Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/QW82bbA2PdJZpw1C6gyeaMVnHV4.roa
File:                     QW82bbA2PdJZpw1C6gyeaMVnHV4.roa (raw, json)
Hash identifier:          ZpyO/+DpzBzvkiI2D1/biyd4cZbG4LPtFBNWf54il9M=
Subject key identifier:   41:6F:36:6D:B0:36:3D:D2:59:A7:0D:42:EA:0C:9E:68:C5:67:1D:5E
Certificate issuer:       /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial:       019421B22C31FAA4C2C48BD9133215CEF0F8
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/QW82bbA2PdJZpw1C6gyeaMVnHV4.roa
Signing time:             Wed 01 Jan 2025 11:48:32 +0000
ROA not before:           Wed 01 Jan 2025 11:48:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     47616
IP address blocks:        2001:648:22b0::/48 maxlen: 48
                          2001:648:25e0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:2c:31:fa:a4:c2:c4:8b:d9:13:32:15:ce:f0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
        Validity
            Not Before: Jan  1 11:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=416f366db0363dd259a70d42ea0c9e68c5671d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:e8:f0:b2:5e:2b:13:a6:62:df:35:80:19:
                    c8:e2:af:a4:13:c0:98:21:32:bc:86:5a:14:a8:69:
                    e2:b8:01:9e:62:ca:13:c4:9e:d6:6e:0e:5f:53:c6:
                    ac:9a:3c:21:01:84:08:bb:a4:a3:5d:d0:67:74:b7:
                    3f:6b:eb:7e:8a:26:15:05:3f:04:a6:d8:5f:49:d1:
                    84:f7:1a:bd:a5:0b:55:63:f0:8f:55:99:56:7f:21:
                    38:cb:78:3f:cd:51:1b:28:95:f5:58:0d:3a:24:98:
                    63:03:ab:57:c4:b7:f8:61:c0:40:b5:a7:c3:25:d7:
                    a5:e6:2d:56:e0:8a:79:43:e5:66:20:94:c5:8e:e7:
                    67:33:1a:4b:95:d5:49:de:64:85:db:a0:ae:d6:33:
                    af:97:23:31:21:fa:b4:fb:d2:a1:a0:3c:6d:78:47:
                    ba:df:4b:26:d1:79:d4:8a:26:23:41:84:d6:d1:a8:
                    e8:ea:40:40:c0:8a:29:55:aa:24:f7:a0:a4:c3:20:
                    d4:c4:39:b0:96:07:28:66:6d:93:5f:d9:5e:c8:2e:
                    76:49:5d:97:e8:e4:75:9f:31:c9:ff:85:08:42:47:
                    82:de:d4:f7:dc:db:84:d5:fe:78:06:70:d0:3a:68:
                    08:cc:18:57:7a:b6:1c:88:4c:4a:1f:ea:a0:b4:a0:
                    77:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6F:36:6D:B0:36:3D:D2:59:A7:0D:42:EA:0C:9E:68:C5:67:1D:5E
            X509v3 Authority Key Identifier:
                keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/QW82bbA2PdJZpw1C6gyeaMVnHV4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:648:22b0::/48
                  2001:648:25e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:ba:c2:95:04:f6:30:d6:ef:94:75:fb:31:39:18:75:87:72:
         43:48:e5:14:a0:40:65:47:f2:40:a5:4e:ec:6b:12:cc:65:92:
         e4:5c:dc:8c:2b:03:ee:f3:16:c0:61:8e:cd:35:ab:66:00:f3:
         3b:d9:41:33:d1:fd:3e:77:14:05:8b:ac:36:2a:f4:7b:46:27:
         7a:c3:5a:05:23:a7:ee:9e:4d:67:d2:8e:f9:9f:e6:c5:37:cf:
         0c:5d:6d:c2:5a:f7:91:d6:65:4a:7c:76:b8:4f:3e:4d:62:48:
         17:94:c3:c3:e5:80:fd:df:c9:28:08:82:2f:aa:85:f5:e3:77:
         f2:93:f6:87:45:c8:4b:8a:d5:bd:7f:4e:e3:ef:6b:57:f8:ce:
         96:eb:28:1e:db:81:0f:7e:d1:3a:a8:c2:98:35:38:0f:e0:f5:
         e9:f7:e2:ff:16:bc:1c:56:f0:dc:d5:13:c4:2c:54:5c:1e:14:
         6f:3a:35:d9:83:70:89:2e:46:0b:e8:3f:6d:f3:86:f2:78:c1:
         f9:1f:c4:bf:e7:79:dd:36:a4:15:d3:00:83:f6:75:08:84:0b:
         98:05:1e:3c:58:95:73:bc:f1:05:93:70:18:14:6b:c6:b4:3a:
         0e:15:90:8e:e2:55:5a:a5:65:cf:f3:b8:5d:88:ad:78:9f:3c:
         2e:03:59:b5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQhsiwx+qTCxIvZEzIVzvD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1
MjlkYzMwHhcNMjUwMTAxMTE0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTZmMzY2ZGIwMzYzZGQyNTlhNzBkNDJlYTBjOWU2OGM1NjcxZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAPo8LJeKxOmYt81gBnI4q+kE8CY
ITK8hloUqGniuAGeYsoTxJ7Wbg5fU8asmjwhAYQIu6SjXdBndLc/a+t+iiYVBT8E
pthfSdGE9xq9pQtVY/CPVZlWfyE4y3g/zVEbKJX1WA06JJhjA6tXxLf4YcBAtafD
Jdel5i1W4Ip5Q+VmIJTFjudnMxpLldVJ3mSF26Cu1jOvlyMxIfq0+9KhoDxteEe6
30sm0XnUiiYjQYTW0ajo6kBAwIopVaok96CkwyDUxDmwlgcoZm2TX9leyC52SV2X
6OR1nzHJ/4UIQkeC3tT33NuE1f54BnDQOmgIzBhXerYciExKH+qgtKB3JwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEFvNm2wNj3SWacNQuoMnmjFZx1eMB8GA1UdIwQY
MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut
YWFhNDU1M2QyYWJkLzEvUVc4MmJiQTJQZEpacHcxQzZneWVhTVZuSFY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk
LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGSCKw
AwcAIAEGSCXgMA0GCSqGSIb3DQEBCwUAA4IBAQCnusKVBPYw1u+UdfsxORh1h3JD
SOUUoEBlR/JApU7saxLMZZLkXNyMKwPu8xbAYY7NNatmAPM72UEz0f0+dxQFi6w2
KvR7Rid6w1oFI6funk1n0o75n+bFN88MXW3CWveR1mVKfHa4Tz5NYkgXlMPD5YD9
38koCIIvqoX143fyk/aHRchLitW9f07j72tX+M6W6yge24EPftE6qMKYNTgP4PXp
9+L/FrwcVvDc1RPELFRcHhRvOjXZg3CJLkYL6D9t84byeMH5H8S/53ndNqQV0wCD
9nUIhAuYBR48WJVzvPEFk3AYFGvGtDoOFZCO4lVapWXP87hdiK14nzwuA1m1
-----END CERTIFICATE-----