Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa
File:                     yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa (raw, json)
Hash identifier:          xz6DLj2fmkfFVGM6LYkLVTKbdiAh+qRJd+w+TzRoaH4=
Subject key identifier:   CB:31:CD:45:03:7F:2C:B6:27:BF:4B:51:E5:48:87:7F:03:C2:EE:EC
Certificate issuer:       /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Certificate serial:       01941FFA50901A945338C45E7349441C1224
Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa
Signing time:             Wed 01 Jan 2025 03:48:05 +0000
ROA not before:           Wed 01 Jan 2025 03:48:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197835
IP address blocks:        176.111.173.0/24 maxlen: 24
                          2a13:940::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:50:90:1a:94:53:38:c4:5e:73:49:44:1c:12:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
        Validity
            Not Before: Jan  1 03:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cb31cd45037f2cb627bf4b51e548877f03c2eeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:ac:26:57:bd:da:fe:9f:c5:6d:30:5d:83:
                    79:09:eb:c3:11:dc:ba:6d:48:a1:95:16:3e:c9:63:
                    b8:36:a5:6d:f4:9b:46:ce:d2:d6:05:76:b4:e3:bc:
                    02:c0:28:84:04:10:1f:0c:44:81:66:c2:0c:5d:5f:
                    66:07:75:b2:e8:15:e6:04:9e:25:34:ab:9c:a9:63:
                    81:77:f9:bc:f8:01:3f:f6:42:44:ef:53:d1:68:5b:
                    35:27:2a:f2:83:2c:f8:90:e4:31:ae:51:74:d0:0c:
                    73:15:61:5b:2f:82:10:ae:34:e8:f2:60:7f:e2:cf:
                    a0:ee:ed:fc:87:78:04:52:cf:19:fd:b2:c8:90:ec:
                    4b:a6:3a:8d:d4:21:0e:8d:9c:4a:ef:36:15:0a:01:
                    9c:e7:ce:ec:45:d3:6b:99:06:fb:87:9e:77:54:89:
                    d0:21:f2:4c:b4:b0:9e:1f:82:5a:81:68:85:72:57:
                    b9:3e:81:51:8f:43:07:7f:8b:61:6a:87:a0:81:cd:
                    5c:bc:cb:8f:c8:be:e1:42:8f:8f:60:17:e5:4f:33:
                    a0:f1:fe:62:0a:fc:cf:e2:43:d3:1b:98:03:ef:c1:
                    99:c1:03:67:1b:15:d4:d0:69:03:8e:be:34:b4:c6:
                    0d:7c:e9:60:94:13:37:e8:7d:78:3c:13:01:4c:21:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:31:CD:45:03:7F:2C:B6:27:BF:4B:51:E5:48:87:7F:03:C2:EE:EC
            X509v3 Authority Key Identifier:
                keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.111.173.0/24
                IPv6:
                  2a13:940::/29

    Signature Algorithm: sha256WithRSAEncryption
         25:d5:fe:a0:6c:8d:b7:fb:8a:d9:4c:1b:eb:9a:65:7a:be:f4:
         0c:2d:32:4c:70:cc:5f:4c:74:27:e4:54:12:0c:28:d5:b9:47:
         c5:b5:75:f5:13:85:c7:49:68:d0:17:e7:9c:d9:d5:7e:17:83:
         d1:a2:70:38:79:a7:1d:42:a6:d8:38:e3:f6:03:42:81:78:5c:
         64:91:a5:6b:58:54:ea:54:13:e4:6e:fe:b0:b3:c2:f4:c5:e9:
         f2:ce:58:82:92:ce:c7:21:fd:2a:53:bd:a8:1e:25:19:b1:2e:
         f2:dc:ca:23:fb:a7:e6:a3:74:81:37:73:84:01:53:db:24:ee:
         38:6b:8c:72:71:6f:25:c2:fa:f0:8c:91:a6:dd:bd:0d:7a:a7:
         00:1f:e7:97:3f:94:38:2c:91:2e:58:8c:7f:ff:cd:62:a7:d7:
         d9:49:d8:20:24:df:b6:81:7e:25:9a:04:eb:c9:c8:80:36:cc:
         3c:b5:15:6c:35:74:e3:d2:0d:28:ef:37:e7:44:74:21:91:ec:
         31:29:11:2c:0b:ca:fc:1d:3a:2c:8b:e7:ba:f3:1c:61:be:45:
         47:1e:32:b4:e1:db:59:56:53:9f:93:c1:93:e0:65:8b:7e:8c:
         6b:b1:71:42:d1:43:fa:78:47:75:82:98:12:bd:75:86:45:ca:
         5f:dc:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----