu65rjHP8OPib9Al22c1GRWqO68eIAT0F
AjnuebMViKD4LTJ7Cj9yVtSU1b25688Lwdcz0mxLT8LkFv34RmsJ65ZKDm9bALj/
vZaz0Yrd37nXKpXVMiOuFTC4ws4SVN6JCXQIIAlYAEK0dIKAYByPXKJeFarmZLyn
VsRZsqv2fihaHFjK6eUa2SbCf1CiJgRf2Pdq7+y5794+7zHfJJsCw55xEtX0dBHu
c2TBLHQyzXKaZD94zbuporXyzsifC4VZUUmIUAsfSZvwILiJbGT/BO1mgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNyerv82Ce2PC5dMqHKhmln+g31IMB8GA1UdIwQY
MBaAFNd2rgmrG8lKzoP6b9NqxSKGe5LqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNhdUNhc2J5VXJPZ19wdjAyckZJb1o3a3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYTA5YmItMDFkZS00YmU1LWJjZTEt
OTA4NjQ4YTIwYmM4LzEvM0o2dV96WUo3WThMbDB5b2NxR2FXZjZEZlVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYTA5YmItMDFkZS00YmU1LWJjZTEtOTA4NjQ4YTIwYmM4
LzEvMTNhdUNhc2J5VXJPZ19wdjAyckZJb1o3a3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1pmMA0G
CSqGSIb3DQEBCwUAA4IBAQBEHU0bk0buvsTldHq7QMhRQTG6gLrcHxhpupCb3sQN
GO8QkyrRO4SMfOYP5s3aRViQ26/f4QktUdL1sm+FhcZgt+OOe35IwAtSoPPxl3RB
8RJV7/LFu7Bbg3vtwTUQy9Ee8mKWOkFC1qZr4/F4j0ErMnqGFWBx9vJJbC9Qj1/f
maGtpcKEq8UhuZ3YhD4O8YY+hjeas7mXnU1ptVbzHX09JNYAfBL2dkaXZI8/T+1Q
CsEJkOiXI4GTxxtNC8D29CbBh2P5c0SYcmgLha3hPaY1iI3b5Nn3nRGOkaDC4R7k
oEOWUcUgePRXdYWf/V1iKFuXL7y6kOR7wbu6WZ26R95f
-----END CERTIFICATE-----