Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-O27ijkCVIg-OYFSG_mpvY3EIjU.roa
File:                     1-O27ijkCVIg-OYFSG_mpvY3EIjU.roa (raw, json)
Hash identifier:          blsW3yyli/2xkq8pj3n0eZlK+dV37SGQLxYiRAxED/U=
Subject key identifier:   F8:ED:BB:8A:39:02:54:88:3E:39:81:52:1B:F9:A9:BD:8D:C4:22:35
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018496F03B4E32D5F88C91644BD52F2A75E3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-O27ijkCVIg-OYFSG_mpvY3EIjU.roa
Signing time:             Sun 20 Nov 2022 21:27:16 +0000
ROA not before:           Sun 20 Nov 2022 21:27:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201733
IP address blocks:        2a06:a005:2360::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:96:f0:3b:4e:32:d5:f8:8c:91:64:4b:d5:2f:2a:75:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 20 21:27:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8edbb8a390254883e3981521bf9a9bd8dc42235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:81:e6:a5:49:01:04:26:e3:db:a4:69:c0:93:
                    c2:e2:9e:07:57:20:1b:99:d2:8b:35:e4:76:64:60:
                    d1:64:37:03:55:ed:1f:06:c6:36:26:d9:5d:1f:b3:
                    22:e7:75:2d:1f:28:4f:c5:c3:e1:84:13:16:48:5e:
                    ea:ec:cc:76:06:92:b1:8d:46:ea:c3:cc:4e:d2:50:
                    16:6e:36:82:79:9d:b5:31:e2:4b:f5:64:c6:4b:3e:
                    79:c8:3d:46:86:bb:2c:75:95:74:5b:1c:a2:10:e1:
                    ef:c1:89:55:13:b2:ff:8a:f5:75:a6:6b:79:3f:e3:
                    2b:b1:95:f4:2c:42:41:17:57:b3:33:22:a3:04:ba:
                    30:25:59:3c:15:8b:d2:c9:a9:6e:88:76:e2:00:05:
                    72:98:48:c2:f8:47:4b:02:98:9f:c8:13:c3:d5:ff:
                    6b:f0:f3:1f:b3:66:67:c9:47:d9:f6:bb:13:09:bb:
                    89:e5:07:d6:b4:a8:6c:e4:97:0d:e9:3e:6f:0e:bd:
                    7e:4c:1b:00:85:70:60:d8:8c:77:c4:71:c3:f6:30:
                    ff:1c:67:82:70:2b:74:a7:ed:a7:9e:f1:d8:23:1e:
                    84:ae:2e:58:3b:61:b6:35:bd:ec:f7:fb:53:23:36:
                    a2:19:84:ce:c4:64:f6:ca:0d:c2:6b:a3:cb:b5:e4:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:ED:BB:8A:39:02:54:88:3E:39:81:52:1B:F9:A9:BD:8D:C4:22:35
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-O27ijkCVIg-OYFSG_mpvY3EIjU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2360::/44

    Signature Algorithm: sha256WithRSAEncryption
         52:fc:09:c2:fe:18:c1:32:22:a7:d2:42:88:9d:10:73:08:51:
         26:3d:d0:d0:cc:88:83:b7:55:e0:a7:7a:cb:a1:6e:81:23:cd:
         2d:b8:b1:75:ab:1a:09:55:fe:37:2e:3b:b1:da:99:07:e9:25:
         0b:29:1a:a7:02:f7:86:cf:91:e3:06:d2:42:e3:95:d3:d9:d9:
         85:da:e9:fe:a8:6f:f8:ef:61:dd:46:71:77:71:72:d5:11:ae:
         b9:63:5f:d9:02:9c:3d:fb:c5:a8:05:ba:d4:e5:8a:ae:20:1c:
         4b:ed:90:a5:ce:b8:56:39:2a:a6:29:14:46:eb:2f:a3:16:52:
         56:f2:1f:49:11:e5:db:f9:3f:36:f5:62:1e:05:92:07:03:77:
         9d:d5:e3:4c:63:af:3c:4f:54:d5:89:bc:39:20:44:f3:9e:16:
         29:3d:07:0f:d4:00:9d:0e:6f:d4:52:66:b7:71:03:01:4a:5a:
         49:11:e9:97:57:94:60:c5:b9:5d:84:03:90:ed:86:fe:0f:26:
         62:a7:6c:d9:2e:45:b5:b1:1a:79:70:fe:3c:d4:69:3d:c1:63:
         7d:76:97:79:6d:6f:c8:98:c1:ed:f9:6e:ad:a7:d8:f1:5e:b2:
         7f:1d:1f:a7:90:36:6a:b1:44:a0:f9:a4:8b:cd:b0:63:51:e2:
         2d:dd:61:55
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAYSW8DtOMtX4jJFkS9UvKnXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTIwMjEyNzE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGVkYmI4YTM5MDI1NDg4M2UzOTgxNTIxYmY5YTliZDhkYzQyMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4HmpUkBBCbj26RpwJPC4p4HVyAb
mdKLNeR2ZGDRZDcDVe0fBsY2JtldH7Mi53UtHyhPxcPhhBMWSF7q7Mx2BpKxjUbq
w8xO0lAWbjaCeZ21MeJL9WTGSz55yD1GhrssdZV0WxyiEOHvwYlVE7L/ivV1pmt5
P+MrsZX0LEJBF1ezMyKjBLowJVk8FYvSyaluiHbiAAVymEjC+EdLApifyBPD1f9r
8PMfs2ZnyUfZ9rsTCbuJ5QfWtKhs5JcN6T5vDr1+TBsAhXBg2Ix3xHHD9jD/HGeC
cCt0p+2nnvHYIx6Eri5YO2G2Nb3s9/tTIzaiGYTOxGT2yg3Ca6PLteTFpQIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFPjtu4o5AlSIPjmBUhv5qb2NxCI1MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvMS1PMjdpamtDVklnLU9ZRlNHX21wdlkzRUlqVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUz
Ny8xL1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGoAUj
YDANBgkqhkiG9w0BAQsFAAOCAQEAUvwJwv4YwTIip9JCiJ0QcwhRJj3Q0MyIg7dV
4Kd6y6FugSPNLbixdasaCVX+Ny47sdqZB+klCykapwL3hs+R4wbSQuOV09nZhdrp
/qhv+O9h3UZxd3Fy1RGuuWNf2QKcPfvFqAW61OWKriAcS+2Qpc64VjkqpikURusv
oxZSVvIfSRHl2/k/NvViHgWSBwN3ndXjTGOvPE9U1Ym8OSBE854WKT0HD9QAnQ5v
1FJmt3EDAUpaSRHpl1eUYMW5XYQDkO2G/g8mYqds2S5FtbEaeXD+PNRpPcFjfXaX
eW1vyJjB7flurafY8V6yfx0fp5A2arFEoPmki82wY1HiLd1hVQ==
-----END CERTIFICATE-----