Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/do9Nt_FPAEo5VVz8Pbk3FRxxJgg.roa
File:                     do9Nt_FPAEo5VVz8Pbk3FRxxJgg.roa (raw, json)
Hash identifier:          k1RN7auzMzLc2UgDbM8AYnIQyyXw9gfdYrU6JVdwe5M=
Subject key identifier:   76:8F:4D:B7:F1:4F:00:4A:39:55:5C:FC:3D:B9:37:15:1C:71:26:08
Certificate issuer:       /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial:       019611974C823D3C1EB1BA8A439A468A0F5A
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/do9Nt_FPAEo5VVz8Pbk3FRxxJgg.roa
Signing time:             Mon 07 Apr 2025 18:50:50 +0000
ROA not before:           Mon 07 Apr 2025 18:50:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206873
IP address blocks:        2a0e:8547::/32 maxlen: 32
                          2a11:3184::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:11:97:4c:82:3d:3c:1e:b1:ba:8a:43:9a:46:8a:0f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
        Validity
            Not Before: Apr  7 18:50:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=768f4db7f14f004a39555cfc3db937151c712608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:db:2c:62:84:8b:17:ab:fa:fa:b2:b1:e1:
                    0b:53:29:86:d8:fa:0a:63:ce:72:56:4f:ad:78:91:
                    3c:29:a0:c5:63:93:c8:8d:bc:4e:0d:88:19:48:7f:
                    a7:f0:75:6f:d9:37:f1:57:70:9e:ba:54:82:3e:d1:
                    ea:56:ed:7f:11:e5:20:25:ff:02:29:80:cf:46:12:
                    81:66:b2:c6:8f:e4:45:c6:47:c3:74:34:d0:15:00:
                    56:3a:64:69:04:c6:94:14:93:02:e4:a0:7d:7b:a7:
                    aa:ce:4e:08:84:9d:76:e0:23:3b:2a:44:9b:f7:27:
                    bc:b9:70:d4:77:41:8e:a3:ee:eb:cb:3d:d1:fe:f0:
                    6f:11:5e:d0:78:8b:40:14:70:96:7d:5b:2e:3b:9d:
                    79:54:83:22:2c:5b:2d:dc:8d:0a:5c:2a:39:52:f8:
                    57:bb:81:7e:a6:4a:fb:2e:4f:1e:71:8c:d9:fe:d9:
                    d0:63:b9:14:5a:b5:3b:3f:21:1d:ae:71:80:79:66:
                    09:92:df:44:7c:44:aa:72:1c:48:80:0f:a9:37:22:
                    e6:c0:8c:de:e9:33:6c:e5:40:86:56:62:37:a9:c5:
                    57:58:fc:e5:1b:d7:da:a5:56:70:c5:f2:4f:47:5a:
                    2c:8c:1d:03:d5:29:d3:0c:26:fa:b0:f4:ac:94:e3:
                    c0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8F:4D:B7:F1:4F:00:4A:39:55:5C:FC:3D:B9:37:15:1C:71:26:08
            X509v3 Authority Key Identifier:
                keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/do9Nt_FPAEo5VVz8Pbk3FRxxJgg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8547::/32
                  2a11:3184::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:03:c6:e0:a1:8c:51:76:4d:2b:5a:64:f0:1a:af:72:2e:d1:
         64:a8:6f:61:3d:48:67:66:f0:90:e2:8f:52:e8:e6:24:43:f7:
         b6:8a:19:26:a8:70:76:16:29:8d:5c:c0:21:ca:fd:9f:c1:a6:
         76:94:c3:41:8d:bd:74:90:25:6a:ee:2f:f2:6e:28:68:e0:f4:
         de:68:de:7d:09:48:8a:42:ae:54:0e:ba:3d:1e:45:8c:b3:75:
         c1:2d:6b:3b:11:b7:bc:0a:1c:1b:c9:0e:16:85:81:0a:3a:fe:
         ba:e4:89:d4:db:e3:8f:4c:65:4f:d1:e9:1f:68:c5:c3:a5:a9:
         11:ff:3b:4a:4e:d6:fe:f2:1a:52:f9:2e:d1:be:d2:1d:68:44:
         9c:6d:a9:cf:65:42:77:0f:85:0f:3c:3a:69:44:da:30:22:72:
         df:3c:24:14:c4:26:66:eb:19:42:fe:d4:01:f0:a7:6e:2e:7a:
         47:b6:bc:2d:c6:74:d5:aa:da:51:55:9c:bf:89:86:ff:92:25:
         fc:6c:3e:2e:98:ed:05:d8:5b:a5:b9:85:4e:b7:55:8a:8f:04:
         25:f9:f3:dc:76:8c:c6:8c:0f:04:06:82:fd:9f:1c:02:69:aa:
         0f:7f:9d:18:ee:4a:c0:39:54:49:06:a9:ad:9c:4d:28:9c:af:
         6c:d5:60:1b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZYRl0yCPTwesbqKQ5pGig9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl
N2IwYmUwHhcNMjUwNDA3MTg1MDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjhmNGRiN2YxNGYwMDRhMzk1NTVjZmMzZGI5MzcxNTFjNzEyNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVnbLGKEixer+vqyseELUymG2PoK
Y85yVk+teJE8KaDFY5PIjbxODYgZSH+n8HVv2TfxV3CeulSCPtHqVu1/EeUgJf8C
KYDPRhKBZrLGj+RFxkfDdDTQFQBWOmRpBMaUFJMC5KB9e6eqzk4IhJ124CM7KkSb
9ye8uXDUd0GOo+7ryz3R/vBvEV7QeItAFHCWfVsuO515VIMiLFst3I0KXCo5UvhX
u4F+pkr7Lk8ecYzZ/tnQY7kUWrU7PyEdrnGAeWYJkt9EfESqchxIgA+pNyLmwIze
6TNs5UCGVmI3qcVXWPzlG9fapVZwxfJPR1osjB0D1SnTDCb6sPSslOPAhQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHaPTbfxTwBKOVVc/D25NxUccSYIMB8GA1UdIwQY
MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt
NDFiYjIxYWMyODAxLzEvZG85TnRfRlBBRW81VlZ6OFBiazNGUnh4SmdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx
LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKg6FRwMF
ACoRMYQwDQYJKoZIhvcNAQELBQADggEBAK4DxuChjFF2TStaZPAar3Iu0WSob2E9
SGdm8JDij1Lo5iRD97aKGSaocHYWKY1cwCHK/Z/BpnaUw0GNvXSQJWruL/JuKGjg
9N5o3n0JSIpCrlQOuj0eRYyzdcEtazsRt7wKHBvJDhaFgQo6/rrkidTb449MZU/R
6R9oxcOlqRH/O0pO1v7yGlL5LtG+0h1oRJxtqc9lQncPhQ88OmlE2jAict88JBTE
JmbrGUL+1AHwp24ueke2vC3GdNWq2lFVnL+Jhv+SJfxsPi6Y7QXYW6W5hU63VYqP
BCX589x2jMaMDwQGgv2fHAJpqg9/nRjuSsA5VEkGqa2cTSicr2zVYBs=
-----END CERTIFICATE-----