Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/_nQyzxD5tzJPLFHKcoFX_hH-tT8.roa
File:                     _nQyzxD5tzJPLFHKcoFX_hH-tT8.roa (raw, json)
Hash identifier:          K943OWLrTeetJ5gY0wxowSl9TJP/OQ1YX347sbUwBP8=
Subject key identifier:   FE:74:32:CF:10:F9:B7:32:4F:2C:51:CA:72:81:57:FE:11:FE:B5:3F
Certificate issuer:       /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial:       01942747949AB4C7FFBAF4FAD4BF57EA949C
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/_nQyzxD5tzJPLFHKcoFX_hH-tT8.roa
Signing time:             Thu 02 Jan 2025 13:49:50 +0000
ROA not before:           Thu 02 Jan 2025 13:49:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44765
IP address blocks:        92.61.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:94:9a:b4:c7:ff:ba:f4:fa:d4:bf:57:ea:94:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
        Validity
            Not Before: Jan  2 13:49:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fe7432cf10f9b7324f2c51ca728157fe11feb53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:91:58:3e:5d:96:0a:a2:46:9c:6e:7e:e0:
                    22:2d:44:6a:d9:c0:25:af:71:a0:1f:65:67:0e:2e:
                    58:00:66:60:cd:be:73:01:da:ef:f9:c2:71:a0:8d:
                    4c:ff:08:05:37:72:13:8f:43:3a:b4:15:bc:3c:e8:
                    e5:68:d5:b7:56:3a:be:65:8b:7d:38:85:b4:6a:51:
                    8c:99:b3:97:02:af:7f:15:3b:2c:a1:e8:97:19:a5:
                    eb:05:98:5d:3b:5c:47:2a:d0:0d:d4:a4:1a:ae:4d:
                    53:44:33:b9:61:88:38:26:eb:3d:ce:4f:05:87:cf:
                    c0:c5:f6:2d:7d:5c:33:17:e1:db:cc:22:7d:1c:e2:
                    ec:fc:da:f5:c9:58:f1:88:7a:cb:f3:56:58:2f:4e:
                    f7:ff:a6:a3:f2:07:0c:4a:4d:f5:d1:f4:82:23:38:
                    38:99:95:d5:9a:46:4f:96:1e:70:5a:2f:b0:6a:e2:
                    aa:6a:40:68:9d:2a:18:d5:39:06:68:04:1d:98:1c:
                    23:ea:26:7d:d0:dc:ed:ca:56:6f:39:c1:10:0f:da:
                    37:fd:5b:3c:45:6c:b5:02:e9:e8:2e:fb:c2:f1:21:
                    eb:57:2b:53:f5:d1:b2:5f:74:6d:db:64:e7:72:f9:
                    c3:5a:9f:cd:36:22:70:97:b8:77:a7:7f:96:31:13:
                    68:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:74:32:CF:10:F9:B7:32:4F:2C:51:CA:72:81:57:FE:11:FE:B5:3F
            X509v3 Authority Key Identifier:
                keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/_nQyzxD5tzJPLFHKcoFX_hH-tT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.61.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:fa:be:05:94:45:ef:21:ed:81:f8:0e:e2:2c:53:0f:9e:88:
         28:97:0d:69:fd:38:ac:45:9c:93:5c:e8:e8:1b:e1:77:b2:4a:
         4e:58:b9:ed:59:81:6e:95:57:3b:30:29:3b:66:87:bd:3c:5c:
         d7:6c:65:16:d0:67:3a:89:2c:f9:32:bb:c3:b4:70:bf:b5:fa:
         73:8e:6a:db:1d:84:3e:cc:e6:aa:21:80:ce:03:40:98:98:71:
         55:7c:9f:b8:98:0d:bf:cf:dc:a3:30:56:78:04:a6:de:72:84:
         db:26:41:3a:1c:71:ce:c0:83:e4:8f:f3:0d:94:15:7e:fe:de:
         3c:11:5e:52:a8:6f:3f:10:9c:49:5c:60:13:85:f2:cb:c8:d4:
         a2:57:7b:d1:de:87:33:92:27:b0:24:dc:b4:76:b1:1a:89:79:
         5e:f3:07:28:17:a2:46:44:6e:a7:17:74:09:4c:e2:6d:82:d8:
         6a:f9:e8:cb:7a:a0:b8:8f:2b:1b:84:01:ce:78:f7:cf:90:2b:
         b0:0d:90:43:57:ef:01:3c:c8:f8:a0:93:7d:b3:a0:48:e6:d2:
         6b:f9:82:06:eb:ce:2f:2f:51:66:51:8e:2d:f9:d1:d7:20:f3:
         b8:9e:36:5b:55:8a:95:30:a7:d1:c0:86:ff:dd:9d:7b:b8:2e:
         30:59:2c:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR5SatMf/uvT61L9X6pScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMWM4OTk3YTM1NGJjN2Q0ZTVhNjBhOWY0MjQzOGExODJm
YTk5OGEwHhcNMjUwMTAyMTM0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTc0MzJjZjEwZjliNzMyNGYyYzUxY2E3MjgxNTdmZTExZmViNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMiRWD5dlgqiRpxufuAiLURq2cAl
r3GgH2VnDi5YAGZgzb5zAdrv+cJxoI1M/wgFN3ITj0M6tBW8POjlaNW3Vjq+ZYt9
OIW0alGMmbOXAq9/FTssoeiXGaXrBZhdO1xHKtAN1KQark1TRDO5YYg4Jus9zk8F
h8/AxfYtfVwzF+HbzCJ9HOLs/Nr1yVjxiHrL81ZYL073/6aj8gcMSk310fSCIzg4
mZXVmkZPlh5wWi+wauKqakBonSoY1TkGaAQdmBwj6iZ90NztylZvOcEQD9o3/Vs8
RWy1AunoLvvC8SHrVytT9dGyX3Rt22TncvnDWp/NNiJwl7h3p3+WMRNoCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP50Ms8Q+bcyTyxRynKBV/4R/rU/MB8GA1UdIwQY
MBaAFPAciZejVLx9TlpgqfQkOKGC+pmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMt
YzI3YzRhNjEwYmQzLzEvX25ReXp4RDV0ekpQTEZIS2NvRlhfaEgtdFQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMtYzI3YzRhNjEwYmQz
LzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXD08MA0G
CSqGSIb3DQEBCwUAA4IBAQCo+r4FlEXvIe2B+A7iLFMPnogolw1p/TisRZyTXOjo
G+F3skpOWLntWYFulVc7MCk7Zoe9PFzXbGUW0Gc6iSz5MrvDtHC/tfpzjmrbHYQ+
zOaqIYDOA0CYmHFVfJ+4mA2/z9yjMFZ4BKbecoTbJkE6HHHOwIPkj/MNlBV+/t48
EV5SqG8/EJxJXGAThfLLyNSiV3vR3oczkiewJNy0drEaiXle8wcoF6JGRG6nF3QJ
TOJtgthq+ejLeqC4jysbhAHOePfPkCuwDZBDV+8BPMj4oJN9s6BI5tJr+YIG684v
L1FmUY4t+dHXIPO4njZbVYqVMKfRwIb/3Z17uC4wWSwj
-----END CERTIFICATE-----