Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/RWXc7pnERNYQOvO9AHteTOA-BLs.roa
File:                     RWXc7pnERNYQOvO9AHteTOA-BLs.roa (raw, json)
Hash identifier:          whYuVMgGb8/hVbcAtfyqAHTJ95yBC0XXSwdfBmwhSDE=
Subject key identifier:   45:65:DC:EE:99:C4:44:D6:10:3A:F3:BD:00:7B:5E:4C:E0:3E:04:BB
Certificate issuer:       /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial:       019424B40150280D245B67056468AA408066
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/RWXc7pnERNYQOvO9AHteTOA-BLs.roa
Signing time:             Thu 02 Jan 2025 01:49:24 +0000
ROA not before:           Thu 02 Jan 2025 01:49:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206055
IP address blocks:        185.238.118.0/23 maxlen: 23
                          2a13:9f80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b4:01:50:28:0d:24:5b:67:05:64:68:aa:40:80:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
        Validity
            Not Before: Jan  2 01:49:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4565dcee99c444d6103af3bd007b5e4ce03e04bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:e9:77:67:fb:11:15:53:52:a4:51:18:6d:
                    6a:b8:22:7d:9b:6d:2f:c0:6d:70:0c:90:f7:5d:66:
                    8c:cf:63:61:02:93:7d:e7:bf:15:46:bd:44:c0:a2:
                    cd:f7:80:8b:bb:2c:6a:77:b1:43:4a:d8:0c:75:dd:
                    01:cd:94:68:5a:e3:f9:a8:6c:c6:bf:5f:28:e9:5a:
                    3c:b9:c0:86:e2:71:82:37:30:22:45:be:ff:13:ab:
                    df:aa:99:b0:00:3e:4c:4b:44:8e:c3:7e:b2:b0:97:
                    81:bf:0e:ca:fe:d5:3f:70:5a:43:ec:05:7c:af:ec:
                    7b:0e:44:d1:8e:4f:54:c8:ec:da:89:e6:ad:d2:f4:
                    a2:93:43:69:ee:4d:c7:49:bb:d6:30:fb:3e:d1:7a:
                    f1:e0:e0:b2:3d:1b:06:9b:7d:70:27:32:a4:61:d4:
                    2a:af:25:1b:1d:12:53:e4:ae:11:86:2c:4c:29:cb:
                    4e:e1:cf:0e:a4:95:8d:ba:83:65:82:86:57:0c:3c:
                    9c:4b:cb:42:97:23:cb:e0:3e:7b:2d:1f:14:ff:71:
                    12:39:b7:7c:69:0c:ee:63:8f:b4:04:72:90:b5:97:
                    9f:4e:db:cf:37:43:03:e2:5e:25:5c:26:34:a0:ab:
                    e4:70:9c:4a:99:7f:19:f9:f2:de:43:fd:37:b7:00:
                    19:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:65:DC:EE:99:C4:44:D6:10:3A:F3:BD:00:7B:5E:4C:E0:3E:04:BB
            X509v3 Authority Key Identifier:
                keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/RWXc7pnERNYQOvO9AHteTOA-BLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.238.118.0/23
                IPv6:
                  2a13:9f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:9c:c6:60:3d:32:6b:ae:c7:1c:fb:2c:8b:9e:e9:1e:84:20:
         a3:fe:25:fa:69:1e:1e:e1:12:fd:28:8e:88:d6:39:8e:35:63:
         a4:74:12:ad:b1:3d:88:c7:f1:47:d6:4e:37:ba:fd:31:c1:d0:
         73:22:5e:0d:23:6b:f6:86:1e:76:68:0c:46:2f:a0:7c:4b:83:
         ef:c2:4c:97:6d:49:1e:1f:21:20:1d:72:75:01:e7:ef:9e:84:
         e5:95:0f:b2:e8:47:45:f9:c9:c7:a0:bc:a9:cb:06:4d:01:eb:
         de:c8:a8:6a:2c:33:18:be:80:83:0f:e8:e0:ce:79:b3:2b:4d:
         5c:c3:a8:cd:83:00:43:be:70:06:56:4c:34:5a:88:33:86:a4:
         fc:ad:9c:cb:4d:d6:d1:0d:90:3a:04:0c:99:ca:08:29:6f:c9:
         6d:fe:76:a7:fa:64:c8:cc:8f:ff:05:04:10:fe:69:46:f4:9c:
         45:c7:e4:9a:0b:a4:3c:89:3d:a1:37:f4:83:5c:c7:e6:21:d4:
         5d:78:87:e6:c5:df:58:40:d8:57:a8:48:08:f3:bc:ff:2f:56:
         51:ea:dd:a5:43:13:32:0c:4a:5d:52:4f:2a:e0:03:d0:c5:06:
         65:a2:c5:c5:ea:a2:1e:b3:db:f3:77:98:a7:56:4d:2c:1f:00:
         f0:f3:f7:43
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQktAFQKA0kW2cFZGiqQIBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZjE3MGIxOWI5N2VlMTdkZTczMmExYjY4YWUyMmJhOGU1
ZjU2ZTQwHhcNMjUwMTAyMDE0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTY1ZGNlZTk5YzQ0NGQ2MTAzYWYzYmQwMDdiNWU0Y2UwM2UwNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmHpd2f7ERVTUqRRGG1quCJ9m20v
wG1wDJD3XWaMz2NhApN9578VRr1EwKLN94CLuyxqd7FDStgMdd0BzZRoWuP5qGzG
v18o6Vo8ucCG4nGCNzAiRb7/E6vfqpmwAD5MS0SOw36ysJeBvw7K/tU/cFpD7AV8
r+x7DkTRjk9UyOzaieat0vSik0Np7k3HSbvWMPs+0Xrx4OCyPRsGm31wJzKkYdQq
ryUbHRJT5K4RhixMKctO4c8OpJWNuoNlgoZXDDycS8tClyPL4D57LR8U/3ESObd8
aQzuY4+0BHKQtZefTtvPN0MD4l4lXCY0oKvkcJxKmX8Z+fLeQ/03twAZOQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEVl3O6ZxETWEDrzvQB7XkzgPgS7MB8GA1UdIwQY
MBaAFCbxcLGbl+4X3nMqG2iuIrqOX1bkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQt
MDY2NzZiZTEzOGZhLzEvUldYYzdwbkVSTllRT3ZPOUFIdGVUT0EtQkxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQtMDY2NzZiZTEzOGZh
LzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBue52MA0E
AgACMAcDBQAqE5+AMA0GCSqGSIb3DQEBCwUAA4IBAQB7nMZgPTJrrscc+yyLnuke
hCCj/iX6aR4e4RL9KI6I1jmONWOkdBKtsT2Ix/FH1k43uv0xwdBzIl4NI2v2hh52
aAxGL6B8S4PvwkyXbUkeHyEgHXJ1AefvnoTllQ+y6EdF+cnHoLypywZNAeveyKhq
LDMYvoCDD+jgznmzK01cw6jNgwBDvnAGVkw0WogzhqT8rZzLTdbRDZA6BAyZyggp
b8lt/nan+mTIzI//BQQQ/mlG9JxFx+SaC6Q8iT2hN/SDXMfmIdRdeIfmxd9YQNhX
qEgI87z/L1ZR6t2lQxMyDEpdUk8q4APQxQZlosXF6qIes9vzd5inVk0sHwDw8/dD
-----END CERTIFICATE-----