Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/exp48BWKUcDXUkG7i2Cr80hvpEo.roa
File:                     exp48BWKUcDXUkG7i2Cr80hvpEo.roa (raw, json)
Hash identifier:          PxK1jmuTn8+Arb/4EbK+9fd9fS7Yg9Yie0DgOUJDKD4=
Subject key identifier:   7B:1A:78:F0:15:8A:51:C0:D7:52:41:BB:8B:60:AB:F3:48:6F:A4:4A
Certificate issuer:       /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial:       0194214430DB043BD66CB6573ABFEEE9648F
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/exp48BWKUcDXUkG7i2Cr80hvpEo.roa
Signing time:             Wed 01 Jan 2025 09:48:24 +0000
ROA not before:           Wed 01 Jan 2025 09:48:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215915
IP address blocks:        185.136.232.0/22 maxlen: 24
                          2a10:c885::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:30:db:04:3b:d6:6c:b6:57:3a:bf:ee:e9:64:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
        Validity
            Not Before: Jan  1 09:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7b1a78f0158a51c0d75241bb8b60abf3486fa44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:6f:f6:c2:32:5a:b3:44:fd:b6:00:0e:f2:
                    b7:e2:80:57:cf:1c:44:9d:10:64:0b:d3:fd:40:cb:
                    ec:bc:a7:d6:bc:f4:cd:ca:55:e8:80:6f:27:75:25:
                    25:f7:81:19:cc:a2:65:db:28:51:75:3c:93:f7:90:
                    bd:98:c8:82:27:4b:d9:2b:4f:cb:26:e3:dc:c2:79:
                    23:17:a4:5d:dc:7f:6d:e9:5f:d9:46:58:71:11:6d:
                    8b:3c:29:6e:5d:b2:29:a6:b8:05:0b:fd:bc:ca:d5:
                    86:0b:10:30:bf:d0:44:0e:a8:ab:b9:6b:5a:40:4b:
                    9d:a8:26:76:cf:a6:f4:6b:d6:31:e3:1c:ae:1d:7f:
                    e9:5b:0b:11:8f:62:50:fb:f2:9b:fc:09:bb:14:93:
                    82:a5:52:42:8d:46:b4:34:b2:5e:cf:3c:1e:84:0e:
                    04:14:d6:26:f6:9c:38:9f:00:5f:81:48:26:c5:e6:
                    ec:5d:70:6f:37:7e:62:1e:09:ea:5f:5d:e6:d8:1b:
                    25:b3:02:34:88:9d:f5:d2:fc:57:81:23:9f:71:f9:
                    e9:f8:50:16:84:59:20:7e:31:19:31:53:90:95:ca:
                    11:55:31:24:95:49:3a:63:f9:86:cf:cc:ed:77:0a:
                    f9:91:a6:99:8f:c2:e4:51:28:98:aa:b8:bc:56:c1:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1A:78:F0:15:8A:51:C0:D7:52:41:BB:8B:60:AB:F3:48:6F:A4:4A
            X509v3 Authority Key Identifier:
                keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/exp48BWKUcDXUkG7i2Cr80hvpEo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.136.232.0/22
                IPv6:
                  2a10:c885::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:ab:91:9c:8a:ba:16:05:e3:42:1d:3a:42:f1:89:05:53:dd:
         96:a7:6f:b2:4a:19:8e:8f:d2:84:f0:fa:b7:50:f0:b6:ad:98:
         fb:cd:ba:a8:f7:67:1e:98:5d:08:0d:39:86:ae:56:bb:28:a1:
         b8:ab:2a:39:0b:c9:ae:f2:ab:7c:73:9f:e4:73:92:0b:f9:1a:
         5d:fd:3f:93:c7:df:2d:4a:77:05:60:3d:9e:3a:05:69:14:36:
         a2:30:64:77:17:64:dd:0f:f9:a3:0d:27:86:3c:f1:c7:76:81:
         fa:de:a6:6c:a3:18:93:bf:ed:40:28:1a:6c:31:75:7f:2d:a7:
         3d:4a:e5:e5:49:15:a8:36:18:e5:d4:67:dd:fe:67:d8:0e:2d:
         f9:f0:b6:0d:85:5d:a5:ba:b1:87:8f:a4:4c:b4:b1:84:6b:a4:
         7f:6a:3c:17:79:e7:45:d6:5f:91:14:4e:cf:e7:76:9d:28:31:
         8f:f3:c0:01:15:ab:02:ea:e3:11:86:69:d7:28:84:90:18:14:
         39:49:b3:76:65:88:96:8b:3b:fa:48:f8:f9:70:27:56:e7:a3:
         58:c8:7c:ec:0f:02:b2:b9:2f:da:c8:5e:31:ed:22:f6:50:ed:
         d5:4c:cb:ab:83:89:0d:fe:52:3d:21:3b:09:cc:e0:d3:53:1a:
         a9:c7:4e:70
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhRDDbBDvWbLZXOr/u6WSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTI0YzcyODRlZjQ4ODdlNDVkNGNjZDliZGU2NzljZDlh
YjRmMDAwHhcNMjUwMTAxMDk0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjFhNzhmMDE1OGE1MWMwZDc1MjQxYmI4YjYwYWJmMzQ4NmZhNDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeNv9sIyWrNE/bYADvK34oBXzxxE
nRBkC9P9QMvsvKfWvPTNylXogG8ndSUl94EZzKJl2yhRdTyT95C9mMiCJ0vZK0/L
JuPcwnkjF6Rd3H9t6V/ZRlhxEW2LPCluXbIpprgFC/28ytWGCxAwv9BEDqiruWta
QEudqCZ2z6b0a9Yx4xyuHX/pWwsRj2JQ+/Kb/Am7FJOCpVJCjUa0NLJezzwehA4E
FNYm9pw4nwBfgUgmxebsXXBvN35iHgnqX13m2BslswI0iJ310vxXgSOfcfnp+FAW
hFkgfjEZMVOQlcoRVTEklUk6Y/mGz8ztdwr5kaaZj8LkUSiYqri8VsG2twIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHsaePAVilHA11JBu4tgq/NIb6RKMB8GA1UdIwQY
MBaAFGfiTHKE70iH5F1MzZveZ5zZq08AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzct
MDM3NWE5YzMyYjAwLzEvZXhwNDhCV0tVY0RYVWtHN2kyQ3I4MGh2cEVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzctMDM3NWE5YzMyYjAw
LzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYjoMA0E
AgACMAcDBQAqEMiFMA0GCSqGSIb3DQEBCwUAA4IBAQB2q5GciroWBeNCHTpC8YkF
U92Wp2+yShmOj9KE8Pq3UPC2rZj7zbqo92cemF0IDTmGrla7KKG4qyo5C8mu8qt8
c5/kc5IL+Rpd/T+Tx98tSncFYD2eOgVpFDaiMGR3F2TdD/mjDSeGPPHHdoH63qZs
oxiTv+1AKBpsMXV/Lac9SuXlSRWoNhjl1Gfd/mfYDi358LYNhV2lurGHj6RMtLGE
a6R/ajwXeedF1l+RFE7P53adKDGP88ABFasC6uMRhmnXKISQGBQ5SbN2ZYiWizv6
SPj5cCdW56NYyHzsDwKyuS/ayF4x7SL2UO3VTMurg4kN/lI9ITsJzODTUxqpx05w
-----END CERTIFICATE-----