Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/N6llj_Nn67CQ8O6AIFES8AWwQs8.roa
File:                     N6llj_Nn67CQ8O6AIFES8AWwQs8.roa (raw, json)
Hash identifier:          21WkGBMqqPliyHndbz25XxzamlXi74XBhokGQz0dnQw=
Subject key identifier:   37:A9:65:8F:F3:67:EB:B0:90:F0:EE:80:20:51:12:F0:05:B0:42:CF
Certificate issuer:       /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial:       019455D63E00F366FB6358F96EF9F144845A
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/N6llj_Nn67CQ8O6AIFES8AWwQs8.roa
Signing time:             Sat 11 Jan 2025 14:48:11 +0000
ROA not before:           Sat 11 Jan 2025 14:48:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214579
IP address blocks:        2a0f:7802:d000::/40 maxlen: 48
                          2a0f:7803:dc00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:55:d6:3e:00:f3:66:fb:63:58:f9:6e:f9:f1:44:84:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
        Validity
            Not Before: Jan 11 14:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=37a9658ff367ebb090f0ee80205112f005b042cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:20:57:a4:eb:c6:ab:92:04:4d:fe:ee:6a:
                    25:b6:92:96:9b:5c:8c:30:45:78:21:61:20:68:4a:
                    21:73:26:6f:91:4d:8a:c2:7d:0e:f0:4c:f7:e5:85:
                    b4:e8:38:d5:5b:86:91:7e:50:b6:6a:05:d7:a1:84:
                    df:09:94:15:1a:a2:3d:f9:07:81:3d:73:e2:25:fd:
                    52:9d:2f:ba:7a:6b:4e:75:65:68:f0:b9:74:0e:d7:
                    4f:ee:be:01:42:83:61:74:b0:00:96:90:49:ba:90:
                    b0:d2:ff:9b:a9:0f:d4:cf:c0:46:73:6a:0f:ca:a5:
                    56:e6:5f:7e:8b:6a:b2:84:fa:72:35:e1:16:f1:9e:
                    83:90:bd:c7:cf:06:13:68:b6:fc:07:0f:72:3a:2a:
                    01:6d:0b:d0:c1:93:a7:47:45:7b:60:c4:43:48:b8:
                    e2:a3:e6:50:33:1e:eb:07:4e:22:b4:e4:c5:9d:ac:
                    2f:2f:e2:35:53:aa:5a:eb:cf:f3:98:a7:c2:13:a5:
                    4b:01:8f:f7:45:12:14:80:c1:d9:22:0c:7b:74:bd:
                    9a:31:5a:66:47:ed:bd:6f:a9:9b:a9:80:55:11:0a:
                    12:e0:c5:db:90:15:3f:f2:f3:4a:93:76:72:33:03:
                    cc:3a:ae:e7:e7:3b:86:fe:8e:23:62:0b:2e:dd:93:
                    17:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A9:65:8F:F3:67:EB:B0:90:F0:EE:80:20:51:12:F0:05:B0:42:CF
            X509v3 Authority Key Identifier:
                keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/N6llj_Nn67CQ8O6AIFES8AWwQs8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:7802:d000::/40
                  2a0f:7803:dc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b0:5d:9a:04:50:6d:b0:4e:2c:1e:a3:95:97:ee:e2:49:16:ef:
         72:0c:e8:7f:da:07:f1:fd:d9:b8:b2:7a:cf:85:da:49:29:c9:
         be:2b:0f:ef:2b:61:c8:0b:2e:17:03:7d:32:8f:4b:00:4d:3a:
         ef:d7:0d:3d:01:e3:72:1c:56:80:15:01:a9:c9:ee:69:39:42:
         94:3c:ef:a1:2f:2f:f3:b1:32:c3:25:0f:3f:30:5f:7c:12:18:
         6d:a7:e5:66:73:b1:5e:1d:62:78:e2:26:7d:de:41:06:ad:dd:
         73:f3:73:aa:18:26:80:05:1e:8d:2f:e9:ff:12:72:9d:83:ec:
         c1:7e:e6:04:e4:f4:c9:24:b9:58:d4:cb:72:39:1a:78:1a:31:
         3d:95:17:3e:d6:60:4f:8e:79:cf:75:18:24:cc:59:97:35:6f:
         20:cb:6f:95:08:53:8f:2d:4d:6d:28:32:df:a5:7a:b4:d2:56:
         c8:b5:6a:92:ca:5a:3e:c6:8e:73:2b:e4:45:4e:71:50:1d:67:
         7f:94:40:89:a0:e8:0d:7e:80:5f:14:b8:7b:e7:f4:c5:a2:0c:
         8f:81:41:ff:45:b0:33:02:be:fc:03:2b:81:f7:05:a0:20:d8:
         0a:97:db:be:48:25:0b:05:40:93:c5:8a:f8:6f:9b:1d:10:21:
         52:c9:96:e2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAZRV1j4A82b7Y1j5bvnxRIRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw
ZDcwZTUwHhcNMjUwMTExMTQ0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2E5NjU4ZmYzNjdlYmIwOTBmMGVlODAyMDUxMTJmMDA1YjA0MmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulkgV6TrxquSBE3+7moltpKWm1yM
MEV4IWEgaEohcyZvkU2Kwn0O8Ez35YW06DjVW4aRflC2agXXoYTfCZQVGqI9+QeB
PXPiJf1SnS+6emtOdWVo8Ll0DtdP7r4BQoNhdLAAlpBJupCw0v+bqQ/Uz8BGc2oP
yqVW5l9+i2qyhPpyNeEW8Z6DkL3HzwYTaLb8Bw9yOioBbQvQwZOnR0V7YMRDSLji
o+ZQMx7rB04itOTFnawvL+I1U6pa68/zmKfCE6VLAY/3RRIUgMHZIgx7dL2aMVpm
R+29b6mbqYBVEQoS4MXbkBU/8vNKk3ZyMwPMOq7n5zuG/o4jYgsu3ZMXjwIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFDepZY/zZ+uwkPDugCBREvAFsELPMB8GA1UdIwQY
MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt
ZjViNmE3MThmNGI1LzEvTjZsbGpfTm42N0NROE82QUlGRVM4QVd3UXM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1
LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKg94AtAD
BgAqD3gD3DANBgkqhkiG9w0BAQsFAAOCAQEAsF2aBFBtsE4sHqOVl+7iSRbvcgzo
f9oH8f3ZuLJ6z4XaSSnJvisP7ythyAsuFwN9Mo9LAE0679cNPQHjchxWgBUBqcnu
aTlClDzvoS8v87EywyUPPzBffBIYbaflZnOxXh1ieOImfd5BBq3dc/NzqhgmgAUe
jS/p/xJynYPswX7mBOT0ySS5WNTLcjkaeBoxPZUXPtZgT455z3UYJMxZlzVvIMtv
lQhTjy1NbSgy36V6tNJWyLVqkspaPsaOcyvkRU5xUB1nf5RAiaDoDX6AXxS4e+f0
xaIMj4FB/0WwMwK+/AMrgfcFoCDYCpfbvkglCwVAk8WK+G+bHRAhUsmW4g==
-----END CERTIFICATE-----