Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/zI4FpdIghtPCZyOnqG0wx03B6uE.roa
File:                     zI4FpdIghtPCZyOnqG0wx03B6uE.roa (raw, json)
Hash identifier:          tuKRfX4LXd/ZcZQ09EzOh/eWKFCz3S2F6Cx8w9PCC+c=
Subject key identifier:   CC:8E:05:A5:D2:20:86:D3:C2:67:23:A7:A8:6D:30:C7:4D:C1:EA:E1
Certificate issuer:       /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial:       018CC94DC883EE68D675F4532D5D22553EFB
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/zI4FpdIghtPCZyOnqG0wx03B6uE.roa
Signing time:             Tue 02 Jan 2024 08:32:47 +0000
ROA not before:           Tue 02 Jan 2024 08:32:47 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50297
IP address blocks:        193.200.209.0/24 maxlen: 24
                          185.110.132.0/24 maxlen: 24
                          2a06:5600:28f8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4d:c8:83:ee:68:d6:75:f4:53:2d:5d:22:55:3e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
        Validity
            Not Before: Jan  2 08:32:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cc8e05a5d22086d3c26723a7a86d30c74dc1eae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:44:36:3d:64:53:c5:86:d5:00:3a:5c:d6:68:
                    41:58:2a:56:f0:8f:8a:64:13:6c:b6:2b:54:8e:8c:
                    5e:04:44:aa:d3:6a:01:99:22:95:89:3f:34:49:ff:
                    5b:5d:ef:c4:9e:9b:de:ca:69:06:a4:ed:9e:98:43:
                    82:de:2f:9d:35:23:71:db:27:9f:32:cd:87:f3:58:
                    ef:75:1c:2e:b9:d0:bb:05:f1:c3:6d:be:47:50:31:
                    ff:41:05:89:d2:39:ba:52:96:b5:c7:c7:c4:4c:ec:
                    6b:9b:56:54:a5:fb:e2:59:d3:83:30:5f:4f:2b:b3:
                    44:bc:40:96:b8:2c:6c:5b:b4:bd:51:a9:d5:9b:5d:
                    b1:2f:50:17:87:6e:e1:5f:80:31:3b:5b:7a:72:ae:
                    42:a9:fc:d0:29:6a:de:be:cb:51:b9:33:90:fb:83:
                    35:0f:d0:17:ae:b4:93:26:9c:ee:3e:83:01:87:62:
                    18:5e:78:25:62:ea:51:74:37:67:89:1d:71:6b:2d:
                    55:69:d0:0b:f7:4a:c5:52:fe:5c:bc:a8:66:d4:a7:
                    a5:c8:ef:f8:bd:9c:bf:6b:24:3b:9e:c9:83:fe:f0:
                    d6:f5:97:ca:e2:90:84:09:cc:02:6f:4b:2c:0e:f5:
                    fc:8d:19:b8:b8:d4:50:06:49:0f:45:62:5e:f9:73:
                    2b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8E:05:A5:D2:20:86:D3:C2:67:23:A7:A8:6D:30:C7:4D:C1:EA:E1
            X509v3 Authority Key Identifier:
                keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/zI4FpdIghtPCZyOnqG0wx03B6uE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.110.132.0/24
                  193.200.209.0/24
                IPv6:
                  2a06:5600:28f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:dc:0b:9e:49:93:fa:96:c2:d7:e6:27:8c:ad:25:9d:3d:94:
         33:93:18:cc:8c:10:f4:44:dc:a4:3e:17:8d:69:0f:01:8c:77:
         54:b2:77:bf:d3:4c:0a:97:65:8e:8b:44:a0:a2:44:ae:87:08:
         6a:0c:a0:c8:04:31:da:86:5d:b6:a5:ad:c6:36:03:fc:0d:71:
         ec:e1:e3:7c:29:b3:c3:af:55:6d:0e:ca:86:87:98:f0:f2:5f:
         af:f5:5b:5d:86:da:16:89:f9:6c:7f:e5:b9:b2:8d:bd:d0:5e:
         f4:39:54:89:9f:51:c9:7c:72:28:64:01:bc:d8:ea:27:56:a2:
         19:6a:9d:8e:e9:9c:98:4c:a4:9c:8b:de:60:10:41:1c:e4:db:
         55:24:6e:fb:84:ac:4d:5c:bd:35:18:a6:af:51:60:08:09:cc:
         3a:a4:5d:de:9d:b1:4b:1c:76:59:fd:e5:5c:d0:ab:f6:30:ff:
         2a:97:7e:c3:b2:df:de:18:e3:22:ad:f0:d0:07:a6:44:28:de:
         cc:a0:71:c9:c7:ba:2c:95:6f:c8:f0:eb:10:bc:d9:95:f1:7f:
         d3:53:08:46:32:ef:34:9c:5e:8f:fe:7e:45:ca:96:cb:77:93:
         1c:6b:9d:d4:d4:3b:37:38:e9:16:e5:de:9b:1d:96:e0:1f:ca:
         fd:b6:6f:8c
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzJTciD7mjWdfRTLV0iVT77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmQwMDgyOTUzNmQ0Nzc0NWY0N2RhOWQxYThhNzJmNmRk
NDYyZDQwHhcNMjQwMTAyMDgzMjQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzhlMDVhNWQyMjA4NmQzYzI2NzIzYTdhODZkMzBjNzRkYzFlYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0Q2PWRTxYbVADpc1mhBWCpW8I+K
ZBNstitUjoxeBESq02oBmSKViT80Sf9bXe/EnpveymkGpO2emEOC3i+dNSNx2yef
Ms2H81jvdRwuudC7BfHDbb5HUDH/QQWJ0jm6Upa1x8fETOxrm1ZUpfviWdODMF9P
K7NEvECWuCxsW7S9UanVm12xL1AXh27hX4AxO1t6cq5CqfzQKWrevstRuTOQ+4M1
D9AXrrSTJpzuPoMBh2IYXnglYupRdDdniR1xay1VadAL90rFUv5cvKhm1KelyO/4
vZy/ayQ7nsmD/vDW9ZfK4pCECcwCb0ssDvX8jRm4uNRQBkkPRWJe+XMrJwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFMyOBaXSIIbTwmcjp6htMMdNwerhMB8GA1UdIwQY
MBaAFIC9AIKVNtR3RfR9qdGopy9t1GLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMt
MDliOTkyMGZlMDBmLzEvekk0RnBkSWdodFBDWnlPbnFHMHd4MDNCNnVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMtMDliOTkyMGZlMDBm
LzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuW6EAwQA
wcjRMA8EAgACMAkDBwAqBlYAKPgwDQYJKoZIhvcNAQELBQADggEBAIDcC55Jk/qW
wtfmJ4ytJZ09lDOTGMyMEPRE3KQ+F41pDwGMd1Syd7/TTAqXZY6LRKCiRK6HCGoM
oMgEMdqGXbalrcY2A/wNcezh43wps8OvVW0OyoaHmPDyX6/1W12G2haJ+Wx/5bmy
jb3QXvQ5VImfUcl8cihkAbzY6idWohlqnY7pnJhMpJyL3mAQQRzk21UkbvuErE1c
vTUYpq9RYAgJzDqkXd6dsUscdln95VzQq/Yw/yqXfsOy394Y4yKt8NAHpkQo3syg
ccnHuiyVb8jw6xC82ZXxf9NTCEYy7zScXo/+fkXKlst3kxxrndTUOzc46Rbl3psd
luAfyv22b4w=
-----END CERTIFICATE-----