Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/njKb2eruHX8H9g3wi8a7hMHrArw.roa
File:                     njKb2eruHX8H9g3wi8a7hMHrArw.roa (raw, json)
Hash identifier:          6gW6VZJ5Gbs98ZjAseT0lvfg+/2Cg+ztPZG7diySUiI=
Subject key identifier:   9E:32:9B:D9:EA:EE:1D:7F:07:F6:0D:F0:8B:C6:BB:84:C1:EB:02:BC
Certificate issuer:       /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial:       019420D5A98C10027BB1B88C40E421F61930
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/njKb2eruHX8H9g3wi8a7hMHrArw.roa
Signing time:             Wed 01 Jan 2025 07:47:40 +0000
ROA not before:           Wed 01 Jan 2025 07:47:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31276
IP address blocks:        45.91.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:a9:8c:10:02:7b:b1:b8:8c:40:e4:21:f6:19:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
        Validity
            Not Before: Jan  1 07:47:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9e329bd9eaee1d7f07f60df08bc6bb84c1eb02bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f9:49:76:92:bd:b5:39:bd:b7:24:38:9f:3f:
                    ad:28:f6:ab:0e:cf:d4:8b:f3:7e:b7:f8:f1:d0:53:
                    0d:ee:0d:58:77:7f:e9:ea:ff:24:4e:f9:dc:05:a9:
                    db:9b:01:64:19:7a:be:f4:cf:30:93:0c:68:a4:bb:
                    1d:56:4e:73:a3:5c:e5:99:f5:cf:d9:aa:56:e0:26:
                    bd:d1:d0:41:ba:a0:40:3f:09:86:85:0c:d4:3e:16:
                    4f:cc:fd:e1:26:a5:b6:52:db:d8:57:c4:73:65:15:
                    1d:94:74:f6:a2:91:35:f3:b8:35:50:42:90:94:9f:
                    ed:28:3a:69:96:ed:3c:d4:b9:c0:60:67:0f:33:ce:
                    86:e4:27:fe:26:97:6b:7c:2d:c6:dc:1c:ff:ba:dc:
                    4f:15:ec:ed:71:5a:51:4b:32:70:44:b4:8c:88:58:
                    b7:93:1e:91:50:28:e5:7e:88:1b:b8:bd:9d:61:7e:
                    bf:cb:f7:34:0a:5c:a0:13:fa:01:c2:6b:5e:27:1f:
                    65:55:d5:f4:ab:77:f9:b3:20:90:31:13:22:ce:a6:
                    a7:5f:d1:28:f5:43:62:75:ca:07:9a:44:75:f0:b3:
                    5b:97:3d:00:30:b8:0d:75:81:ce:cd:9c:c6:73:e4:
                    64:41:60:8e:8a:8d:18:fa:2f:7a:8c:8c:99:a3:b3:
                    58:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:32:9B:D9:EA:EE:1D:7F:07:F6:0D:F0:8B:C6:BB:84:C1:EB:02:BC
            X509v3 Authority Key Identifier:
                keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/njKb2eruHX8H9g3wi8a7hMHrArw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:79:57:34:e0:e1:e7:37:62:aa:64:a0:06:73:92:62:b3:a3:
         fd:61:09:5b:c6:bb:70:b5:13:c3:4d:56:42:2f:58:84:85:eb:
         fb:fc:c4:25:a1:d8:b4:73:7b:c2:c1:04:64:27:62:b3:bd:c3:
         21:2a:4d:41:54:02:93:61:2b:1b:27:8c:c2:d2:e5:61:22:23:
         6c:3e:1a:32:e8:19:70:e0:c1:62:f0:36:6e:c4:e2:5b:58:7d:
         b5:1e:3a:3a:bc:b8:ce:e8:c5:9f:4e:60:36:6d:90:83:5a:c1:
         ea:9a:b1:f6:6b:65:62:06:9e:d5:f5:dd:e8:5c:61:a6:44:51:
         ed:12:22:cc:96:fd:3f:3d:06:25:de:4c:f8:68:7b:b5:ac:84:
         ee:6a:aa:ea:7d:75:b1:63:2c:52:53:1c:8c:7e:64:a0:26:2d:
         f6:db:b1:e9:19:47:ed:b2:e1:fd:91:95:84:5c:5f:62:95:f9:
         11:43:70:e0:af:8d:93:f5:b8:c5:96:9e:c0:2a:7f:ae:7b:27:
         e4:92:ec:56:9a:4a:35:06:02:f8:53:c6:3d:56:14:14:40:ac:
         d5:7e:21:66:51:7c:a4:fd:1a:d0:d8:7a:b4:14:54:09:15:e3:
         c2:75:a1:41:05:b4:bb:82:63:51:82:b1:e5:0f:98:86:92:1b:
         cc:9a:5b:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1amMEAJ7sbiMQOQh9hkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhY2E3MWYyZDlmZTJiNDljNjc2MmYzZDlhMGU4YmYzMzJk
ZmRlZDEwHhcNMjUwMTAxMDc0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTMyOWJkOWVhZWUxZDdmMDdmNjBkZjA4YmM2YmI4NGMxZWIwMmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vlJdpK9tTm9tyQ4nz+tKParDs/U
i/N+t/jx0FMN7g1Yd3/p6v8kTvncBanbmwFkGXq+9M8wkwxopLsdVk5zo1zlmfXP
2apW4Ca90dBBuqBAPwmGhQzUPhZPzP3hJqW2UtvYV8RzZRUdlHT2opE187g1UEKQ
lJ/tKDpplu081LnAYGcPM86G5Cf+JpdrfC3G3Bz/utxPFeztcVpRSzJwRLSMiFi3
kx6RUCjlfogbuL2dYX6/y/c0ClygE/oBwmteJx9lVdX0q3f5syCQMRMizqanX9Eo
9UNidcoHmkR18LNblz0AMLgNdYHOzZzGc+RkQWCOio0Y+i96jIyZo7NYSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ4ym9nq7h1/B/YN8IvGu4TB6wK8MB8GA1UdIwQY
MBaAFGrKcfLZ/itJxnYvPZoOi/My397RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8xYjAyODktMzFmZi00MzFmLTk0ODkt
OWE4ZDJiZjAwMzIwLzEvbmpLYjJlcnVIWDhIOWczd2k4YTdoTUhyQXJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8xYjAyODktMzFmZi00MzFmLTk0ODktOWE4ZDJiZjAwMzIw
LzEvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVvUMA0G
CSqGSIb3DQEBCwUAA4IBAQB9eVc04OHnN2KqZKAGc5Jis6P9YQlbxrtwtRPDTVZC
L1iEhev7/MQlodi0c3vCwQRkJ2KzvcMhKk1BVAKTYSsbJ4zC0uVhIiNsPhoy6Blw
4MFi8DZuxOJbWH21Hjo6vLjO6MWfTmA2bZCDWsHqmrH2a2ViBp7V9d3oXGGmRFHt
EiLMlv0/PQYl3kz4aHu1rITuaqrqfXWxYyxSUxyMfmSgJi3227HpGUftsuH9kZWE
XF9ilfkRQ3Dgr42T9bjFlp7AKn+ueyfkkuxWmko1BgL4U8Y9VhQUQKzVfiFmUXyk
/RrQ2Hq0FFQJFePCdaFBBbS7gmNRgrHlD5iGkhvMmlvb
-----END CERTIFICATE-----