Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/F6WbVBM2ed6CzHVsiaM6JSfLBmY.roa
File:                     F6WbVBM2ed6CzHVsiaM6JSfLBmY.roa (raw, json)
Hash identifier:          yy7erE1kQeH7YBSSxYURdeY4nnnAmeTCU2lvcl2vTrc=
Subject key identifier:   17:A5:9B:54:13:36:79:DE:82:CC:75:6C:89:A3:3A:25:27:CB:06:66
Certificate issuer:       /CN=2369cf693efc102c937faca7ba09cccaec574948
Certificate serial:       01A18C98EED1A6D71F20B1F5DE44D594A2C4
Authority key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/F6WbVBM2ed6CzHVsiaM6JSfLBmY.roa
Signing time:             Fri 30 Oct 2026 11:36:35 +0000
ROA not before:           Fri 30 Oct 2026 11:36:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152179
IP address blocks:        80.46.217.0/24 maxlen: 24
                          80.46.221.0/24 maxlen: 24
                          80.46.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8c:98:ee:d1:a6:d7:1f:20:b1:f5:de:44:d5:94:a2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2369cf693efc102c937faca7ba09cccaec574948
        Validity
            Not Before: Oct 30 11:36:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=17a59b54133679de82cc756c89a33a2527cb0666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a5:3f:86:20:29:74:21:37:3f:1b:d6:92:15:
                    0d:55:c9:55:f8:7d:f0:61:66:b7:70:9a:5b:ce:fc:
                    1a:23:4c:31:d2:66:95:32:58:73:11:1b:40:e6:2e:
                    4a:b2:fb:ef:19:45:cd:dd:4d:9c:26:0e:6d:e7:ca:
                    75:8a:b8:08:b8:a6:70:0a:ee:fa:26:0f:c0:0c:c8:
                    47:60:bb:75:c6:8a:37:e5:19:6e:61:72:2d:1f:50:
                    d9:bf:34:e7:48:db:8b:42:93:64:00:49:49:9c:d0:
                    5d:9b:5b:bc:54:12:6d:84:8d:5a:9c:f9:24:73:db:
                    1c:80:8d:02:9d:3d:cb:8d:50:ba:66:67:a3:f4:75:
                    db:37:66:37:9b:f4:79:d4:34:37:74:f1:fb:67:69:
                    d0:56:6b:b3:d1:a2:f9:5b:e7:9c:53:39:6e:90:a3:
                    44:97:d1:83:86:dc:f2:0e:4a:b3:0a:6e:f4:8c:a6:
                    e3:f3:21:2b:31:c5:19:cd:dc:68:35:72:83:93:9b:
                    9c:ad:f2:8d:fc:cd:33:d3:49:ab:cf:1d:9c:f6:9c:
                    28:a1:5a:22:b4:10:e0:d5:2b:9a:c3:9b:45:f3:8e:
                    ed:50:4e:fb:36:ee:15:3b:90:8c:36:f3:b5:c1:50:
                    eb:6d:d1:86:61:13:ca:78:a5:d1:19:e9:47:d3:0e:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A5:9B:54:13:36:79:DE:82:CC:75:6C:89:A3:3A:25:27:CB:06:66
            X509v3 Authority Key Identifier:
                keyid:23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/F6WbVBM2ed6CzHVsiaM6JSfLBmY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.46.217.0/24
                  80.46.221.0-80.46.222.255

    Signature Algorithm: sha256WithRSAEncryption
         50:23:ed:9f:08:c4:f7:76:08:d1:f3:50:9f:2c:85:11:fe:a0:
         75:42:14:8c:c5:de:46:93:dd:e6:fb:53:8a:4d:a9:cb:6a:31:
         47:d1:ce:f0:c9:24:c8:35:be:b2:02:56:ae:01:e8:fe:b7:7f:
         2c:5b:4a:f5:5b:63:5c:56:71:37:e1:df:ee:4e:33:60:38:50:
         7c:88:31:28:22:4d:db:5b:07:c4:9f:30:ad:ec:94:46:54:7b:
         5e:88:47:cd:85:d9:29:6d:2e:06:bd:2d:2e:8a:28:05:b5:7d:
         4a:f1:22:6d:4d:66:57:16:e7:82:55:03:52:98:d1:51:a5:66:
         72:47:8a:2d:5b:36:3d:8a:84:56:fd:51:e9:62:39:42:60:25:
         0e:a6:48:15:c8:e0:2e:12:b3:47:10:d9:eb:d5:8a:58:8d:d3:
         10:6d:de:cc:c9:ba:f2:ff:f8:f7:26:b9:30:bb:09:bb:f3:32:
         ad:17:95:1a:49:8e:0f:d8:80:aa:96:6d:78:95:09:5c:7d:d4:
         bb:73:1c:b0:d7:ec:06:13:01:a2:ef:c5:1d:8c:ef:5e:a2:ff:
         05:d0:55:b9:25:7c:29:c8:14:4a:13:8e:dd:0a:2b:05:06:5c:
         76:f8:81:eb:7b:f2:98:7e:86:e9:26:d3:a5:af:95:a1:04:f4:
         cf:58:8e:11
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaGMmO7RptcfILH13kTVlKLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNjljZjY5M2VmYzEwMmM5MzdmYWNhN2JhMDljY2NhZWM1
NzQ5NDgwHhcNMjYxMDMwMTEzNjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2E1OWI1NDEzMzY3OWRlODJjYzc1NmM4OWEzM2EyNTI3Y2IwNjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KU/hiApdCE3PxvWkhUNVclV+H3w
YWa3cJpbzvwaI0wx0maVMlhzERtA5i5KsvvvGUXN3U2cJg5t58p1irgIuKZwCu76
Jg/ADMhHYLt1xoo35RluYXItH1DZvzTnSNuLQpNkAElJnNBdm1u8VBJthI1anPkk
c9scgI0CnT3LjVC6Zmej9HXbN2Y3m/R51DQ3dPH7Z2nQVmuz0aL5W+ecUzlukKNE
l9GDhtzyDkqzCm70jKbj8yErMcUZzdxoNXKDk5ucrfKN/M0z00mrzx2c9pwooVoi
tBDg1Suaw5tF847tUE77Nu4VO5CMNvO1wVDrbdGGYRPKeKXRGelH0w4D0wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBelm1QTNnnegsx1bImjOiUnywZmMB8GA1UdIwQY
MBaAFCNpz2k+/BAsk3+sp7oJzMrsV0lIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTJuUGFUNzhFQ3lUZjZ5bnVnbk15dXhYU1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82MGViMTktOTVmYy00ZDcxLWJjOTEt
MWRmZDVkOTc3YWRiLzEvRjZXYlZCTTJlZDZDekhWc2lhTTZKU2ZMQm1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82MGViMTktOTVmYy00ZDcxLWJjOTEtMWRmZDVkOTc3YWRi
LzEvSTJuUGFUNzhFQ3lUZjZ5bnVnbk15dXhYU1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAUC7ZMAwD
BABQLt0DBABQLt4wDQYJKoZIhvcNAQELBQADggEBAFAj7Z8IxPd2CNHzUJ8shRH+
oHVCFIzF3kaT3eb7U4pNqctqMUfRzvDJJMg1vrICVq4B6P63fyxbSvVbY1xWcTfh
3+5OM2A4UHyIMSgiTdtbB8SfMK3slEZUe16IR82F2SltLga9LS6KKAW1fUrxIm1N
ZlcW54JVA1KY0VGlZnJHii1bNj2KhFb9UeliOUJgJQ6mSBXI4C4Ss0cQ2evViliN
0xBt3szJuvL/+PcmuTC7CbvzMq0XlRpJjg/YgKqWbXiVCVx91LtzHLDX7AYTAaLv
xR2M716i/wXQVbklfCnIFEoTjt0KKwUGXHb4get78ph+hukm06WvlaEE9M9YjhE=
-----END CERTIFICATE-----