Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/8J4KQUM3SG2tOx7Qy412tzcCyVE.roa
File:                     8J4KQUM3SG2tOx7Qy412tzcCyVE.roa (raw, json)
Hash identifier:          WDRfkd7NWCeGm5AnO0id+VmgIMVtNw9JsJNLGC4miyg=
Subject key identifier:   F0:9E:0A:41:43:37:48:6D:AD:3B:1E:D0:CB:8D:76:B7:37:02:C9:51
Certificate issuer:       /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial:       01941F8CA7EE81AD0E3010A4ECA55EAE0AD6
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/8J4KQUM3SG2tOx7Qy412tzcCyVE.roa
Signing time:             Wed 01 Jan 2025 01:48:19 +0000
ROA not before:           Wed 01 Jan 2025 01:48:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208789
IP address blocks:        45.85.52.0/22 maxlen: 24
                          2a0e:b880::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:a7:ee:81:ad:0e:30:10:a4:ec:a5:5e:ae:0a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
        Validity
            Not Before: Jan  1 01:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f09e0a414337486dad3b1ed0cb8d76b73702c951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:db:41:f9:a7:9a:00:17:cb:6b:84:8f:28:
                    c4:c3:17:ed:a3:15:a6:7d:be:5b:05:c8:a1:be:1a:
                    08:a0:9c:27:dc:3f:de:d9:bf:31:73:dc:c5:46:b2:
                    65:cf:01:b1:5f:04:2a:66:3c:5e:23:15:6f:54:c5:
                    e5:a9:87:12:87:b0:6f:f3:3a:52:cd:5e:fa:94:e5:
                    0b:6f:9d:4b:34:f1:8a:b8:a7:88:1c:ee:24:00:5e:
                    68:7f:a3:09:9b:bf:bc:fc:71:0e:94:47:dd:0f:bd:
                    6f:02:e1:24:8d:f0:74:a0:37:f8:dc:bc:f6:79:35:
                    5e:2b:91:23:ba:9a:88:4b:da:a5:10:26:e5:db:31:
                    58:c8:03:3c:9a:9a:4f:18:62:46:7c:4d:f8:35:f6:
                    18:72:f4:6d:5b:81:93:dc:40:d0:84:5d:89:04:8c:
                    8f:9a:a5:39:7c:f8:d7:dd:4b:7b:45:cb:8e:33:19:
                    05:9b:56:fc:e4:4c:10:f6:75:59:59:50:98:d6:e5:
                    e4:0b:e5:c0:03:bb:48:60:0d:9a:ff:01:c1:29:db:
                    65:95:9e:91:46:7e:5a:48:d6:95:bc:5b:57:c9:c2:
                    8c:fb:74:77:06:c5:15:26:5b:61:37:aa:a9:8d:5d:
                    a4:93:10:2d:2d:03:ee:06:8c:36:be:be:f1:7c:c9:
                    e8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9E:0A:41:43:37:48:6D:AD:3B:1E:D0:CB:8D:76:B7:37:02:C9:51
            X509v3 Authority Key Identifier:
                keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/8J4KQUM3SG2tOx7Qy412tzcCyVE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.52.0/22
                IPv6:
                  2a0e:b880::/29

    Signature Algorithm: sha256WithRSAEncryption
         5b:25:fe:8d:ca:17:5b:8a:7f:26:0e:11:9d:62:3a:d7:c5:19:
         9a:7b:17:ca:93:04:9f:66:fb:dd:41:94:9a:ed:33:2d:e8:61:
         82:06:cd:16:39:2e:5e:21:6f:79:6f:3b:87:e3:a3:15:47:f0:
         eb:87:86:f2:5d:37:cf:49:2c:b5:42:b9:ec:98:8f:e9:e2:74:
         de:25:dc:e0:72:1a:f1:ed:92:55:07:d4:66:53:d4:fa:d1:ff:
         cd:09:db:44:e4:ef:4d:3c:78:ee:d7:52:ba:48:e7:20:50:2c:
         a2:6b:1e:2a:91:73:08:b2:f6:bc:51:62:dc:d5:01:54:a0:b5:
         b7:4a:b7:40:7f:8a:28:9f:8a:2e:bf:c0:0a:43:8c:7b:df:46:
         bd:00:64:0e:67:58:de:6f:de:cd:4b:d0:26:da:71:d8:7d:d6:
         2d:c3:a5:5c:0b:ac:e3:cf:c1:e6:ea:c4:d4:ff:d3:a4:e4:50:
         44:99:49:1c:47:33:9f:2d:8f:67:23:2f:d3:05:b2:bd:69:6d:
         26:e1:6d:cb:7b:7a:f7:b9:ec:a7:66:99:65:c7:ae:27:45:77:
         20:02:b4:64:5e:f7:25:14:06:38:10:2e:f3:33:1c:84:84:01:
         70:d1:d2:29:2b:35:0e:ee:c5:ab:84:e3:a8:35:60:23:18:f7:
         5d:c6:fc:36
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQfjKfuga0OMBCk7KVergrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjM5ZDZjOGIyM2ZjZGMyMGU1MzE3NGU5MmZiM2Y1NmNh
YThiNjEwHhcNMjUwMTAxMDE0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDllMGE0MTQzMzc0ODZkYWQzYjFlZDBjYjhkNzZiNzM3MDJjOTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvebbQfmnmgAXy2uEjyjEwxftoxWm
fb5bBcihvhoIoJwn3D/e2b8xc9zFRrJlzwGxXwQqZjxeIxVvVMXlqYcSh7Bv8zpS
zV76lOULb51LNPGKuKeIHO4kAF5of6MJm7+8/HEOlEfdD71vAuEkjfB0oDf43Lz2
eTVeK5EjupqIS9qlECbl2zFYyAM8mppPGGJGfE34NfYYcvRtW4GT3EDQhF2JBIyP
mqU5fPjX3Ut7RcuOMxkFm1b85EwQ9nVZWVCY1uXkC+XAA7tIYA2a/wHBKdtllZ6R
Rn5aSNaVvFtXycKM+3R3BsUVJlthN6qpjV2kkxAtLQPuBow2vr7xfMnoawIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPCeCkFDN0htrTse0MuNdrc3AslRMB8GA1UdIwQY
MBaAFEnznWyLI/zcIOUxdOkvs/VsqothMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAt
N2E1MDQzYzkxOGY5LzEvOEo0S1FVTTNTRzJ0T3g3UXk0MTJ0emNDeVZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAtN2E1MDQzYzkxOGY5
LzEvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVU0MA0E
AgACMAcDBQMqDriAMA0GCSqGSIb3DQEBCwUAA4IBAQBbJf6Nyhdbin8mDhGdYjrX
xRmaexfKkwSfZvvdQZSa7TMt6GGCBs0WOS5eIW95bzuH46MVR/Drh4byXTfPSSy1
QrnsmI/p4nTeJdzgchrx7ZJVB9RmU9T60f/NCdtE5O9NPHju11K6SOcgUCyiax4q
kXMIsva8UWLc1QFUoLW3SrdAf4oon4ouv8AKQ4x730a9AGQOZ1jeb97NS9Am2nHY
fdYtw6VcC6zjz8Hm6sTU/9Ok5FBEmUkcRzOfLY9nIy/TBbK9aW0m4W3Le3r3ueyn
Zpllx64nRXcgArRkXvclFAY4EC7zMxyEhAFw0dIpKzUO7sWrhOOoNWAjGPddxvw2
-----END CERTIFICATE-----