Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/sIRybtmGcvyI7Gljwm8FIniAMe4.roa
File:                     sIRybtmGcvyI7Gljwm8FIniAMe4.roa (raw, json)
Hash identifier:          dhSyDjcdmDsTqEs1ivrEO+0pcYCGaQGR6LD4SjCjU5Q=
Subject key identifier:   B0:84:72:6E:D9:86:72:FC:88:EC:69:63:C2:6F:05:22:78:80:31:EE
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018CC50026D40A245E0D2E700436DB5A583C
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/sIRybtmGcvyI7Gljwm8FIniAMe4.roa
Signing time:             Mon 01 Jan 2024 12:29:30 +0000
ROA not before:           Mon 01 Jan 2024 12:29:30 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     51741
IP address blocks:        2a12:62c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:26:d4:0a:24:5e:0d:2e:70:04:36:db:5a:58:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Jan  1 12:29:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b084726ed98672fc88ec6963c26f0522788031ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9d:d5:c5:da:ed:fc:1c:62:b7:fd:df:9e:e5:
                    8b:1a:06:3c:ae:68:13:e3:a8:97:37:13:74:6f:39:
                    51:14:e1:6f:f7:71:22:6c:14:1d:85:9c:e5:9d:30:
                    f5:5f:51:93:e4:86:71:ec:10:59:61:70:78:ce:b4:
                    c8:d9:18:bc:76:b1:e6:d3:35:22:7e:1a:3e:11:07:
                    d3:56:cd:ec:4d:26:3f:25:da:9c:4d:52:f3:9c:bc:
                    49:f0:49:c0:3f:a2:c9:40:75:d3:ad:9d:e8:f6:a7:
                    66:47:54:1d:2e:e3:ea:1f:f5:64:af:b8:e6:c6:99:
                    6c:57:da:59:bd:c1:a9:db:7f:75:2e:45:05:e1:03:
                    92:47:8c:93:d5:de:25:29:4a:aa:ad:5a:2c:a5:6a:
                    b5:5b:c6:68:b4:f9:09:dd:4a:41:ae:ff:18:06:10:
                    e7:06:ae:b9:5b:53:08:93:cf:7e:b4:aa:c1:d6:fc:
                    5d:a5:8d:60:3f:a7:10:04:06:dc:f7:58:d4:96:49:
                    3b:f7:6a:c2:83:6d:ad:c6:f1:14:ba:2c:4c:55:3f:
                    c9:99:8b:0e:ba:c0:b9:d5:2d:f4:cf:25:d0:f1:58:
                    d6:ae:55:2f:de:54:bf:10:5f:4a:60:d7:ec:6e:3d:
                    b5:13:4f:b6:59:13:6f:9f:73:7a:f3:75:ae:29:e2:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:84:72:6E:D9:86:72:FC:88:EC:69:63:C2:6F:05:22:78:80:31:EE
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/sIRybtmGcvyI7Gljwm8FIniAMe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7a:43:4e:50:a3:8d:35:45:1a:51:92:df:3e:cc:9a:24:1a:c6:
         04:9b:23:37:3d:56:09:19:9d:ed:b2:53:e4:b7:a0:f1:1b:f0:
         f8:67:1e:23:5b:f1:e1:67:bc:01:5b:9a:8d:cf:c2:6a:4b:5c:
         ff:bd:52:2a:15:b1:5f:f0:59:77:e0:ec:7e:d0:55:60:d7:b2:
         75:09:9f:8c:f0:f8:67:d3:20:64:a5:38:64:4e:af:2a:01:97:
         65:45:70:ee:2c:98:a6:df:7c:46:a4:a5:f0:22:6a:a0:84:6b:
         e6:66:fc:c0:64:a0:e3:c8:2a:ce:c6:3c:57:62:1d:99:88:89:
         2b:b2:4e:11:a5:75:5b:5d:dd:f2:4e:20:26:88:1e:5d:e4:c2:
         73:e3:4c:6c:10:7c:ee:5b:1b:2d:01:57:eb:c5:c4:d5:f4:4a:
         66:98:f9:c3:69:73:55:06:65:a8:16:d8:b4:fb:f0:7c:e0:ae:
         1e:55:15:2a:34:d9:d3:4e:37:d3:a8:fb:67:db:91:e5:35:2f:
         4c:b1:f6:cd:81:8c:c2:14:d2:e5:94:b8:9f:5f:ca:58:df:ac:
         80:b9:50:d8:c5:41:e1:b3:3b:3e:f5:5f:3b:22:a1:d6:6b:85:
         ae:86:20:45:26:56:21:24:80:de:29:c1:5e:d9:f6:53:4e:71:
         20:c1:d5:64
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzFACbUCiReDS5wBDbbWlg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYmNiNzllZjU4YTFjOThlMTUxZjYwYzUxNDI2Zjc0ZWIx
YzM5MzgwHhcNMjQwMTAxMTIyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDg0NzI2ZWQ5ODY3MmZjODhlYzY5NjNjMjZmMDUyMjc4ODAzMWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ3Vxdrt/Bxit/3fnuWLGgY8rmgT
46iXNxN0bzlRFOFv93EibBQdhZzlnTD1X1GT5IZx7BBZYXB4zrTI2Ri8drHm0zUi
fho+EQfTVs3sTSY/JdqcTVLznLxJ8EnAP6LJQHXTrZ3o9qdmR1QdLuPqH/Vkr7jm
xplsV9pZvcGp2391LkUF4QOSR4yT1d4lKUqqrVospWq1W8ZotPkJ3UpBrv8YBhDn
Bq65W1MIk89+tKrB1vxdpY1gP6cQBAbc91jUlkk792rCg22txvEUuixMVT/JmYsO
usC51S30zyXQ8VjWrlUv3lS/EF9KYNfsbj21E0+2WRNvn3N683WuKeI6ZQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLCEcm7ZhnL8iOxpY8JvBSJ4gDHuMB8GA1UdIwQY
MBaAFD68t571ihyY4VH2DFFCb3TrHDk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJ5M252V0tISmpoVWZZTVVVSnZkT3NjT1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kZDllZDEtMDJjZC00YjM1LWEzYjQt
ZTlmNzlkZmJkMmU2LzEvc0lSeWJ0bUdjdnlJN0dsandtOEZJbmlBTWU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kZDllZDEtMDJjZC00YjM1LWEzYjQtZTlmNzlkZmJkMmU2
LzEvUHJ5M252V0tISmpoVWZZTVVVSnZkT3NjT1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJiwDAN
BgkqhkiG9w0BAQsFAAOCAQEAekNOUKONNUUaUZLfPsyaJBrGBJsjNz1WCRmd7bJT
5Leg8Rvw+GceI1vx4We8AVuajc/Caktc/71SKhWxX/BZd+DsftBVYNeydQmfjPD4
Z9MgZKU4ZE6vKgGXZUVw7iyYpt98RqSl8CJqoIRr5mb8wGSg48gqzsY8V2IdmYiJ
K7JOEaV1W13d8k4gJogeXeTCc+NMbBB87lsbLQFX68XE1fRKZpj5w2lzVQZlqBbY
tPvwfOCuHlUVKjTZ004306j7Z9uR5TUvTLH2zYGMwhTS5ZS4n1/KWN+sgLlQ2MVB
4bM7PvVfOyKh1muFroYgRSZWISSA3inBXtn2U05xIMHVZA==
-----END CERTIFICATE-----