Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/494834-f559-40ff-ab1f-f703f4eba553/1/qdZt8KmPnC3C_O4cgP7ehHIJa_4.roa
File:                     qdZt8KmPnC3C_O4cgP7ehHIJa_4.roa (raw, json)
Hash identifier:          zyxJsuAYFUBDfFRliK/SP9Me6xQnhc1ixhZo4//naec=
Subject key identifier:   A9:D6:6D:F0:A9:8F:9C:2D:C2:FC:EE:1C:80:FE:DE:84:72:09:6B:FE
Certificate issuer:       /CN=15a03a003b018763507529e60a2783e89ec61727
Certificate serial:       018D9DC7D246766D0429BD352DAFE3F7313D
Authority key identifier: 15:A0:3A:00:3B:01:87:63:50:75:29:E6:0A:27:83:E8:9E:C6:17:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FaA6ADsBh2NQdSnmCieD6J7GFyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/494834-f559-40ff-ab1f-f703f4eba553/1/qdZt8KmPnC3C_O4cgP7ehHIJa_4.roa
Signing time:             Mon 12 Feb 2024 14:45:34 +0000
ROA not before:           Mon 12 Feb 2024 14:45:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     43607
IP address blocks:        193.17.2.0/24 maxlen: 24
                          2a07:2480::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:9d:c7:d2:46:76:6d:04:29:bd:35:2d:af:e3:f7:31:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a03a003b018763507529e60a2783e89ec61727
        Validity
            Not Before: Feb 12 14:45:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a9d66df0a98f9c2dc2fcee1c80fede8472096bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:5d:82:a7:87:6b:41:21:19:e5:70:5c:df:
                    90:53:c4:37:06:e7:f2:12:3c:62:d3:44:92:31:e7:
                    c3:ef:5c:67:06:a5:4f:cc:ec:87:e0:12:41:fa:e5:
                    22:c9:a7:7a:fd:6f:f2:3e:fe:a1:3c:d8:e2:38:3b:
                    c2:21:cc:cd:74:4c:ea:26:b1:31:ab:e3:dc:54:84:
                    04:cd:9d:54:c5:be:f1:1c:88:21:be:67:07:85:45:
                    09:45:8b:07:ed:1b:d7:e9:d1:42:dd:b8:31:b8:01:
                    9f:36:0d:ba:bb:91:0c:92:7d:e8:7b:26:d4:56:8f:
                    b8:6d:a4:76:da:a0:cc:40:16:22:81:1a:cd:e6:d8:
                    cd:1f:92:9e:e0:1f:e3:65:f5:82:f4:d7:b2:0f:62:
                    e3:55:14:dc:31:f2:7b:84:d3:34:3e:26:17:bd:8e:
                    28:83:90:f6:84:7e:eb:fd:8b:c7:c9:7e:a5:e8:e6:
                    ea:af:0c:46:21:02:10:99:fc:79:7a:b2:2c:7c:27:
                    34:5c:a6:f6:e5:52:fc:05:24:a7:c8:a3:d3:f7:10:
                    8a:d7:92:d2:34:d3:0c:8c:ad:d4:12:23:45:d9:38:
                    72:00:6a:49:81:9b:5d:3d:91:dd:48:0a:04:6b:1b:
                    1e:7e:b4:9a:7f:df:2f:34:a8:9c:ca:92:55:6d:14:
                    25:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D6:6D:F0:A9:8F:9C:2D:C2:FC:EE:1C:80:FE:DE:84:72:09:6B:FE
            X509v3 Authority Key Identifier:
                keyid:15:A0:3A:00:3B:01:87:63:50:75:29:E6:0A:27:83:E8:9E:C6:17:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaA6ADsBh2NQdSnmCieD6J7GFyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/494834-f559-40ff-ab1f-f703f4eba553/1/qdZt8KmPnC3C_O4cgP7ehHIJa_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/494834-f559-40ff-ab1f-f703f4eba553/1/FaA6ADsBh2NQdSnmCieD6J7GFyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.2.0/24
                IPv6:
                  2a07:2480::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:22:ac:e8:16:30:fe:2b:f2:69:19:d9:c2:da:79:37:51:62:
         10:03:de:1a:3f:96:7c:7a:1d:1c:87:41:e7:42:78:6d:ab:e0:
         fc:86:68:b0:7f:12:ef:f1:bd:b0:b8:c2:63:ae:9a:94:98:76:
         22:75:dd:e4:c8:e5:ce:fa:39:09:01:75:6e:a8:9f:4d:b2:7c:
         0c:fe:2e:c8:8e:a0:1d:b3:79:df:98:f5:de:f4:54:1d:22:9c:
         08:cf:10:9e:7b:41:0d:1b:05:7d:58:98:6e:92:2c:47:66:a6:
         8b:07:25:d8:78:87:b0:b9:2a:f0:a7:8b:ff:ca:c9:e6:83:ad:
         eb:59:32:58:83:6a:45:c7:9d:b7:0d:8a:6a:dc:cd:89:02:e5:
         b6:6f:d8:35:e0:99:97:02:c3:a1:2c:d0:09:2c:5e:11:f7:ef:
         95:09:85:3f:aa:e2:51:9a:5a:a0:ae:68:52:33:ba:c6:35:d7:
         b8:0c:8c:36:68:41:75:77:3f:5b:32:65:1f:c2:10:c5:c6:1a:
         03:15:d2:53:ad:bc:fd:7f:17:c7:f6:3c:c5:6c:22:88:41:de:
         cb:64:7b:2b:18:21:c0:2d:ab:ac:dc:a2:37:30:1c:90:63:68:
         3d:20:62:eb:d6:af:e0:f0:9c:5a:c7:22:5f:75:19:89:ec:8d:
         e6:99:35:23
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY2dx9JGdm0EKb01La/j9zE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YTAzYTAwM2IwMTg3NjM1MDc1MjllNjBhMjc4M2U4OWVj
NjE3MjcwHhcNMjQwMjEyMTQ0NTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWQ2NmRmMGE5OGY5YzJkYzJmY2VlMWM4MGZlZGU4NDcyMDk2YmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo1dgqeHa0EhGeVwXN+QU8Q3Bufy
Ejxi00SSMefD71xnBqVPzOyH4BJB+uUiyad6/W/yPv6hPNjiODvCIczNdEzqJrEx
q+PcVIQEzZ1Uxb7xHIghvmcHhUUJRYsH7RvX6dFC3bgxuAGfNg26u5EMkn3oeybU
Vo+4baR22qDMQBYigRrN5tjNH5Ke4B/jZfWC9NeyD2LjVRTcMfJ7hNM0PiYXvY4o
g5D2hH7r/YvHyX6l6ObqrwxGIQIQmfx5erIsfCc0XKb25VL8BSSnyKPT9xCK15LS
NNMMjK3UEiNF2ThyAGpJgZtdPZHdSAoEaxsefrSaf98vNKicypJVbRQlmQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKnWbfCpj5wtwvzuHID+3oRyCWv+MB8GA1UdIwQY
MBaAFBWgOgA7AYdjUHUp5gong+iexhcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmFBNkFEc0JoMk5RZFNubUNpZUQ2SjdHRnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80OTQ4MzQtZjU1OS00MGZmLWFiMWYt
ZjcwM2Y0ZWJhNTUzLzEvcWRadDhLbVBuQzNDX080Y2dQN2VoSElKYV80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80OTQ4MzQtZjU1OS00MGZmLWFiMWYtZjcwM2Y0ZWJhNTUz
LzEvRmFBNkFEc0JoMk5RZFNubUNpZUQ2SjdHRnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwRECMA0E
AgACMAcDBQAqBySAMA0GCSqGSIb3DQEBCwUAA4IBAQBIIqzoFjD+K/JpGdnC2nk3
UWIQA94aP5Z8eh0ch0HnQnhtq+D8hmiwfxLv8b2wuMJjrpqUmHYidd3kyOXO+jkJ
AXVuqJ9NsnwM/i7IjqAds3nfmPXe9FQdIpwIzxCee0ENGwV9WJhukixHZqaLByXY
eIewuSrwp4v/ysnmg63rWTJYg2pFx523DYpq3M2JAuW2b9g14JmXAsOhLNAJLF4R
9++VCYU/quJRmlqgrmhSM7rGNde4DIw2aEF1dz9bMmUfwhDFxhoDFdJTrbz9fxfH
9jzFbCKIQd7LZHsrGCHALaus3KI3MByQY2g9IGLr1q/g8JxaxyJfdRmJ7I3mmTUj
-----END CERTIFICATE-----