Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/bbpg3V6ZZAXBeCd1yQ2Usxzc5uc.roa
File:                     bbpg3V6ZZAXBeCd1yQ2Usxzc5uc.roa (raw, json)
Hash identifier:          zEd/mqbUQwwKdBV4qgniA93ml7cpqC5pfS1X8ei6QF4=
Subject key identifier:   6D:BA:60:DD:5E:99:64:05:C1:78:27:75:C9:0D:94:B3:1C:DC:E6:E7
Certificate issuer:       /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial:       01942144411AAD5421D2ADBC59333197D7EA
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/bbpg3V6ZZAXBeCd1yQ2Usxzc5uc.roa
Signing time:             Wed 01 Jan 2025 09:48:28 +0000
ROA not before:           Wed 01 Jan 2025 09:48:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60593
IP address blocks:        185.196.134.0/23 maxlen: 24
                          2a09:a5c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:41:1a:ad:54:21:d2:ad:bc:59:33:31:97:d7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
        Validity
            Not Before: Jan  1 09:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6dba60dd5e996405c1782775c90d94b31cdce6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:99:05:a0:d6:5d:59:0c:07:a8:13:ea:b3:ac:
                    5c:a1:65:9c:e5:fd:ab:77:f3:c5:5f:6e:50:be:87:
                    6f:0f:a0:e6:a5:4d:40:56:73:f4:54:ff:f5:b3:6b:
                    24:d9:1c:9d:23:e0:ae:ac:f5:58:f3:c4:ed:ac:f6:
                    a5:9d:bd:4d:06:28:a7:1e:86:f2:44:e4:b0:51:2b:
                    ac:80:04:25:6c:a6:36:d4:58:90:a4:e4:a9:32:87:
                    c8:26:3c:ab:51:00:46:63:89:5c:cf:5c:53:fb:59:
                    15:49:63:0e:67:b4:50:c4:31:99:8f:ea:6b:ca:c5:
                    c2:ab:ec:97:72:33:ac:30:79:8e:dd:f1:17:3b:a9:
                    8b:34:c8:ca:07:ab:c8:33:7d:ba:dd:05:27:f1:3e:
                    ef:95:80:06:ce:22:0a:2c:f0:e4:43:7f:10:89:b7:
                    12:99:d5:6b:56:a6:b3:f5:4c:dd:b4:cc:9c:0a:af:
                    87:89:e0:fc:9d:b5:52:85:32:fd:2b:31:c6:d2:ce:
                    33:cc:4d:e0:13:54:db:54:b7:e9:2e:7a:5b:d9:81:
                    6b:e0:e9:67:ef:c0:0a:f0:06:06:d0:9a:b9:9c:78:
                    c4:6c:5c:fd:bc:47:97:4f:96:9d:95:f3:24:72:1e:
                    4d:ce:7e:cc:ad:ac:6b:7f:2c:4b:98:8b:d2:de:d4:
                    0b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BA:60:DD:5E:99:64:05:C1:78:27:75:C9:0D:94:B3:1C:DC:E6:E7
            X509v3 Authority Key Identifier:
                keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/bbpg3V6ZZAXBeCd1yQ2Usxzc5uc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.196.134.0/23
                IPv6:
                  2a09:a5c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         85:09:d4:89:89:c8:ce:e8:40:1d:c6:99:ce:89:80:0c:56:c5:
         61:64:df:00:17:70:aa:eb:3a:e3:41:4a:5f:f6:cd:0b:da:6c:
         2c:0f:5e:65:9a:4d:2a:8b:20:f7:57:a2:ba:d4:f0:e3:99:bb:
         77:df:8d:f3:0c:a4:4f:3d:be:dd:80:00:41:80:2e:ed:24:8b:
         f9:9b:27:3d:8d:9c:d0:dd:35:c2:5c:c4:8e:94:67:92:6b:5a:
         08:06:5e:3f:4d:9a:9b:d4:41:2f:11:88:4d:1a:3c:9f:68:0e:
         ac:cf:56:c2:6f:a0:59:a0:fd:d7:0a:67:f5:57:f3:19:71:96:
         ca:d0:49:fb:09:8b:ab:a1:ac:93:29:85:89:82:d0:fa:44:6b:
         b6:98:1d:0b:0c:72:54:0e:7f:2d:da:4f:1c:46:44:ab:a6:3b:
         a7:45:d1:b7:79:3b:f1:ee:96:25:e0:dd:b5:f3:e5:6f:d3:64:
         0b:a7:e5:fc:74:52:4b:94:e5:2e:cf:7d:a0:da:a6:59:a7:17:
         9f:41:2f:05:da:b4:81:65:50:48:3b:ce:01:dd:d5:fb:16:43:
         e5:3e:3c:0e:3a:fa:f1:70:40:05:6c:77:3a:95:fa:5d:4e:4a:
         fc:ad:3f:b9:90:36:24:25:81:98:ee:99:92:a0:d8:17:8b:30:
         92:63:98:62
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhREEarVQh0q28WTMxl9fqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhY2Q0ZTJjMDRjMzllZGIyNDJhNjcwNTFiOGI1ODEyNjM0
MzZlNzkwHhcNMjUwMTAxMDk0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGJhNjBkZDVlOTk2NDA1YzE3ODI3NzVjOTBkOTRiMzFjZGNlNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpkFoNZdWQwHqBPqs6xcoWWc5f2r
d/PFX25QvodvD6DmpU1AVnP0VP/1s2sk2RydI+CurPVY88TtrPalnb1NBiinHoby
ROSwUSusgAQlbKY21FiQpOSpMofIJjyrUQBGY4lcz1xT+1kVSWMOZ7RQxDGZj+pr
ysXCq+yXcjOsMHmO3fEXO6mLNMjKB6vIM3263QUn8T7vlYAGziIKLPDkQ38QibcS
mdVrVqaz9UzdtMycCq+HieD8nbVShTL9KzHG0s4zzE3gE1TbVLfpLnpb2YFr4Oln
78AK8AYG0Jq5nHjEbFz9vEeXT5adlfMkch5Nzn7MraxrfyxLmIvS3tQL0wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFG26YN1emWQFwXgndckNlLMc3ObnMB8GA1UdIwQY
MBaAFArNTiwEw57bJCpnBRuLWBJjQ255MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3MxT0xBVERudHNrS21jRkc0dFlFbU5EYm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yNmQ2ZjYtMTFlZS00YTg2LWJmYjkt
ZGRjMjc2YWNiOTEwLzEvYmJwZzNWNlpaQVhCZUNkMXlRMlVzeHpjNXVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8yNmQ2ZjYtMTFlZS00YTg2LWJmYjktZGRjMjc2YWNiOTEw
LzEvQ3MxT0xBVERudHNrS21jRkc0dFlFbU5EYm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBucSGMA0E
AgACMAcDBQMqCaXAMA0GCSqGSIb3DQEBCwUAA4IBAQCFCdSJicjO6EAdxpnOiYAM
VsVhZN8AF3Cq6zrjQUpf9s0L2mwsD15lmk0qiyD3V6K61PDjmbt3343zDKRPPb7d
gABBgC7tJIv5myc9jZzQ3TXCXMSOlGeSa1oIBl4/TZqb1EEvEYhNGjyfaA6sz1bC
b6BZoP3XCmf1V/MZcZbK0En7CYuroayTKYWJgtD6RGu2mB0LDHJUDn8t2k8cRkSr
pjunRdG3eTvx7pYl4N218+Vv02QLp+X8dFJLlOUuz32g2qZZpxefQS8F2rSBZVBI
O84B3dX7FkPlPjwOOvrxcEAFbHc6lfpdTkr8rT+5kDYkJYGY7pmSoNgXizCSY5hi
-----END CERTIFICATE-----