Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/C9Zrt8fI7MapX0pDth-KpvGozEI.roa
File:                     C9Zrt8fI7MapX0pDth-KpvGozEI.roa (raw, json)
Hash identifier:          1dXmR+5cpUaKxCw1KauHp+ulu1qcSVMiI/wgMFxopwg=
Subject key identifier:   0B:D6:6B:B7:C7:C8:EC:C6:A9:5F:4A:43:B6:1F:8A:A6:F1:A8:CC:42
Certificate issuer:       /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial:       018B52C9F8AA2E14E6E4604A570AA806166F
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/C9Zrt8fI7MapX0pDth-KpvGozEI.roa
Signing time:             Sat 21 Oct 2023 15:10:49 +0000
ROA not before:           Sat 21 Oct 2023 15:10:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8075
IP address blocks:        2a0b:a4c1::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:52:c9:f8:aa:2e:14:e6:e4:60:4a:57:0a:a8:06:16:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
        Validity
            Not Before: Oct 21 15:10:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0bd66bb7c7c8ecc6a95f4a43b61f8aa6f1a8cc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f7:c4:33:65:12:c9:8e:be:7d:0d:ce:2d:75:
                    51:f8:d5:4c:4a:e5:75:1b:dd:34:f0:60:c3:07:7d:
                    db:99:bb:5c:48:5a:aa:29:cd:24:f2:13:30:4c:e8:
                    b4:e8:d0:a3:91:c8:a0:04:2d:bc:c7:58:60:ce:bc:
                    2b:08:29:15:4d:ac:89:ad:e5:33:e0:ca:72:bf:8f:
                    bd:d9:9b:12:ff:09:2d:91:f8:49:e0:94:e9:06:52:
                    d7:49:37:b3:88:a6:da:6b:d6:fb:4f:a2:ff:b3:1d:
                    b0:e2:fe:36:2b:53:d1:28:85:4f:d6:a8:9e:eb:90:
                    3e:ba:18:91:e8:a2:17:1d:ac:30:8a:28:a8:c0:77:
                    b5:c9:29:02:dc:a1:ba:b1:a9:ea:a6:db:7f:f5:93:
                    02:d9:51:95:45:54:a7:54:26:2f:7a:da:e8:9e:89:
                    83:72:11:ce:58:8a:93:a3:ed:49:92:55:ca:82:c6:
                    fb:76:96:16:4c:b1:c7:ac:ea:4b:76:ec:93:3b:5b:
                    49:5d:53:2e:35:31:51:e5:fb:7b:91:0c:40:b3:a0:
                    e4:ef:69:15:d3:03:5c:d4:63:ae:46:e3:2e:78:ac:
                    29:cb:62:ba:a8:92:7b:4e:de:cb:df:2c:29:c1:f7:
                    76:87:7a:55:b6:45:0d:d8:56:e0:9a:be:72:fa:93:
                    bc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D6:6B:B7:C7:C8:EC:C6:A9:5F:4A:43:B6:1F:8A:A6:F1:A8:CC:42
            X509v3 Authority Key Identifier:
                keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/C9Zrt8fI7MapX0pDth-KpvGozEI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:a4c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:5c:48:01:24:29:3e:b0:27:27:cd:ab:a6:9c:38:76:ba:2f:
         aa:60:39:fe:a4:d9:79:b8:72:0f:e1:e9:66:73:14:01:f5:39:
         0a:ef:a7:96:c6:c5:a4:5b:ce:cd:90:a8:e5:9d:4f:41:e2:f7:
         44:ae:3d:c2:db:15:3f:22:91:66:1b:e3:3f:79:b7:87:ec:92:
         54:47:49:79:4b:1f:05:c7:9e:5f:8b:ba:53:02:4d:6a:15:b7:
         1f:34:88:42:ff:66:41:67:96:d0:44:b3:a8:18:49:89:ae:45:
         f7:13:ff:1d:02:6b:12:81:6b:2f:27:00:9d:15:0f:a1:a7:c1:
         8c:69:8c:67:f0:64:46:65:64:33:33:76:5b:77:19:94:d3:d0:
         f4:1f:66:44:71:d0:0d:b4:f4:16:1d:7e:5b:e2:af:01:d5:23:
         14:d6:c7:9a:1a:28:a0:de:b5:11:8a:26:f7:d4:9d:24:5b:60:
         ec:15:30:ff:44:ab:31:08:19:c6:3a:d6:03:93:65:a7:d7:aa:
         0e:52:e2:4c:c2:21:cf:a8:a7:ce:31:66:60:a0:d6:a8:e7:8f:
         de:dd:0f:c5:6f:73:97:84:78:f9:66:97:63:5c:91:38:e7:fc:
         e3:bd:a7:20:10:f6:0c:e7:6b:37:bd:87:03:24:d4:d1:9a:0e:
         ef:dd:52:c3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYtSyfiqLhTm5GBKVwqoBhZvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNTViMWNhMzcyNDI1NWQ2MGEwYTFlZjI5NTcyN2RmMDhl
M2IxNGMwHhcNMjMxMDIxMTUxMDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmQ2NmJiN2M3YzhlY2M2YTk1ZjRhNDNiNjFmOGFhNmYxYThjYzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PfEM2USyY6+fQ3OLXVR+NVMSuV1
G9008GDDB33bmbtcSFqqKc0k8hMwTOi06NCjkcigBC28x1hgzrwrCCkVTayJreUz
4Mpyv4+92ZsS/wktkfhJ4JTpBlLXSTeziKbaa9b7T6L/sx2w4v42K1PRKIVP1qie
65A+uhiR6KIXHawwiiiowHe1ySkC3KG6sanqptt/9ZMC2VGVRVSnVCYvetronomD
chHOWIqTo+1JklXKgsb7dpYWTLHHrOpLduyTO1tJXVMuNTFR5ft7kQxAs6Dk72kV
0wNc1GOuRuMueKwpy2K6qJJ7Tt7L3ywpwfd2h3pVtkUN2Fbgmr5y+pO8MQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFAvWa7fHyOzGqV9KQ7YfiqbxqMxCMB8GA1UdIwQY
MBaAFLxVsco3JCVdYKCh7ylXJ98I47FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkZXeHlqY2tKVjFnb0tIdktWY24zd2pqc1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zN2ZkN2ItMTMwMy00MDRmLWE1ODgt
Y2JiM2NkOWZlZGZlLzEvQzlacnQ4Zkk3TWFwWDBwRHRoLUtwdkdvekVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zN2ZkN2ItMTMwMy00MDRmLWE1ODgtY2JiM2NkOWZlZGZl
LzEvdkZXeHlqY2tKVjFnb0tIdktWY24zd2pqc1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgukwTAN
BgkqhkiG9w0BAQsFAAOCAQEAOlxIASQpPrAnJ82rppw4drovqmA5/qTZebhyD+Hp
ZnMUAfU5Cu+nlsbFpFvOzZCo5Z1PQeL3RK49wtsVPyKRZhvjP3m3h+ySVEdJeUsf
BceeX4u6UwJNahW3HzSIQv9mQWeW0ESzqBhJia5F9xP/HQJrEoFrLycAnRUPoafB
jGmMZ/BkRmVkMzN2W3cZlNPQ9B9mRHHQDbT0Fh1+W+KvAdUjFNbHmhoooN61EYom
99SdJFtg7BUw/0SrMQgZxjrWA5Nlp9eqDlLiTMIhz6inzjFmYKDWqOeP3t0PxW9z
l4R4+WaXY1yROOf8472nIBD2DOdrN72HAyTU0ZoO791Sww==
-----END CERTIFICATE-----