Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/GYQyoqa1Lcx9RJ4IYkOHPaDzsYs.roa
File:                     GYQyoqa1Lcx9RJ4IYkOHPaDzsYs.roa (raw, json)
Hash identifier:          5OkYxXGX0IRpYv6mAWx2ijlmqd3siYfdidMZt5Qq9jo=
Subject key identifier:   19:84:32:A2:A6:B5:2D:CC:7D:44:9E:08:62:43:87:3D:A0:F3:B1:8B
Certificate issuer:       /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial:       01942444A30D47C00243F962F939B3074721
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/GYQyoqa1Lcx9RJ4IYkOHPaDzsYs.roa
Signing time:             Wed 01 Jan 2025 23:47:45 +0000
ROA not before:           Wed 01 Jan 2025 23:47:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15507
IP address blocks:        193.201.36.0/24 maxlen: 24
                          2001:678:b18::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:a3:0d:47:c0:02:43:f9:62:f9:39:b3:07:47:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
        Validity
            Not Before: Jan  1 23:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=198432a2a6b52dcc7d449e086243873da0f3b18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:08:f7:c3:43:95:3f:9b:b5:50:56:ef:9f:
                    e9:86:dc:9f:f5:0a:ee:ba:96:ca:74:d3:69:4b:97:
                    6d:88:aa:d6:7c:95:28:6d:8d:47:de:02:bb:3d:4a:
                    4f:43:f1:03:35:78:d2:0f:b9:9d:6a:8e:02:95:3d:
                    36:70:0a:5f:cd:fc:82:9c:ce:ab:a5:6e:ce:e3:5b:
                    1a:91:ae:2d:6f:a2:7b:1e:60:f6:d0:1d:5f:59:94:
                    99:ea:94:f8:05:17:83:e6:6a:2b:6c:f9:bf:40:9f:
                    a5:a0:f6:1a:ca:cb:8a:15:d4:b1:1d:6d:2a:5d:8a:
                    b4:cb:35:f5:4d:ac:23:7b:80:f3:67:e2:2d:c4:7a:
                    21:77:21:29:3b:79:a4:10:45:19:be:60:ad:21:e4:
                    2a:4f:93:4d:78:a4:15:1e:18:61:32:a0:33:30:d6:
                    96:3b:85:c5:c8:a2:b1:f4:8f:f6:b4:91:ea:8a:c5:
                    d8:31:17:1c:b2:aa:f4:ed:4a:9c:13:85:c8:14:1e:
                    35:cd:ef:26:23:6d:6c:7f:45:cb:16:b7:a3:1b:5a:
                    89:c2:cc:61:61:cb:87:4d:c3:76:d8:f6:85:33:03:
                    eb:41:32:9a:01:de:ca:88:11:25:55:f2:50:03:44:
                    5f:27:b3:e3:67:db:f5:ed:96:51:ac:ba:16:ed:e2:
                    e7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:84:32:A2:A6:B5:2D:CC:7D:44:9E:08:62:43:87:3D:A0:F3:B1:8B
            X509v3 Authority Key Identifier:
                keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/GYQyoqa1Lcx9RJ4IYkOHPaDzsYs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.36.0/24
                IPv6:
                  2001:678:b18::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:59:15:89:4e:28:b2:64:50:67:42:15:16:30:f5:24:ac:
         ae:9a:9b:31:01:10:93:56:ef:c7:9a:29:a4:d0:1c:d3:59:b5:
         27:d2:88:78:d5:94:67:b2:2f:fa:07:bc:e2:48:0a:02:8b:d0:
         4a:8a:49:4f:9d:6f:27:ea:6b:03:4f:fa:54:3f:16:d9:d1:8d:
         c8:57:55:89:32:ea:35:d3:25:da:ca:ed:7f:58:67:28:5f:55:
         f4:fc:da:20:33:7d:cb:02:1a:1a:74:41:e1:1e:b3:d9:29:75:
         39:10:c0:d7:48:97:d3:15:b1:ce:10:6d:48:62:f0:62:0e:93:
         3a:94:eb:2d:eb:e0:f2:e6:13:bf:a8:e0:54:6d:b7:ff:62:bb:
         3d:a2:a5:97:a8:99:df:85:3c:d3:bf:3c:ef:bf:09:95:c0:5e:
         a9:99:10:be:da:e4:46:ce:42:a5:6b:ae:52:72:b7:0a:e7:5c:
         c7:5f:47:75:c1:0b:9d:bc:99:38:d3:d0:73:95:b7:2a:a3:88:
         3e:a1:5d:99:27:d1:38:6b:f7:0c:c3:ef:ea:08:c1:5c:92:98:
         7e:dc:02:dc:dd:cb:a8:f7:31:d2:35:45:ec:a5:83:67:47:04:
         ae:56:35:67:6b:eb:48:45:05:6e:89:51:bb:e7:34:15:ca:ad:
         cf:6f:37:e1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQkRKMNR8ACQ/li+TmzB0chMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MWMwN2M5NTE0ODhmMDRjYjNiMGZkMzM4YWY4NGQ3N2U0
NmJmNTIwHhcNMjUwMTAxMjM0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTg0MzJhMmE2YjUyZGNjN2Q0NDllMDg2MjQzODczZGEwZjNiMThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowMI98NDlT+btVBW75/phtyf9Qru
upbKdNNpS5dtiKrWfJUobY1H3gK7PUpPQ/EDNXjSD7mdao4ClT02cApfzfyCnM6r
pW7O41saka4tb6J7HmD20B1fWZSZ6pT4BReD5morbPm/QJ+loPYaysuKFdSxHW0q
XYq0yzX1Tawje4DzZ+ItxHohdyEpO3mkEEUZvmCtIeQqT5NNeKQVHhhhMqAzMNaW
O4XFyKKx9I/2tJHqisXYMRccsqr07UqcE4XIFB41ze8mI21sf0XLFrejG1qJwsxh
YcuHTcN22PaFMwPrQTKaAd7KiBElVfJQA0RfJ7PjZ9v17ZZRrLoW7eLnfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBmEMqKmtS3MfUSeCGJDhz2g87GLMB8GA1UdIwQY
MBaAFOYcB8lRSI8EyzsP0zivhNd+Rr9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yZGJhNWMtOWE5MC00MDUyLWExZWIt
NmE4NDc3Y2I2YzJhLzEvR1lReW9xYTFMY3g5Uko0SVlrT0hQYUR6c1lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yZGJhNWMtOWE5MC00MDUyLWExZWItNmE4NDc3Y2I2YzJh
LzEvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwckkMA8E
AgACMAkDBwAgAQZ4CxgwDQYJKoZIhvcNAQELBQADggEBAI2WWRWJTiiyZFBnQhUW
MPUkrK6amzEBEJNW78eaKaTQHNNZtSfSiHjVlGeyL/oHvOJICgKL0EqKSU+dbyfq
awNP+lQ/FtnRjchXVYky6jXTJdrK7X9YZyhfVfT82iAzfcsCGhp0QeEes9kpdTkQ
wNdIl9MVsc4QbUhi8GIOkzqU6y3r4PLmE7+o4FRtt/9iuz2ipZeomd+FPNO/PO+/
CZXAXqmZEL7a5EbOQqVrrlJytwrnXMdfR3XBC528mTjT0HOVtyqjiD6hXZkn0Thr
9wzD7+oIwVySmH7cAtzdy6j3MdI1Reylg2dHBK5WNWdr60hFBW6JUbvnNBXKrc9v
N+E=
-----END CERTIFICATE-----