Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/PcG8Sq5FdbAe30rm_n_GcaQonsg.roa
File:                     PcG8Sq5FdbAe30rm_n_GcaQonsg.roa (raw, json)
Hash identifier:          Bm8FQyjRUmW9/pGMLb92kJbH7eLAq4FPc7+Cd5r6swA=
Subject key identifier:   3D:C1:BC:4A:AE:45:75:B0:1E:DF:4A:E6:FE:7F:C6:71:A4:28:9E:C8
Certificate issuer:       /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Certificate serial:       019611EF2E654F85291D7AB2F5093F80783C
Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/PcG8Sq5FdbAe30rm_n_GcaQonsg.roa
Signing time:             Mon 07 Apr 2025 20:26:49 +0000
ROA not before:           Mon 07 Apr 2025 20:26:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        2a0c:61c7:ace::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:11:ef:2e:65:4f:85:29:1d:7a:b2:f5:09:3f:80:78:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
        Validity
            Not Before: Apr  7 20:26:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3dc1bc4aae4575b01edf4ae6fe7fc671a4289ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:f4:21:18:4e:c3:67:a8:0b:65:11:20:0c:
                    77:61:08:96:75:7e:f1:be:70:73:e5:4d:7e:a1:36:
                    cc:9d:ba:5f:7b:42:b1:69:f5:be:42:2f:01:82:b9:
                    bb:ce:4d:2b:21:73:3e:16:ad:ab:ea:90:d5:e2:3e:
                    6a:3a:27:df:f9:40:d3:00:9a:d0:d0:c9:1e:67:82:
                    56:5d:4c:a8:e6:1c:06:c1:8a:eb:ce:50:b1:6e:9b:
                    b9:a8:81:84:5b:ca:ce:94:28:3e:e0:54:e8:98:42:
                    b4:1a:07:97:b6:b7:69:ef:e7:95:15:56:9a:6b:2d:
                    6e:8a:b2:98:1c:2d:34:ea:57:1b:54:47:7c:6e:25:
                    8c:fd:85:da:50:d1:db:dd:0a:a0:b8:18:5b:7e:46:
                    9b:d3:fb:09:f4:e4:44:57:6b:17:33:0d:ed:5e:09:
                    c9:0b:09:05:3b:2a:8b:cd:56:e2:32:fb:ed:bd:d3:
                    b4:89:10:15:ac:97:07:aa:e7:ac:d3:6e:b6:f0:2f:
                    f8:06:11:67:05:c1:17:92:01:cb:6d:04:b7:1a:40:
                    11:af:06:dd:16:4f:5c:b4:20:76:39:a6:4e:ed:25:
                    63:62:12:60:40:87:2d:de:9d:91:5e:1b:18:23:19:
                    32:35:5b:8d:0a:84:27:cf:fe:07:36:ce:8f:c6:11:
                    69:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C1:BC:4A:AE:45:75:B0:1E:DF:4A:E6:FE:7F:C6:71:A4:28:9E:C8
            X509v3 Authority Key Identifier:
                keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/PcG8Sq5FdbAe30rm_n_GcaQonsg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:61c7:ace::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:a6:ba:8a:1f:32:0e:50:01:1d:e3:3f:80:75:36:e2:3d:0b:
         e5:8d:fd:85:e1:1a:5b:24:bd:9e:9f:62:1f:3d:26:56:72:ca:
         73:17:83:67:00:f7:27:3e:0e:f9:d7:cc:f2:e3:f4:4d:e3:68:
         e3:48:7f:3a:70:17:ef:d0:73:54:50:fe:5c:8b:bb:74:89:ae:
         7b:11:69:4c:e9:7f:73:85:11:d7:df:86:b7:fc:58:d5:b9:cc:
         fe:d1:08:f9:69:97:56:8a:14:9f:74:82:6e:2d:e1:a9:41:d9:
         81:4e:7d:01:b7:3a:5a:da:7f:10:78:30:a5:50:f1:0b:7c:f3:
         05:d4:2e:ab:87:7e:a7:6c:09:36:01:8f:b4:8e:b4:7b:20:9a:
         58:2a:66:fe:9f:b9:b1:1d:3b:7e:b8:05:15:eb:e5:bc:5a:23:
         fc:2f:80:9a:21:d0:27:9a:79:c5:b6:82:3a:ec:eb:1c:ca:bb:
         98:14:35:2e:2d:84:f6:3d:be:f8:36:58:e8:21:38:a3:16:96:
         98:63:4b:12:c4:7c:06:e5:ef:d6:d5:55:ea:d0:6c:9e:04:7a:
         53:9b:dd:2a:82:3e:ef:e7:4a:2d:93:68:46:59:84:2b:ed:e7:
         7f:5d:b2:90:38:c7:bf:79:6b:7d:28:1a:58:c9:44:63:16:4d:
         2a:1f:43:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZYR7y5lT4UpHXqy9Qk/gHg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNmE0YzU5NWYwYjJkZDA1YTFmZTY3Mjg3YzEzY2UwZWJj
ODBhZGIwHhcNMjUwNDA3MjAyNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGMxYmM0YWFlNDU3NWIwMWVkZjRhZTZmZTdmYzY3MWE0Mjg5ZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFH0IRhOw2eoC2URIAx3YQiWdX7x
vnBz5U1+oTbMnbpfe0KxafW+Qi8Bgrm7zk0rIXM+Fq2r6pDV4j5qOiff+UDTAJrQ
0MkeZ4JWXUyo5hwGwYrrzlCxbpu5qIGEW8rOlCg+4FTomEK0GgeXtrdp7+eVFVaa
ay1uirKYHC006lcbVEd8biWM/YXaUNHb3QqguBhbfkab0/sJ9OREV2sXMw3tXgnJ
CwkFOyqLzVbiMvvtvdO0iRAVrJcHques02628C/4BhFnBcEXkgHLbQS3GkARrwbd
Fk9ctCB2OaZO7SVjYhJgQIct3p2RXhsYIxkyNVuNCoQnz/4HNs6PxhFpbwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFD3BvEquRXWwHt9K5v5/xnGkKJ7IMB8GA1UdIwQY
MBaAFPxqTFlfCy3QWh/mcofBPODryArbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0dwTVdWOExMZEJhSC1aeWg4RTg0T3ZJQ3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wNjk3MGEtMjg2Ni00ODlkLWI3MWEt
ODRlNmNkMjIzMmFjLzEvUGNHOFNxNUZkYkFlMzBybV9uX0djYVFvbnNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wNjk3MGEtMjg2Ni00ODlkLWI3MWEtODRlNmNkMjIzMmFj
LzEvX0dwTVdWOExMZEJhSC1aeWg4RTg0T3ZJQ3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxhxwrO
MA0GCSqGSIb3DQEBCwUAA4IBAQBeprqKHzIOUAEd4z+AdTbiPQvljf2F4RpbJL2e
n2IfPSZWcspzF4NnAPcnPg7518zy4/RN42jjSH86cBfv0HNUUP5ci7t0ia57EWlM
6X9zhRHX34a3/FjVucz+0Qj5aZdWihSfdIJuLeGpQdmBTn0Btzpa2n8QeDClUPEL
fPMF1C6rh36nbAk2AY+0jrR7IJpYKmb+n7mxHTt+uAUV6+W8WiP8L4CaIdAnmnnF
toI67OscyruYFDUuLYT2Pb74NljoITijFpaYY0sSxHwG5e/W1VXq0GyeBHpTm90q
gj7v50otk2hGWYQr7ed/XbKQOMe/eWt9KBpYyURjFk0qH0Me
-----END CERTIFICATE-----