Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/J61W22rNG-zDQHqba8KpMVr9eOQ.roa
File:                     J61W22rNG-zDQHqba8KpMVr9eOQ.roa (raw, json)
Hash identifier:          egaR8HryPVOatJDhc71F1yZLfEpoS66sYQjBb1aN/QU=
Subject key identifier:   27:AD:56:DB:6A:CD:1B:EC:C3:40:7A:9B:6B:C2:A9:31:5A:FD:78:E4
Certificate issuer:       /CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
Certificate serial:       019420D62669D4BFD74DD0C8AE5AEEAB1A92
Authority key identifier: 57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/J61W22rNG-zDQHqba8KpMVr9eOQ.roa
Signing time:             Wed 01 Jan 2025 07:48:12 +0000
ROA not before:           Wed 01 Jan 2025 07:48:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42929
IP address blocks:        195.225.80.0/24 maxlen: 24
                          2a11:e600::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:26:69:d4:bf:d7:4d:d0:c8:ae:5a:ee:ab:1a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
        Validity
            Not Before: Jan  1 07:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=27ad56db6acd1becc3407a9b6bc2a9315afd78e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:95:d9:5a:b1:7b:15:30:d7:1b:2b:31:20:
                    bd:97:99:e6:37:97:58:b2:d3:fe:6d:3f:01:e7:48:
                    a5:8d:57:a1:de:e2:8b:80:8d:76:39:cb:1e:b8:61:
                    f1:35:af:8a:e2:65:17:97:89:44:bb:cb:e7:04:9b:
                    06:f1:98:d4:1e:d1:50:c0:24:b9:6a:82:d5:a2:b5:
                    0c:92:70:28:0d:bf:cc:9b:30:9d:81:88:ab:f5:ec:
                    4d:db:df:6f:8c:a7:58:02:59:98:a3:58:a4:1d:2f:
                    ac:4c:8c:fc:5b:c3:96:04:bf:17:01:e9:79:5a:12:
                    d9:12:b8:bf:27:1c:f0:f4:9f:7b:d0:0c:f1:e8:4b:
                    76:1c:1d:ad:b4:61:49:58:1d:71:10:75:ed:3c:05:
                    25:e8:31:e9:84:43:33:a7:3f:36:1b:9a:f7:45:e9:
                    44:26:2b:fb:56:53:16:20:8d:43:02:17:99:f2:d7:
                    7d:fe:4f:9a:0f:0b:6e:45:ed:b2:22:10:ea:27:94:
                    a1:3a:08:6e:a4:48:a4:ef:15:42:f9:7e:b3:33:a9:
                    00:83:4a:7b:a6:5f:b7:f8:d4:7f:d5:cc:2d:1f:60:
                    7d:5c:b0:27:33:9b:23:44:ed:89:c3:bc:a3:8d:be:
                    51:9b:2c:5f:a1:20:3a:3d:25:5a:18:e1:b4:6d:ae:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AD:56:DB:6A:CD:1B:EC:C3:40:7A:9B:6B:C2:A9:31:5A:FD:78:E4
            X509v3 Authority Key Identifier:
                keyid:57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/J61W22rNG-zDQHqba8KpMVr9eOQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.225.80.0/24
                IPv6:
                  2a11:e600::/29

    Signature Algorithm: sha256WithRSAEncryption
         33:6b:a9:d3:38:a3:49:88:bd:3d:6a:4e:da:76:60:0a:e6:ab:
         75:b9:a3:f8:9b:ef:1d:d9:3f:3b:6f:82:cd:f9:ad:8d:97:e7:
         9b:f7:19:52:25:09:ca:10:fc:3a:77:33:8d:bf:1f:51:c0:f0:
         3a:97:78:61:9f:e9:03:af:35:49:05:5e:d7:ed:4b:77:67:6e:
         67:8a:17:d1:02:5b:b2:24:cf:d5:5a:e3:8a:06:53:74:7c:11:
         73:b4:83:e5:b5:ca:db:3d:9b:14:e9:1f:ea:0a:ea:c0:fa:6f:
         3c:6c:26:fe:74:94:79:17:52:80:29:d4:57:8b:0b:eb:55:c8:
         66:ff:45:95:bd:39:80:b9:e2:9c:9f:19:df:0e:5c:0f:76:02:
         06:b7:25:7b:cd:10:cc:cb:b1:c2:8e:f7:8a:0f:01:89:bd:89:
         28:4f:e9:37:e0:0c:e9:69:95:29:39:bc:5f:a5:02:44:c8:d2:
         82:e9:d0:d5:2e:64:a5:0c:70:eb:37:19:ca:6a:22:df:09:31:
         4b:1a:e7:20:6a:5e:a7:a3:b9:20:c8:b6:8c:2a:6b:9d:62:68:
         1a:27:bd:54:ac:d2:5a:b8:3d:e1:bd:5d:ae:2c:bb:90:89:8a:
         e8:42:3d:4f:62:71:8e:8d:f0:41:6d:12:c5:a3:32:e2:0e:13:
         85:b0:fd:b2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQg1iZp1L/XTdDIrlruqxqSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZmJiNmViMmNlYzlhOWI3YmI4MWEzYjE2MGMxYWFiOTkw
ZTQ4MjYwHhcNMjUwMTAxMDc0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2FkNTZkYjZhY2QxYmVjYzM0MDdhOWI2YmMyYTkzMTVhZmQ3OGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFmV2VqxexUw1xsrMSC9l5nmN5dY
stP+bT8B50iljVeh3uKLgI12OcseuGHxNa+K4mUXl4lEu8vnBJsG8ZjUHtFQwCS5
aoLVorUMknAoDb/MmzCdgYir9exN299vjKdYAlmYo1ikHS+sTIz8W8OWBL8XAel5
WhLZEri/Jxzw9J970Azx6Et2HB2ttGFJWB1xEHXtPAUl6DHphEMzpz82G5r3RelE
Jiv7VlMWII1DAheZ8td9/k+aDwtuRe2yIhDqJ5ShOghupEik7xVC+X6zM6kAg0p7
pl+3+NR/1cwtH2B9XLAnM5sjRO2Jw7yjjb5RmyxfoSA6PSVaGOG0ba5TXwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCetVttqzRvsw0B6m2vCqTFa/XjkMB8GA1UdIwQY
MBaAFFf7tuss7Jqbe7gaOxYMGquZDkgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVl91MjZ5enNtcHQ3dUJvN0Znd2FxNWtPU0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81ODg4ZmYtM2I4ZS00NTU2LWFkZjQt
NGQ5ZWNmY2UwZGJjLzEvSjYxVzIyck5HLXpEUUhxYmE4S3BNVnI5ZU9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81ODg4ZmYtM2I4ZS00NTU2LWFkZjQtNGQ5ZWNmY2UwZGJj
LzEvVl91MjZ5enNtcHQ3dUJvN0Znd2FxNWtPU0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw+FQMA0E
AgACMAcDBQMqEeYAMA0GCSqGSIb3DQEBCwUAA4IBAQAza6nTOKNJiL09ak7admAK
5qt1uaP4m+8d2T87b4LN+a2Nl+eb9xlSJQnKEPw6dzONvx9RwPA6l3hhn+kDrzVJ
BV7X7Ut3Z25nihfRAluyJM/VWuOKBlN0fBFztIPltcrbPZsU6R/qCurA+m88bCb+
dJR5F1KAKdRXiwvrVchm/0WVvTmAueKcnxnfDlwPdgIGtyV7zRDMy7HCjveKDwGJ
vYkoT+k34AzpaZUpObxfpQJEyNKC6dDVLmSlDHDrNxnKaiLfCTFLGucgal6no7kg
yLaMKmudYmgaJ71UrNJauD3hvV2uLLuQiYroQj1PYnGOjfBBbRLFozLiDhOFsP2y
-----END CERTIFICATE-----