Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0squNJgcVQkltYWiuiFKY_8cKY8.roa
File:                     0squNJgcVQkltYWiuiFKY_8cKY8.roa (raw, json)
Hash identifier:          u44idSNdivMy2tnqVQo8bVVic5DX/z//pxSpOzweDUY=
Subject key identifier:   D2:CA:AE:34:98:1C:55:09:25:B5:85:A2:BA:21:4A:63:FF:1C:29:8F
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01823E1B296474D6C1726B1CEAED58D6F129
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0squNJgcVQkltYWiuiFKY_8cKY8.roa
Signing time:             Wed 27 Jul 2022 05:22:23 +0000
ROA not before:           Wed 27 Jul 2022 05:22:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203804
IP address blocks:        2a06:a005:1340::/44 maxlen: 48
                          2a06:a005:1350::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:3e:1b:29:64:74:d6:c1:72:6b:1c:ea:ed:58:d6:f1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 27 05:22:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d2caae34981c550925b585a2ba214a63ff1c298f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:94:8b:e0:43:15:1c:f9:15:af:12:4f:66:
                    08:14:e0:a4:fc:4a:d3:e5:f6:65:aa:8c:84:25:01:
                    17:c3:ae:b9:81:30:af:2d:29:bd:cd:ea:6b:92:26:
                    d6:fc:52:aa:92:36:fa:d4:7d:43:08:64:95:ec:d7:
                    93:99:43:92:97:c9:fb:9e:a9:8f:93:fe:18:09:a9:
                    c1:1d:ee:42:04:45:66:93:4b:0d:0e:19:a1:11:25:
                    a5:fa:fc:3f:1d:04:a3:ba:e7:02:ac:89:cb:18:f8:
                    40:c8:af:97:7d:8d:96:dd:8d:ca:b9:3b:75:30:e8:
                    23:ec:59:ac:51:72:b9:92:e4:f0:3b:21:38:a7:02:
                    ad:64:41:a6:06:08:65:42:7e:6d:25:61:f8:16:5a:
                    1e:eb:12:1a:77:01:6a:3a:19:b9:57:38:f8:29:06:
                    88:9a:17:b0:7e:08:a0:80:be:c0:ac:b3:75:fa:5f:
                    c7:54:9a:56:26:3a:c1:5f:73:03:cc:8f:a7:fc:46:
                    fb:62:75:aa:b0:01:a9:84:7e:f9:10:a2:0a:59:8c:
                    af:92:da:a1:87:51:4c:82:95:85:7c:c3:23:e6:b9:
                    69:a8:23:11:5c:7a:80:14:2b:1d:30:9e:c6:93:5d:
                    38:2a:0d:2d:e3:5e:b9:e8:58:5f:ba:07:ee:5b:3c:
                    8d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CA:AE:34:98:1C:55:09:25:B5:85:A2:BA:21:4A:63:FF:1C:29:8F
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0squNJgcVQkltYWiuiFKY_8cKY8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1340::/43

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:ad:29:c2:9a:8f:2f:ed:20:1d:31:00:bc:53:ad:6a:ac:
         35:d5:c7:c0:73:76:ad:05:ae:e1:e2:26:93:f8:6d:3a:c6:ec:
         7d:11:03:09:6a:88:09:dd:47:b0:01:61:da:e8:52:98:9c:c4:
         ce:ce:91:b5:bf:4f:c9:c1:b4:ed:62:28:9a:cb:cf:5e:49:4a:
         80:b4:9f:b9:4d:21:23:73:db:b5:72:68:32:84:0e:6e:9a:94:
         94:74:b0:bd:cc:61:b0:1b:6b:fd:44:0e:b0:ee:72:5e:03:ba:
         3f:f9:ea:dc:c4:5f:a0:fd:94:ea:f8:08:c0:25:33:49:18:94:
         a6:17:97:1a:f9:26:27:60:0f:c9:ce:16:4d:e5:2c:b7:95:bf:
         4d:4d:ba:af:b4:64:7a:e6:0c:c1:25:ce:d5:df:28:a7:b2:ce:
         92:68:a9:dc:92:60:6f:a1:8a:b3:37:14:71:b1:a0:9b:9f:2c:
         e5:25:e7:65:59:a1:9a:c6:44:dd:93:28:84:a5:b1:f4:eb:12:
         82:ac:d9:7a:a5:24:66:f0:7c:05:2a:8a:b5:4c:fe:e0:46:a6:
         cd:bb:4e:f0:b2:1c:25:b0:a8:f2:d0:bc:3f:1f:fa:24:c7:42:
         ea:eb:3b:d4:6d:c2:fe:c8:4a:e8:21:8c:59:96:85:02:af:b6:
         d8:6c:bd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----