Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/ZFvHbKMASPTw38lOs9oWeuw1U-4.roa
File:                     ZFvHbKMASPTw38lOs9oWeuw1U-4.roa (raw, json)
Hash identifier:          HZhplikQvG33rAVAtLNyD/3IfM/BXxh9qsmuRDaoo/w=
Subject key identifier:   64:5B:C7:6C:A3:00:48:F4:F0:DF:C9:4E:B3:DA:16:7A:EC:35:53:EE
Certificate issuer:       /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Certificate serial:       019425FDDAE612B95509D0BFCA11B6EB8270
Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/ZFvHbKMASPTw38lOs9oWeuw1U-4.roa
Signing time:             Thu 02 Jan 2025 07:49:41 +0000
ROA not before:           Thu 02 Jan 2025 07:49:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209803
IP address blocks:        193.32.156.0/22 maxlen: 22
                          2a09:880::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:da:e6:12:b9:55:09:d0:bf:ca:11:b6:eb:82:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
        Validity
            Not Before: Jan  2 07:49:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=645bc76ca30048f4f0dfc94eb3da167aec3553ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:70:eb:6b:27:f0:44:fb:d7:16:91:af:72:bf:
                    ca:8f:5e:51:55:cb:5d:4e:e1:a9:8a:35:3a:9e:b6:
                    ee:50:51:fc:8f:19:d2:a7:d2:1e:32:3a:4c:ea:00:
                    b0:03:1e:54:7c:8e:c1:2e:16:0f:35:05:5d:0d:8c:
                    e0:b1:f7:49:51:e5:c4:91:a0:a4:66:08:02:71:b2:
                    b1:ba:c4:31:7e:62:13:de:47:e5:c1:b2:7a:76:c9:
                    27:79:c0:cf:31:7b:e7:61:00:c0:8a:d9:ca:05:9e:
                    51:88:06:80:49:7c:ed:92:bc:08:36:03:9d:a1:c8:
                    68:4f:fa:1e:ba:a2:b1:4b:10:b5:0e:71:eb:55:24:
                    cc:2d:56:20:a8:0f:1c:21:6a:ca:05:dc:45:93:a7:
                    a3:28:92:c3:b5:6d:11:5c:5b:ff:81:ca:e0:9c:e9:
                    87:14:dd:97:f2:d2:fe:23:07:93:68:64:94:f2:e8:
                    17:6d:7d:6b:9b:21:df:11:2d:ab:a8:ec:a3:69:3e:
                    70:48:56:ec:46:92:e6:09:a3:77:5d:78:9f:0c:3b:
                    06:d4:04:c0:a0:30:f0:ab:68:a8:42:60:63:1d:3a:
                    1b:24:9e:be:35:af:9a:40:ad:08:1d:74:f9:c4:68:
                    e6:90:71:72:d0:21:cf:e9:f2:06:9a:94:29:bb:0c:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5B:C7:6C:A3:00:48:F4:F0:DF:C9:4E:B3:DA:16:7A:EC:35:53:EE
            X509v3 Authority Key Identifier:
                keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/ZFvHbKMASPTw38lOs9oWeuw1U-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.156.0/22
                IPv6:
                  2a09:880::/29

    Signature Algorithm: sha256WithRSAEncryption
         87:d6:a6:91:f1:5c:89:c3:e0:57:12:e7:0e:ad:a0:f0:f1:0b:
         64:33:fe:33:2c:65:59:69:7e:93:66:e2:5a:9c:dd:24:81:2e:
         e7:d2:23:96:79:f9:43:cc:6b:95:67:16:1b:ea:50:3a:ff:fe:
         4a:87:dc:c6:88:63:d2:c9:b6:5b:4c:51:d7:ca:dd:37:58:eb:
         b2:01:e3:d1:66:6d:e8:7f:ec:9d:6e:4b:77:06:64:14:7e:88:
         45:f3:11:fc:85:a4:dd:76:d6:7e:12:a8:b3:bf:e7:f5:4c:82:
         81:e3:d9:2c:16:68:7e:ff:c0:f0:0f:36:a7:e2:54:f5:08:d2:
         bc:31:0d:54:c2:28:64:08:3e:e0:45:f2:75:1f:64:b6:78:f3:
         e1:20:59:4c:8f:54:45:d8:ab:1d:1b:12:ae:f3:b6:60:63:ad:
         f8:e8:e9:58:35:57:da:7a:b8:91:f3:e0:fd:84:a7:03:c6:b3:
         93:07:61:ad:ba:91:88:4f:a2:06:b8:28:3d:3d:92:68:71:40:
         6a:8f:98:55:13:f7:ee:2c:11:7d:4d:1d:28:73:e8:6b:21:67:
         1e:48:a8:05:aa:99:eb:4f:1f:54:48:b4:50:c0:42:c1:93:0d:
         b7:59:a1:a0:8b:96:f3:15:70:57:97:29:dc:79:14:7e:f7:bd:
         06:ea:e5:84
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQl/drmErlVCdC/yhG264JwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZDlhOTQ2NzllYzlhYjMzZTY1ZTA2OWM5YWE0NDBkYjI3
M2UxNGUwHhcNMjUwMTAyMDc0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDViYzc2Y2EzMDA0OGY0ZjBkZmM5NGViM2RhMTY3YWVjMzU1M2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnDrayfwRPvXFpGvcr/Kj15RVctd
TuGpijU6nrbuUFH8jxnSp9IeMjpM6gCwAx5UfI7BLhYPNQVdDYzgsfdJUeXEkaCk
ZggCcbKxusQxfmIT3kflwbJ6dsknecDPMXvnYQDAitnKBZ5RiAaASXztkrwINgOd
ochoT/oeuqKxSxC1DnHrVSTMLVYgqA8cIWrKBdxFk6ejKJLDtW0RXFv/gcrgnOmH
FN2X8tL+IweTaGSU8ugXbX1rmyHfES2rqOyjaT5wSFbsRpLmCaN3XXifDDsG1ATA
oDDwq2ioQmBjHTobJJ6+Na+aQK0IHXT5xGjmkHFy0CHP6fIGmpQpuwxVjQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGRbx2yjAEj08N/JTrPaFnrsNVPuMB8GA1UdIwQY
MBaAFB3ZqUZ57JqzPmXgacmqRA2yc+FOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGRtcFJubnNtck0tWmVCcHlhcEVEYkp6NFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hM2I5YjktMjE3Yy00MWM5LTk0NzYt
MjdkZDBhZDJhZGYzLzEvWkZ2SGJLTUFTUFR3MzhsT3M5b1dldXcxVS00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hM2I5YjktMjE3Yy00MWM5LTk0NzYtMjdkZDBhZDJhZGYz
LzEvSGRtcFJubnNtck0tWmVCcHlhcEVEYkp6NFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwSCcMA0E
AgACMAcDBQMqCQiAMA0GCSqGSIb3DQEBCwUAA4IBAQCH1qaR8VyJw+BXEucOraDw
8QtkM/4zLGVZaX6TZuJanN0kgS7n0iOWeflDzGuVZxYb6lA6//5Kh9zGiGPSybZb
TFHXyt03WOuyAePRZm3of+ydbkt3BmQUfohF8xH8haTddtZ+Eqizv+f1TIKB49ks
Fmh+/8DwDzan4lT1CNK8MQ1UwihkCD7gRfJ1H2S2ePPhIFlMj1RF2KsdGxKu87Zg
Y6346OlYNVfaeriR8+D9hKcDxrOTB2GtupGIT6IGuCg9PZJocUBqj5hVE/fuLBF9
TR0oc+hrIWceSKgFqpnrTx9USLRQwELBkw23WaGgi5bzFXBXlynceRR+970G6uWE
-----END CERTIFICATE-----