Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/vs48n0p-DmtoL_C4SBPia6Jvd8w.roa
File:                     vs48n0p-DmtoL_C4SBPia6Jvd8w.roa (raw, json)
Hash identifier:          tuA8X++lNgFfnnvP2QSYPZLLrumXdRybTYvGT2qVHr0=
Subject key identifier:   BE:CE:3C:9F:4A:7E:0E:6B:68:2F:F0:B8:48:13:E2:6B:A2:6F:77:CC
Certificate issuer:       /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial:       01942369E862D4A7F4D4BB5BFC05C24ECEFB
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/vs48n0p-DmtoL_C4SBPia6Jvd8w.roa
Signing time:             Wed 01 Jan 2025 19:48:50 +0000
ROA not before:           Wed 01 Jan 2025 19:48:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151673
IP address blocks:        2a0f:7803:fc00::/40 maxlen: 48
                          2a0f:7803:fd00::/40 maxlen: 48
                          2a0f:7803:fd12::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:e8:62:d4:a7:f4:d4:bb:5b:fc:05:c2:4e:ce:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
        Validity
            Not Before: Jan  1 19:48:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bece3c9f4a7e0e6b682ff0b84813e26ba26f77cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:60:dd:fd:44:9e:28:80:18:7c:89:3e:6b:
                    05:bb:a4:60:ca:aa:1f:a0:3a:bc:32:96:6c:ff:a7:
                    d8:c7:4f:f8:4c:55:e3:93:e9:e6:f7:81:3c:cf:30:
                    bc:48:4f:37:1e:5d:2f:1c:01:7a:d0:0a:a1:cd:10:
                    38:f5:28:7c:dd:b6:79:e2:fb:d2:e9:b9:8c:52:ac:
                    ba:76:42:55:fc:e2:29:90:b7:0d:d4:90:04:26:5f:
                    c3:78:6c:25:94:9c:fb:22:62:6b:94:00:d4:d3:38:
                    7a:5e:02:d1:6c:4c:7e:fb:95:f8:0f:00:8f:ce:b3:
                    81:cf:dd:fd:b2:98:75:14:74:07:c4:43:79:95:90:
                    60:df:3b:36:8b:28:69:ee:a5:0d:d1:4a:30:75:4c:
                    96:17:7b:7b:67:a3:69:d3:26:c6:37:01:c3:a0:5b:
                    bd:5d:73:e7:f9:ba:13:d2:e6:59:5b:3e:dc:d1:a0:
                    97:aa:88:f4:6c:4f:a7:28:af:97:dd:ac:55:c5:23:
                    70:5d:e9:51:22:06:a4:2e:00:38:04:10:89:95:cd:
                    85:4a:e0:c4:5a:82:84:c9:9a:4a:8c:43:06:22:5e:
                    8a:09:86:a9:0b:39:fb:73:c3:df:75:f1:a3:da:81:
                    62:70:e1:be:56:2c:a9:0d:3c:cd:2a:53:67:46:8c:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CE:3C:9F:4A:7E:0E:6B:68:2F:F0:B8:48:13:E2:6B:A2:6F:77:CC
            X509v3 Authority Key Identifier:
                keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/vs48n0p-DmtoL_C4SBPia6Jvd8w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:7803:fc00::/39

    Signature Algorithm: sha256WithRSAEncryption
         4a:89:49:bf:70:3e:c3:e0:9b:c1:6a:5d:86:aa:65:85:31:65:
         11:0c:05:64:f9:8a:79:c7:20:a8:bc:a4:b4:d8:c8:d0:6c:3c:
         31:c5:b2:8f:a3:6f:8e:3c:b1:f4:bc:e0:60:0d:fd:6b:c2:9d:
         be:71:bc:e6:fd:dc:11:97:2d:d1:5c:8a:bc:f4:69:a5:0a:0a:
         08:b4:db:f6:98:b8:88:70:98:e5:f2:5d:d7:92:45:d1:79:a6:
         66:43:b2:b6:a1:4a:16:e3:19:41:88:8a:29:8c:35:f4:aa:21:
         d0:17:4b:6f:72:93:0b:08:99:bf:fd:d6:60:bc:6f:f1:f8:18:
         5a:42:90:78:ae:eb:29:24:29:0f:53:f2:bc:d7:a7:1f:cd:39:
         9e:34:17:cd:0d:6f:0a:42:11:c4:8f:8b:e4:ee:2d:40:91:bf:
         ca:83:70:2b:7d:2e:48:8d:24:af:5b:be:bf:a5:c5:43:21:91:
         5a:af:4e:a7:0d:76:1d:dc:a1:a0:03:1f:aa:9c:36:d0:af:1a:
         3c:6f:f0:5d:3c:bd:c6:75:43:1e:d3:27:5b:bb:9e:60:5d:c5:
         7c:82:c4:89:4d:4e:bf:dd:d9:04:5c:65:b5:37:5a:af:d1:cc:
         ce:eb:f6:66:a2:ac:c1:92:47:78:01:42:df:cf:ba:2b:1b:da:
         b1:f9:1b:12
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQjaehi1Kf01Ltb/AXCTs77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw
ZDcwZTUwHhcNMjUwMTAxMTk0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWNlM2M5ZjRhN2UwZTZiNjgyZmYwYjg0ODEzZTI2YmEyNmY3N2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQNg3f1EniiAGHyJPmsFu6Rgyqof
oDq8MpZs/6fYx0/4TFXjk+nm94E8zzC8SE83Hl0vHAF60AqhzRA49Sh83bZ54vvS
6bmMUqy6dkJV/OIpkLcN1JAEJl/DeGwllJz7ImJrlADU0zh6XgLRbEx++5X4DwCP
zrOBz939sph1FHQHxEN5lZBg3zs2iyhp7qUN0UowdUyWF3t7Z6Np0ybGNwHDoFu9
XXPn+boT0uZZWz7c0aCXqoj0bE+nKK+X3axVxSNwXelRIgakLgA4BBCJlc2FSuDE
WoKEyZpKjEMGIl6KCYapCzn7c8PfdfGj2oFicOG+ViypDTzNKlNnRozZ1wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFL7OPJ9Kfg5raC/wuEgT4muib3fMMB8GA1UdIwQY
MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt
ZjViNmE3MThmNGI1LzEvdnM0OG4wcC1EbXRvTF9DNFNCUGlhNkp2ZDh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1
LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKg94A/ww
DQYJKoZIhvcNAQELBQADggEBAEqJSb9wPsPgm8FqXYaqZYUxZREMBWT5innHIKi8
pLTYyNBsPDHFso+jb448sfS84GAN/WvCnb5xvOb93BGXLdFcirz0aaUKCgi02/aY
uIhwmOXyXdeSRdF5pmZDsrahShbjGUGIiimMNfSqIdAXS29ykwsImb/91mC8b/H4
GFpCkHiu6ykkKQ9T8rzXpx/NOZ40F80NbwpCEcSPi+TuLUCRv8qDcCt9LkiNJK9b
vr+lxUMhkVqvTqcNdh3coaADH6qcNtCvGjxv8F08vcZ1Qx7TJ1u7nmBdxXyCxIlN
Tr/d2QRcZbU3Wq/RzM7r9mairMGSR3gBQt/Puisb2rH5GxI=
-----END CERTIFICATE-----