Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/M2Akt9qhVlIau7nQZNg1DukimX8.roa
File:                     M2Akt9qhVlIau7nQZNg1DukimX8.roa (raw, json)
Hash identifier:          daBg2Cxu5lpGCGP/M1ncwmjgQx6XFP0YNEK8V04N9cE=
Subject key identifier:   33:60:24:B7:DA:A1:56:52:1A:BB:B9:D0:64:D8:35:0E:E9:22:99:7F
Certificate issuer:       /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial:       0189B13E49FD05017C19AFB7E7E4C4990EE5
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/M2Akt9qhVlIau7nQZNg1DukimX8.roa
Signing time:             Tue 01 Aug 2023 13:16:36 +0000
ROA not before:           Tue 01 Aug 2023 13:16:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212144
IP address blocks:        2a0f:e3c0::/30 maxlen: 30
                          2a0f:89c0::/29 maxlen: 29
                          2a0f:e3c4::/31 maxlen: 31
                          2a10:3e84::/30 maxlen: 30
                          2a0f:63c0::/29 maxlen: 29
                          2a07:f240::/29 maxlen: 32
                          2a10:a9c0::/29 maxlen: 29
                          2a0f:9bc0::/29 maxlen: 30
                          2a0f:e3c6::/32 maxlen: 32
                          2a0b:a4c0::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b1:3e:49:fd:05:01:7c:19:af:b7:e7:e4:c4:99:0e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
        Validity
            Not Before: Aug  1 13:16:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=336024b7daa156521abbb9d064d8350ee922997f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:a5:ee:a2:b9:f0:5d:8b:43:54:98:09:9d:
                    21:2a:f7:61:39:eb:3e:15:a3:2a:17:96:d2:19:34:
                    37:46:4c:96:ab:ad:bd:f7:69:e7:4d:f2:f9:2f:df:
                    94:e3:57:a5:5c:70:d5:7c:1b:de:72:99:4b:f2:6e:
                    f4:df:50:d4:db:7d:06:47:ab:52:df:5f:8b:9a:e2:
                    2f:cf:f8:75:a4:53:6b:25:38:95:c8:da:57:a7:56:
                    fc:68:48:39:fa:35:0f:10:d3:e1:76:a3:91:f3:df:
                    d4:f1:83:23:bf:8d:4f:f5:d3:36:1e:23:99:92:67:
                    d2:5c:c6:f1:03:e7:c0:10:55:56:44:40:c5:94:d7:
                    cf:0c:58:da:e5:5d:ce:c6:b3:3d:5e:68:35:7d:2e:
                    95:4d:fc:41:35:96:9a:5d:9f:33:41:69:a0:fa:31:
                    e5:51:cc:0d:bd:7b:73:05:70:da:09:99:80:c0:ac:
                    60:83:03:f9:88:70:19:e0:cc:70:03:24:a3:09:dc:
                    94:ce:7d:8d:b7:58:21:32:fa:69:70:69:d0:e9:46:
                    f2:b0:de:bc:a4:f4:8f:4a:b3:c6:8b:09:31:1b:22:
                    75:fc:11:23:01:27:ac:81:08:d7:4b:7a:fd:7c:75:
                    57:e1:ed:9d:0a:5b:1c:f7:c6:e4:25:f2:74:5b:14:
                    4f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:60:24:B7:DA:A1:56:52:1A:BB:B9:D0:64:D8:35:0E:E9:22:99:7F
            X509v3 Authority Key Identifier:
                keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/M2Akt9qhVlIau7nQZNg1DukimX8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:f240::/29
                  2a0b:a4c0::/29
                  2a0f:63c0::/29
                  2a0f:89c0::/29
                  2a0f:9bc0::/29
                  2a0f:e3c0::-2a0f:e3c6:ffff:ffff:ffff:ffff:ffff:ffff
                  2a10:3e84::/30
                  2a10:a9c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         9b:6c:16:a1:50:0c:c2:6b:45:92:b5:9a:37:0d:91:61:39:92:
         b9:3e:31:65:20:ab:15:18:7c:0e:df:67:13:03:56:05:4b:13:
         23:10:b5:3a:0e:70:90:54:d3:51:9b:1a:b0:5d:20:8c:23:7d:
         88:c0:3c:01:83:c0:8c:30:f9:29:2e:c5:57:8c:17:5b:51:b0:
         5f:8c:70:40:17:70:e4:0c:7e:8d:32:07:5c:7d:01:06:f1:05:
         88:66:d1:84:eb:4d:a2:22:84:90:9e:47:41:9b:51:79:0d:bc:
         4b:6b:2a:ff:94:b7:6e:8a:95:f1:20:8b:66:8c:b9:56:d1:c6:
         7c:c2:77:92:ef:d1:9f:bd:fb:24:4e:c3:78:7e:4e:cd:7b:7c:
         8c:f7:c7:5f:24:4f:ce:dc:39:d0:1f:6a:96:f1:dd:42:ff:79:
         81:d7:93:2b:6b:40:86:69:18:fe:21:c3:3f:90:de:77:64:1a:
         df:b3:7f:d8:8e:e2:47:b5:e1:37:1c:4d:8e:d0:ef:25:79:0e:
         da:5e:c4:86:4a:95:3f:a9:92:e4:35:90:a0:43:ac:1c:79:94:
         dc:f1:78:ae:ad:fd:3f:97:2a:10:f8:55:db:a4:9b:67:50:d7:
         c2:d0:8f:c3:97:ab:20:9a:3d:c7:6e:e8:31:b2:1c:96:e5:94:
         f2:5b:13:15
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAYmxPkn9BQF8Ga+35+TEmQ7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNTViMWNhMzcyNDI1NWQ2MGEwYTFlZjI5NTcyN2RmMDhl
M2IxNGMwHhcNMjMwODAxMTMxNjM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzYwMjRiN2RhYTE1NjUyMWFiYmI5ZDA2NGQ4MzUwZWU5MjI5OTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqul7qK58F2LQ1SYCZ0hKvdhOes+
FaMqF5bSGTQ3RkyWq62992nnTfL5L9+U41elXHDVfBvecplL8m7031DU230GR6tS
31+LmuIvz/h1pFNrJTiVyNpXp1b8aEg5+jUPENPhdqOR89/U8YMjv41P9dM2HiOZ
kmfSXMbxA+fAEFVWREDFlNfPDFja5V3OxrM9Xmg1fS6VTfxBNZaaXZ8zQWmg+jHl
UcwNvXtzBXDaCZmAwKxggwP5iHAZ4MxwAySjCdyUzn2Nt1ghMvppcGnQ6UbysN68
pPSPSrPGiwkxGyJ1/BEjASesgQjXS3r9fHVX4e2dClsc98bkJfJ0WxRPIwIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFDNgJLfaoVZSGru50GTYNQ7pIpl/MB8GA1UdIwQY
MBaAFLxVsco3JCVdYKCh7ylXJ98I47FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkZXeHlqY2tKVjFnb0tIdktWY24zd2pqc1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zN2ZkN2ItMTMwMy00MDRmLWE1ODgt
Y2JiM2NkOWZlZGZlLzEvTTJBa3Q5cWhWbElhdTduUVpOZzFEdWtpbVg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zN2ZkN2ItMTMwMy00MDRmLWE1ODgtY2JiM2NkOWZlZGZl
LzEvdkZXeHlqY2tKVjFnb0tIdktWY24zd2pqc1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTBHBAIAAjBBAwUDKgfyQAMF
AyoLpMADBQMqD2PAAwUDKg+JwAMFAyoPm8AwDgMFBioP48ADBQAqD+PGAwUCKhA+
hAMFAyoQqcAwDQYJKoZIhvcNAQELBQADggEBAJtsFqFQDMJrRZK1mjcNkWE5krk+
MWUgqxUYfA7fZxMDVgVLEyMQtToOcJBU01GbGrBdIIwjfYjAPAGDwIww+SkuxVeM
F1tRsF+McEAXcOQMfo0yB1x9AQbxBYhm0YTrTaIihJCeR0GbUXkNvEtrKv+Ut26K
lfEgi2aMuVbRxnzCd5Lv0Z+9+yROw3h+Ts17fIz3x18kT87cOdAfapbx3UL/eYHX
kytrQIZpGP4hwz+Q3ndkGt+zf9iO4ke14TccTY7Q7yV5DtpexIZKlT+pkuQ1kKBD
rBx5lNzxeK6t/T+XKhD4Vdukm2dQ18LQj8OXqyCaPcdu6DGyHJbllPJbExU=
-----END CERTIFICATE-----