Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/BbbdK39mvPMf5N4qAUDJFJHX0AQ.roa
File:                     BbbdK39mvPMf5N4qAUDJFJHX0AQ.roa (raw, json)
Hash identifier:          urHlS+1XksNPqFtb1jwkUuzCKazRAHsCZ01qqzTq0vE=
Subject key identifier:   05:B6:DD:2B:7F:66:BC:F3:1F:E4:DE:2A:01:40:C9:14:91:D7:D0:04
Certificate issuer:       /CN=246d5c913452997968c721cca0c3ce0847c5c7db
Certificate serial:       0186550B12D037CD66427AA50500D293FC57
Authority key identifier: 24:6D:5C:91:34:52:99:79:68:C7:21:CC:A0:C3:CE:08:47:C5:C7:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JG1ckTRSmXloxyHMoMPOCEfFx9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/BbbdK39mvPMf5N4qAUDJFJHX0AQ.roa
Signing time:             Wed 15 Feb 2023 12:27:14 +0000
ROA not before:           Wed 15 Feb 2023 12:27:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        185.53.46.0/24 maxlen: 24
                          2a11:3c02::/32 maxlen: 32
                          2a11:3c03::/32 maxlen: 32
                          2a11:3c01::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:55:0b:12:d0:37:cd:66:42:7a:a5:05:00:d2:93:fc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246d5c913452997968c721cca0c3ce0847c5c7db
        Validity
            Not Before: Feb 15 12:27:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=05b6dd2b7f66bcf31fe4de2a0140c91491d7d004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:ef:ac:83:14:7f:fd:74:b9:45:97:a6:ca:
                    7c:5c:24:8c:3e:1e:34:60:b0:c9:04:df:4f:60:1c:
                    7a:90:d5:3c:34:81:ee:5b:ca:2b:ad:1c:5b:6f:fd:
                    8a:27:d1:28:6c:58:17:d8:5e:d4:df:af:67:f1:6d:
                    bd:25:4b:49:50:28:b8:6c:92:87:f6:e9:ab:3a:e4:
                    79:98:d3:f6:93:f9:b4:e2:a7:1f:7a:a4:97:a8:ab:
                    42:f4:a6:ec:97:a4:bd:e9:58:0d:7e:32:ba:76:9b:
                    8e:2c:de:53:07:14:07:d3:a3:69:d7:27:82:c9:4b:
                    04:6b:19:89:7f:cc:0b:81:cf:82:12:aa:c0:48:56:
                    90:c7:e8:11:8c:ec:21:0b:12:0c:6a:19:8e:3f:75:
                    58:24:a0:41:2f:77:e8:ab:61:83:53:c5:c7:8d:18:
                    e3:1d:bf:44:23:b7:b7:e4:01:6d:89:32:fe:82:7f:
                    09:42:83:64:10:11:96:0f:23:85:37:7d:9d:8c:59:
                    d2:e5:56:4e:2c:d7:04:7e:c0:d8:f5:c9:cd:b4:17:
                    76:8c:1b:6d:b4:b9:f3:53:47:d7:74:e4:04:5b:c0:
                    8f:75:6c:d3:4a:89:f3:5b:76:28:1f:05:a5:1a:05:
                    04:f6:e9:4f:ae:b3:63:bb:f0:55:98:7f:ac:20:d2:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B6:DD:2B:7F:66:BC:F3:1F:E4:DE:2A:01:40:C9:14:91:D7:D0:04
            X509v3 Authority Key Identifier:
                keyid:24:6D:5C:91:34:52:99:79:68:C7:21:CC:A0:C3:CE:08:47:C5:C7:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG1ckTRSmXloxyHMoMPOCEfFx9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/BbbdK39mvPMf5N4qAUDJFJHX0AQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/JG1ckTRSmXloxyHMoMPOCEfFx9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.53.46.0/24
                IPv6:
                  2a11:3c01::-2a11:3c03:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3d:3d:34:6b:18:0a:95:c4:72:28:8d:82:88:bc:04:65:34:a8:
         d6:04:7d:fa:e4:89:d4:01:f8:e4:f5:84:f1:e0:9c:93:c7:17:
         66:aa:d9:07:7b:f4:2d:ca:62:8e:ca:8d:63:7e:e5:10:96:c4:
         ce:52:e6:c1:75:c6:24:2c:9c:a1:37:16:6a:64:d3:f5:5e:73:
         21:bc:88:f7:9c:db:31:c2:12:74:a2:38:23:18:80:f0:ad:23:
         04:a3:bf:65:25:60:99:2c:30:92:c9:0f:26:67:1b:04:82:b3:
         bc:85:12:87:90:0f:1f:08:5e:ad:7a:6d:90:7f:ef:45:11:91:
         3e:03:3b:9b:96:7f:a6:79:4c:39:8d:15:6c:68:15:4b:43:0a:
         56:ad:62:13:3d:bb:6c:a7:eb:f3:8a:fd:b7:3e:c7:a8:b1:24:
         94:24:fa:8b:a0:13:73:78:f1:dd:9c:50:a3:ed:3f:be:f6:a3:
         e6:82:b7:79:0d:f7:2a:cf:2e:ad:a6:90:1e:9f:d4:5b:e3:04:
         69:d3:d3:1f:8d:c5:00:fb:ae:d3:b2:fb:08:37:8d:0f:e2:bf:
         1f:be:6d:04:e1:83:6b:ba:08:18:78:b3:81:9f:af:b4:15:54:
         fd:97:26:a5:89:ed:78:16:aa:55:e6:10:3b:97:21:61:c9:d3:
         54:28:31:5b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYZVCxLQN81mQnqlBQDSk/xXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NmQ1YzkxMzQ1Mjk5Nzk2OGM3MjFjY2EwYzNjZTA4NDdj
NWM3ZGIwHhcNMjMwMjE1MTIyNzE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWI2ZGQyYjdmNjZiY2YzMWZlNGRlMmEwMTQwYzkxNDkxZDdkMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwLvrIMUf/10uUWXpsp8XCSMPh40
YLDJBN9PYBx6kNU8NIHuW8orrRxbb/2KJ9EobFgX2F7U369n8W29JUtJUCi4bJKH
9umrOuR5mNP2k/m04qcfeqSXqKtC9Kbsl6S96VgNfjK6dpuOLN5TBxQH06Np1yeC
yUsEaxmJf8wLgc+CEqrASFaQx+gRjOwhCxIMahmOP3VYJKBBL3foq2GDU8XHjRjj
Hb9EI7e35AFtiTL+gn8JQoNkEBGWDyOFN32djFnS5VZOLNcEfsDY9cnNtBd2jBtt
tLnzU0fXdOQEW8CPdWzTSonzW3YoHwWlGgUE9ulPrrNju/BVmH+sINK5swIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFAW23St/ZrzzH+TeKgFAyRSR19AEMB8GA1UdIwQY
MBaAFCRtXJE0Upl5aMchzKDDzghHxcfbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkcxY2tUUlNtWGxveHlITW9NUE9DRWZGeDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mMGNhNTEtMzYxOS00MjVkLTg4YzUt
YzUwMTgzY2U0MmUzLzEvQmJiZEszOW12UE1mNU40cUFVREpGSkhYMEFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9mMGNhNTEtMzYxOS00MjVkLTg4YzUtYzUwMTgzY2U0MmUz
LzEvSkcxY2tUUlNtWGxveHlITW9NUE9DRWZGeDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAuTUuMBYE
AgACMBAwDgMFACoRPAEDBQIqETwAMA0GCSqGSIb3DQEBCwUAA4IBAQA9PTRrGAqV
xHIojYKIvARlNKjWBH365InUAfjk9YTx4JyTxxdmqtkHe/QtymKOyo1jfuUQlsTO
UubBdcYkLJyhNxZqZNP1XnMhvIj3nNsxwhJ0ojgjGIDwrSMEo79lJWCZLDCSyQ8m
ZxsEgrO8hRKHkA8fCF6tem2Qf+9FEZE+Azubln+meUw5jRVsaBVLQwpWrWITPbts
p+vziv23PseosSSUJPqLoBNzePHdnFCj7T++9qPmgrd5Dfcqzy6tppAen9Rb4wRp
09MfjcUA+67TsvsIN40P4r8fvm0E4YNruggYeLOBn6+0FVT9lyalie14FqpV5hA7
lyFhydNUKDFb
-----END CERTIFICATE-----