Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/C8PR4XXWsjpP8PHYuoN78zoE9nY.roa
File:                     C8PR4XXWsjpP8PHYuoN78zoE9nY.roa (raw, json)
Hash identifier:          uu2Jn3Slz9u+yGZ22j4LqOkp9lCOWyyfMINckydLJ3E=
Subject key identifier:   0B:C3:D1:E1:75:D6:B2:3A:4F:F0:F1:D8:BA:83:7B:F3:3A:04:F6:76
Certificate issuer:       /CN=4d946f4df2237491a68dfa407be41fae84bbda66
Certificate serial:       0194258FC4FFA3837E023D1B4CCFF3501169
Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/C8PR4XXWsjpP8PHYuoN78zoE9nY.roa
Signing time:             Thu 02 Jan 2025 05:49:26 +0000
ROA not before:           Thu 02 Jan 2025 05:49:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210729
IP address blocks:        2001:67c:1bc8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:c4:ff:a3:83:7e:02:3d:1b:4c:cf:f3:50:11:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66
        Validity
            Not Before: Jan  2 05:49:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0bc3d1e175d6b23a4ff0f1d8ba837bf33a04f676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:40:96:ce:d4:f3:f4:f8:0b:68:a1:64:67:a7:
                    e5:fe:c3:d7:67:65:80:49:16:22:22:1f:74:5e:6f:
                    5a:cc:4b:92:c6:d5:74:fc:ef:5d:1b:8f:45:3a:3f:
                    55:1a:00:69:e5:d5:43:30:9c:3a:14:cf:46:91:70:
                    7f:04:ec:82:b4:b3:56:b8:01:ee:e3:91:f1:ca:10:
                    37:85:a3:3a:fd:28:a2:4b:04:16:08:11:b3:c5:75:
                    90:93:13:34:23:36:65:d8:47:a2:6f:90:c7:5b:f2:
                    5b:97:4a:31:e0:8f:c9:53:7a:d3:cd:2c:de:25:a8:
                    f1:2d:49:4e:4b:2d:2f:4b:11:5b:80:73:36:fe:de:
                    64:4c:0c:1a:25:42:d1:c5:cb:9f:f8:59:09:6a:b2:
                    80:3f:e1:f2:23:a4:25:85:e2:3c:a7:a4:e6:c2:8f:
                    7b:5d:36:ab:8d:4d:9d:04:93:7e:05:f8:fa:7f:83:
                    c2:36:3b:9b:4f:12:a9:92:22:79:55:9c:8e:31:6b:
                    94:38:eb:9b:ea:cb:1c:03:90:5b:45:92:e3:b0:b2:
                    54:c3:76:c4:45:58:7b:c8:c1:6b:d6:11:f0:95:b0:
                    2d:c8:17:24:7b:24:a4:09:c7:70:11:f9:3b:b1:85:
                    72:ca:0c:b1:14:0f:2b:ff:54:44:05:05:7a:b7:60:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C3:D1:E1:75:D6:B2:3A:4F:F0:F1:D8:BA:83:7B:F3:3A:04:F6:76
            X509v3 Authority Key Identifier:
                keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/C8PR4XXWsjpP8PHYuoN78zoE9nY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1bc8::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:66:cd:15:eb:b7:78:2d:b5:c7:38:03:e7:e1:50:6e:2b:95:
         e8:56:e1:ac:b0:ab:8c:e9:19:5f:e7:17:26:3a:1d:82:50:ff:
         5b:eb:d5:97:5b:f6:90:42:92:ca:2c:2b:a4:4b:16:c3:36:39:
         fc:32:86:9f:b8:45:f7:1a:63:ab:d0:4d:2b:c9:1d:0c:a4:a6:
         7a:8a:94:1d:3f:fc:49:ff:16:8c:e9:1d:8b:d2:a4:c6:72:9c:
         f8:b5:55:11:38:53:9e:b2:db:f7:9e:56:6f:54:85:95:97:59:
         2d:5c:f4:fb:a0:26:37:7f:90:31:c8:4e:08:ff:de:23:09:a4:
         9e:1a:d7:76:90:69:84:f4:29:aa:8f:44:dc:43:14:c7:fd:39:
         a8:7c:2e:e1:94:01:cd:84:f7:cb:a6:c8:71:ee:31:da:cc:74:
         7b:4a:0b:b2:53:80:7b:9f:ec:3f:64:68:22:ec:9a:4d:eb:fa:
         7e:44:69:91:66:90:a0:67:2a:1b:aa:05:dc:76:e6:71:96:54:
         3a:ef:a7:c2:80:6d:29:90:6c:40:9d:01:e6:dc:d1:67:c9:03:
         33:f8:c7:18:9a:2d:99:ff:7c:3a:a5:89:0f:c0:1c:98:86:86:
         10:e1:32:20:3e:f1:48:dc:d5:3e:d0:70:fb:5c:ce:a9:30:a7:
         88:63:a6:fc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlj8T/o4N+Aj0bTM/zUBFpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOTQ2ZjRkZjIyMzc0OTFhNjhkZmE0MDdiZTQxZmFlODRi
YmRhNjYwHhcNMjUwMTAyMDU0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmMzZDFlMTc1ZDZiMjNhNGZmMGYxZDhiYTgzN2JmMzNhMDRmNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9kCWztTz9PgLaKFkZ6fl/sPXZ2WA
SRYiIh90Xm9azEuSxtV0/O9dG49FOj9VGgBp5dVDMJw6FM9GkXB/BOyCtLNWuAHu
45HxyhA3haM6/SiiSwQWCBGzxXWQkxM0IzZl2Eeib5DHW/Jbl0ox4I/JU3rTzSze
JajxLUlOSy0vSxFbgHM2/t5kTAwaJULRxcuf+FkJarKAP+HyI6QlheI8p6Tmwo97
XTarjU2dBJN+Bfj6f4PCNjubTxKpkiJ5VZyOMWuUOOub6sscA5BbRZLjsLJUw3bE
RVh7yMFr1hHwlbAtyBckeySkCcdwEfk7sYVyygyxFA8r/1REBQV6t2CusQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAvD0eF11rI6T/Dx2LqDe/M6BPZ2MB8GA1UdIwQY
MBaAFE2Ub03yI3SRpo36QHvkH66Eu9pmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYmZkMWUtMTIwMi00MGMxLWJkZjAt
YzI0ZWUwNDk0NTQxLzEvQzhQUjRYWFdzanBQOFBIWXVvTjc4em9FOW5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jYmZkMWUtMTIwMi00MGMxLWJkZjAtYzI0ZWUwNDk0NTQx
LzEvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBvI
MA0GCSqGSIb3DQEBCwUAA4IBAQAxZs0V67d4LbXHOAPn4VBuK5XoVuGssKuM6Rlf
5xcmOh2CUP9b69WXW/aQQpLKLCukSxbDNjn8MoafuEX3GmOr0E0ryR0MpKZ6ipQd
P/xJ/xaM6R2L0qTGcpz4tVUROFOestv3nlZvVIWVl1ktXPT7oCY3f5AxyE4I/94j
CaSeGtd2kGmE9Cmqj0TcQxTH/TmofC7hlAHNhPfLpshx7jHazHR7SguyU4B7n+w/
ZGgi7JpN6/p+RGmRZpCgZyobqgXcduZxllQ676fCgG0pkGxAnQHm3NFnyQMz+McY
mi2Z/3w6pYkPwByYhoYQ4TIgPvFI3NU+0HD7XM6pMKeIY6b8
-----END CERTIFICATE-----