Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa
File:                     9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa (raw, json)
Hash identifier:          C4dGnq5v0d5/X1v0Ow3x2iZJ1sOJLLWISEpoXWZpLas=
Subject key identifier:   F5:8F:DD:25:3B:C7:A8:9E:BF:3B:61:C3:42:C7:5B:E1:83:D0:38:F3
Certificate issuer:       /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial:       01941FFA56DAC24BC26E89114DD40F44C0B2
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa
Signing time:             Wed 01 Jan 2025 03:48:07 +0000
ROA not before:           Wed 01 Jan 2025 03:48:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200273
IP address blocks:        2001:678:7f8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:56:da:c2:4b:c2:6e:89:11:4d:d4:0f:44:c0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
        Validity
            Not Before: Jan  1 03:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f58fdd253bc7a89ebf3b61c342c75be183d038f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:93:5a:29:e0:aa:96:fd:6b:be:dc:e4:d4:
                    97:8a:7d:e0:80:2a:a3:3f:5a:b1:68:b7:1b:10:c7:
                    d2:90:28:cd:d3:0a:03:13:02:8f:26:cd:4f:05:cd:
                    07:c3:ca:07:5d:3a:37:11:cf:e4:6e:f8:0e:10:fd:
                    74:33:a8:15:3e:c7:77:a8:ed:d7:4f:bc:69:be:29:
                    c8:48:6b:f0:69:d1:a2:75:76:1b:f6:61:32:55:47:
                    6c:23:98:87:e5:90:78:69:d2:4f:92:6f:2c:9a:14:
                    d4:b3:fe:af:bd:36:9a:37:45:cb:b8:30:e7:b6:d2:
                    16:df:b0:04:75:11:70:94:c1:21:80:8a:f8:0b:0d:
                    ac:a2:6d:39:c4:e2:6c:44:8e:9e:76:b4:5e:56:28:
                    c6:11:a3:f1:6e:dd:ad:68:e0:fb:79:83:95:e2:f0:
                    d9:bf:19:fc:af:aa:62:3c:c2:70:fb:c9:a3:c5:ba:
                    b2:f3:4e:11:d5:b3:94:4a:10:d1:f1:b9:2c:23:af:
                    ff:af:b7:b0:6f:35:79:30:e3:d8:6e:52:b1:2c:4e:
                    c7:ae:41:36:08:57:3d:4b:8a:7c:08:e8:7e:f9:bc:
                    32:0e:b7:55:ba:cb:bf:3d:ef:ab:33:e0:42:ff:b3:
                    89:63:2a:91:a0:6b:ab:ab:2c:7b:90:a8:51:3a:e9:
                    70:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8F:DD:25:3B:C7:A8:9E:BF:3B:61:C3:42:C7:5B:E1:83:D0:38:F3
            X509v3 Authority Key Identifier:
                keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:7f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:36:89:10:7e:b1:4d:7f:94:10:78:ee:bc:7a:66:a2:a4:0b:
         35:5f:83:0b:14:ae:20:73:0f:0b:84:26:b1:d3:9c:d7:1a:cf:
         9a:f0:da:9a:f8:77:0d:0d:3e:0d:2e:26:74:fc:98:75:34:aa:
         06:b0:ab:69:f8:c9:e1:43:1b:41:ea:c2:26:8e:ea:69:f2:f2:
         09:3d:24:7d:7b:30:e8:16:9b:0b:3a:f4:e7:ab:50:19:05:24:
         92:90:4e:a7:71:e0:eb:a6:d7:d6:15:c2:67:0c:81:90:cb:4f:
         81:d3:0f:0b:f5:bf:ca:3c:41:20:21:e4:4a:16:87:3b:3f:e0:
         b0:19:1a:bc:40:2c:91:08:32:c4:0a:79:7f:6a:cb:68:f3:c2:
         da:b0:29:ae:16:db:80:02:4e:b7:9d:21:63:53:f4:de:94:35:
         10:5c:fa:79:3f:b4:8b:0f:bb:8e:b6:b8:69:c1:b0:a1:15:d9:
         83:c7:66:5c:23:22:7f:7d:47:0a:90:87:c8:06:26:d4:cd:bb:
         a7:c7:56:1c:4c:48:12:9b:04:02:1f:44:b6:73:88:22:fe:0f:
         4e:15:84:69:cb:13:0e:f7:ce:5d:e6:cd:b0:6c:de:87:e2:45:
         5a:c7:9e:34:14:de:0a:d5:51:1a:f9:56:18:07:4a:4e:53:c7:
         a0:2b:b9:83
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQf+lbawkvCbokRTdQPRMCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MWM5NmU5MzFlZWU0MWI4OTlkNjJjN2RiODM2MzM0NDZh
M2M0MmIwHhcNMjUwMTAxMDM0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNThmZGQyNTNiYzdhODllYmYzYjYxYzM0MmM3NWJlMTgzZDAzOGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopOTWingqpb9a77c5NSXin3ggCqj
P1qxaLcbEMfSkCjN0woDEwKPJs1PBc0Hw8oHXTo3Ec/kbvgOEP10M6gVPsd3qO3X
T7xpvinISGvwadGidXYb9mEyVUdsI5iH5ZB4adJPkm8smhTUs/6vvTaaN0XLuDDn
ttIW37AEdRFwlMEhgIr4Cw2som05xOJsRI6edrReVijGEaPxbt2taOD7eYOV4vDZ
vxn8r6piPMJw+8mjxbqy804R1bOUShDR8bksI6//r7ewbzV5MOPYblKxLE7HrkE2
CFc9S4p8COh++bwyDrdVusu/Pe+rM+BC/7OJYyqRoGurqyx7kKhROulwPwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPWP3SU7x6ievzthw0LHW+GD0DjzMB8GA1UdIwQY
MBaAFKQclukx7uQbiZ1ix9uDYzRGo8QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEJ5VzZUSHU1QnVKbldMSDI0TmpORWFqeENzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YmRkNzQtOGNkMC00Y2M0LThiNjct
ZjgzZTNjNzFlZmNiLzEvOVlfZEpUdkhxSjZfTzJIRFFzZGI0WVBRT1BNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82YmRkNzQtOGNkMC00Y2M0LThiNjctZjgzZTNjNzFlZmNi
LzEvcEJ5VzZUSHU1QnVKbldMSDI0TmpORWFqeENzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAf4
MA0GCSqGSIb3DQEBCwUAA4IBAQBSNokQfrFNf5QQeO68emaipAs1X4MLFK4gcw8L
hCax05zXGs+a8Nqa+HcNDT4NLiZ0/Jh1NKoGsKtp+MnhQxtB6sImjupp8vIJPSR9
ezDoFpsLOvTnq1AZBSSSkE6nceDrptfWFcJnDIGQy0+B0w8L9b/KPEEgIeRKFoc7
P+CwGRq8QCyRCDLECnl/asto88LasCmuFtuAAk63nSFjU/TelDUQXPp5P7SLD7uO
trhpwbChFdmDx2ZcIyJ/fUcKkIfIBibUzbunx1YcTEgSmwQCH0S2c4gi/g9OFYRp
yxMO985d5s2wbN6H4kVax540FN4K1VEa+VYYB0pOU8egK7mD
-----END CERTIFICATE-----