Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-rQcpf2uC_x1XpAR85Y33rIYzQI.roa
File:                     1-rQcpf2uC_x1XpAR85Y33rIYzQI.roa (raw, json)
Hash identifier:          R1DRij1yFayCtg2+ZDHblYUVnuZcj4W2Tuo0OCAWZiM=
Subject key identifier:   FA:B4:1C:A5:FD:AE:0B:FC:75:5E:90:11:F3:96:37:DE:B2:18:CD:02
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15B97D6E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-rQcpf2uC_x1XpAR85Y33rIYzQI.roa
Signing time:             Sat 01 Jan 2022 05:59:05 +0000
ROA not before:           Sat 01 Jan 2022 05:59:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     148996
IP address blocks:        2a06:a001:a000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364477806 (0x15b97d6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:59:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fab41ca5fdae0bfc755e9011f39637deb218cd02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:df:49:68:65:4e:b5:c6:64:b6:9e:4e:22:
                    a1:e5:9d:01:66:b1:b6:d2:05:13:ae:54:34:2a:0d:
                    34:9f:23:d5:83:aa:6a:af:2a:27:e1:f1:a8:90:25:
                    71:e7:2e:73:5d:1f:b7:fd:dd:b4:b5:07:4b:60:dd:
                    a9:64:35:cd:3b:c4:46:29:2b:97:bb:a5:93:db:73:
                    56:cc:27:7e:0a:c0:e8:02:3a:a6:c4:03:0a:88:64:
                    7e:d7:5d:2e:c7:1a:48:ba:7b:08:29:86:f4:f2:bd:
                    37:bc:cf:d6:2f:26:b5:e2:3d:d6:96:42:9f:a1:1c:
                    c1:34:8c:c9:e3:65:3d:94:67:a2:21:35:12:09:26:
                    ff:8b:2e:5c:60:1c:bf:eb:21:c8:eb:a9:a8:83:0f:
                    86:02:9a:8e:80:e7:b3:3c:8e:73:dc:76:9f:76:23:
                    a2:2b:96:eb:b3:ee:68:bb:81:de:35:39:d5:4e:73:
                    41:a0:d1:be:0e:fd:22:75:de:af:dd:9c:a9:ae:d8:
                    8e:dc:fa:25:3f:3b:3d:df:f4:8b:c4:9d:9a:f4:d0:
                    18:5d:eb:aa:93:36:de:d1:4c:c9:ed:ee:27:61:16:
                    20:cb:97:c5:41:7b:95:33:7a:26:39:3f:df:94:1c:
                    0f:9b:20:31:59:71:00:89:79:ee:f9:a2:5a:ea:a1:
                    41:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B4:1C:A5:FD:AE:0B:FC:75:5E:90:11:F3:96:37:DE:B2:18:CD:02
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-rQcpf2uC_x1XpAR85Y33rIYzQI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a000::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:e3:bb:fb:94:55:bf:07:02:70:fc:19:65:99:b1:fe:8f:99:
         df:b6:3d:d1:37:61:74:37:41:d7:11:32:50:97:67:07:71:96:
         f0:c3:72:7c:2a:ad:22:53:34:9a:08:41:40:7f:86:a1:92:89:
         4d:67:e1:25:f9:22:99:10:92:88:ce:e8:54:cb:b8:74:f0:10:
         1f:4a:83:50:b1:55:aa:22:b1:03:e3:74:73:f1:cd:8d:4c:41:
         b4:b4:4d:ed:53:3b:dd:c3:3e:91:1d:4e:1e:53:53:81:53:3d:
         eb:fd:24:ac:95:c1:5f:6e:22:86:a5:d0:4c:b2:4c:7b:9e:d2:
         23:ca:dd:f4:2e:7a:7e:ab:bc:ac:e7:6e:cd:71:3a:fc:52:37:
         4d:fb:ad:bf:c5:8d:77:6c:69:cb:2c:7e:d8:d7:b2:09:7c:0a:
         13:6b:45:01:5b:ac:11:13:46:47:a5:c8:bd:9c:a5:77:51:dc:
         8a:e7:ed:70:52:8b:ea:ca:5b:5d:27:45:f6:b7:a7:aa:16:8c:
         d5:c6:1c:9f:3c:47:8b:f5:4b:74:b0:6e:9a:b7:df:cc:f8:ff:
         31:55:66:5b:47:6b:a2:9d:9c:c5:03:ba:30:e8:90:3c:e6:de:
         af:68:5d:31:4f:32:0c:93:df:77:bb:e6:20:cd:48:a0:76:1a:
         fa:1a:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----