Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233382e32342e302f32312d3332203d3e203430303231.roa
File:                     3139342e3233382e32342e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier:          KjaQ+f88LE157FZrBDfBIhrzNPM2u3DT+7DyhpGzUV8=
Subject key identifier:   66:12:C2:76:25:90:40:98:F1:8C:7C:52:D2:C6:F2:04:03:25:03:8D
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       172B394446D21C86BEE85A38EC616ADC6B8BB59A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233382e32342e302f32312d3332203d3e203430303231.roa
Signing time:             Sat 05 Apr 2025 09:45:59 +0000
ROA not before:           Sat 05 Apr 2025 09:40:59 +0000
ROA not after:            Sat 04 Apr 2026 09:45:59 +0000
asID:                     40021
IP address blocks:        194.238.24.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2b:39:44:46:d2:1c:86:be:e8:5a:38:ec:61:6a:dc:6b:8b:b5:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Apr  5 09:40:59 2025 GMT
            Not After : Apr  4 09:45:59 2026 GMT
        Subject: CN=6612C27625904098F18C7C52D2C6F2040325038D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:bd:d6:ba:a6:7b:83:a3:2c:b7:c5:6e:63:
                    15:fa:9d:c5:e9:99:5a:1a:c0:a3:74:c1:27:38:9e:
                    e4:51:ce:5d:3d:d6:08:1a:77:43:25:ab:e4:2d:1b:
                    97:75:15:b1:63:e7:4f:85:f4:98:91:b1:76:e6:6f:
                    f8:29:0a:96:7d:d2:7d:76:bf:a4:4c:0b:42:77:da:
                    0b:2e:30:ba:42:ea:60:11:08:67:07:bb:8a:62:b9:
                    3b:23:d0:e1:d5:98:f0:15:f5:d9:d6:75:67:fd:07:
                    04:98:08:39:3f:2e:2b:56:0b:44:7e:9a:82:a9:e5:
                    3b:61:e0:8f:2c:ce:36:fa:c4:61:e1:2b:99:b3:00:
                    de:49:d3:be:9b:f5:d4:0d:4f:2c:9e:1f:79:83:ab:
                    ae:1e:29:27:6a:15:3c:e9:f9:d3:e9:b5:3c:1b:a6:
                    68:1c:63:78:c7:5e:c6:6d:23:87:0d:47:d4:30:91:
                    31:18:3d:28:20:0c:2f:88:96:5e:8d:22:44:0d:f4:
                    a6:02:66:04:2e:9c:d3:1e:e5:9b:0f:3f:60:53:31:
                    cf:6f:a3:5d:0b:ca:c8:fe:d7:2e:ac:5a:d1:64:a1:
                    a5:ac:13:6a:0c:e4:f5:80:b9:45:fe:f5:bd:50:c0:
                    ce:4f:99:92:3a:e5:99:21:0c:f4:2c:c5:95:c5:2e:
                    72:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:12:C2:76:25:90:40:98:F1:8C:7C:52:D2:C6:F2:04:03:25:03:8D
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233382e32342e302f32312d3332203d3e203430303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.238.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:17:7a:16:c2:64:0c:e1:e8:2d:6f:33:ef:91:53:c0:83:19:
         fe:9d:92:c8:a4:9e:dd:08:c3:45:4b:b6:e0:9e:39:65:5e:49:
         de:e9:48:49:a2:72:13:c3:e7:05:f6:20:1d:5b:16:1f:71:d3:
         ef:25:1c:6e:df:3b:43:94:b9:c0:1f:a3:1c:2c:4e:1b:71:de:
         98:84:0c:20:5c:00:60:3e:f4:82:05:58:5b:99:7d:f8:75:9a:
         82:44:6c:b0:1e:db:a5:59:0c:27:2f:82:c5:1d:cc:8c:d6:38:
         b1:46:78:dc:31:86:c5:ed:a1:26:80:f8:53:09:5a:0d:d2:8e:
         3c:92:f8:d5:21:92:82:8a:58:1f:05:ba:e6:59:8d:48:08:c7:
         1b:46:21:59:65:eb:e2:7a:2d:00:db:ef:0b:ec:f4:7d:7c:87:
         ba:59:cd:68:ca:60:01:b3:80:b6:1c:1b:32:5d:7d:ec:34:82:
         20:d8:25:00:dc:9f:05:d8:e6:e6:42:16:3d:d7:c6:86:ed:a2:
         7c:cf:63:8c:9b:17:5e:65:91:40:6d:b2:b6:cf:59:26:55:0e:
         85:e3:2e:b0:54:c6:6f:08:b0:35:9a:78:12:36:00:74:9d:68:
         e0:86:e2:d3:d9:d6:04:a3:28:83:b3:10:ef:31:56:a6:5d:89:
         ac:31:1c:d6
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUFys5REbSHIa+6Fo47GFq3GuLtZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA0MDUwOTQwNTlaFw0yNjA0MDQwOTQ1NTlaMDMxMTAvBgNV
BAMTKDY2MTJDMjc2MjU5MDQwOThGMThDN0M1MkQyQzZGMjA0MDMyNTAzOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4b3WuqZ7g6Mst8VuYxX6ncXp
mVoawKN0wSc4nuRRzl091ggad0Mlq+QtG5d1FbFj50+F9JiRsXbmb/gpCpZ90n12
v6RMC0J32gsuMLpC6mARCGcHu4piuTsj0OHVmPAV9dnWdWf9BwSYCDk/LitWC0R+
moKp5Tth4I8szjb6xGHhK5mzAN5J076b9dQNTyyeH3mDq64eKSdqFTzp+dPptTwb
pmgcY3jHXsZtI4cNR9QwkTEYPSggDC+Ill6NIkQN9KYCZgQunNMe5ZsPP2BTMc9v
o10Lysj+1y6sWtFkoaWsE2oM5PWAuUX+9b1QwM5PmZI65ZkhDPQsxZXFLnIjAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUZhLCdiWQQJjxjHxS0sbyBAMlA40wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMjMzMzgyZTMy
MzQyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
wu4YMA0GCSqGSIb3DQEBCwUAA4IBAQB8F3oWwmQM4egtbzPvkVPAgxn+nZLIpJ7d
CMNFS7bgnjllXkne6UhJonITw+cF9iAdWxYfcdPvJRxu3ztDlLnAH6McLE4bcd6Y
hAwgXABgPvSCBVhbmX34dZqCRGywHtulWQwnL4LFHcyM1jixRnjcMYbF7aEmgPhT
CVoN0o48kvjVIZKCilgfBbrmWY1ICMcbRiFZZeviei0A2+8L7PR9fIe6Wc1oymAB
s4C2HBsyXX3sNIIg2CUA3J8F2ObmQhY918aG7aJ8z2OMmxdeZZFAbbK2z1kmVQ6F
4y6wVMZvCLA1mngSNgB0nWjghuLT2dYEoyiDsxDvMVamXYmsMRzW
-----END CERTIFICATE-----