Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1whM-LjLvARjbaM2HulIJszL7QA.roa
File:                     1whM-LjLvARjbaM2HulIJszL7QA.roa (raw, json)
Hash identifier:          JiNOtkwUl3r8d2VmQOcggEBL6GMUhepJ6wOxzFdKrys=
Subject key identifier:   D7:08:4C:F8:B8:CB:BC:04:63:6D:A3:36:1E:E9:48:26:CC:CB:ED:00
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182756AB678211B7B57D5CC4BFCA251C6B2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1whM-LjLvARjbaM2HulIJszL7QA.roa
Signing time:             Sat 06 Aug 2022 23:08:23 +0000
ROA not before:           Sat 06 Aug 2022 23:08:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204268
IP address blocks:        2a06:a005:a12::/48 maxlen: 48
                          2a06:a005:1000::/44 maxlen: 48
                          2a06:a005:15b0::/44 maxlen: 48
                          2a06:a005:a0e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:75:6a:b6:78:21:1b:7b:57:d5:cc:4b:fc:a2:51:c6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  6 23:08:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d7084cf8b8cbbc04636da3361ee94826cccbed00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:18:7c:c3:95:7a:72:92:f4:76:b2:ea:2f:7e:
                    68:01:1c:b7:55:d7:c6:bb:1e:cd:1f:0b:d4:29:e6:
                    f5:8d:72:a7:d5:1a:22:24:0a:36:3b:0c:43:a9:83:
                    48:f0:aa:63:26:40:91:e9:12:a9:4b:a0:0b:a4:e9:
                    b2:44:86:72:6b:5d:95:ec:98:0a:aa:5e:fb:fd:1f:
                    e8:db:9f:48:2d:23:3d:3e:83:63:9b:55:73:80:93:
                    34:f2:45:4e:7d:60:18:18:f6:68:bc:fe:a6:02:bb:
                    8f:18:54:95:e6:97:a6:19:2d:a9:c3:84:71:41:af:
                    b4:6c:8e:40:86:fa:39:61:d8:df:c3:09:b4:fa:90:
                    a9:05:be:09:60:a4:f4:46:e2:9d:b2:0f:3d:70:cd:
                    ea:e5:03:a6:02:1b:91:86:2c:d0:d1:c2:14:5d:df:
                    19:86:e3:67:67:f3:82:69:17:49:be:95:c0:26:09:
                    3f:f5:97:bf:70:60:91:99:43:eb:fd:be:7f:4a:8b:
                    58:36:2e:e0:3c:9b:ce:26:b1:01:60:ca:53:0f:c9:
                    00:91:e5:14:7e:e2:32:7c:77:15:db:7a:81:1f:a8:
                    c0:0c:7d:6f:74:19:03:68:05:14:48:13:87:81:2b:
                    b2:7e:e7:ba:cc:44:dc:c2:ce:15:76:3e:5e:d1:64:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:08:4C:F8:B8:CB:BC:04:63:6D:A3:36:1E:E9:48:26:CC:CB:ED:00
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1whM-LjLvARjbaM2HulIJszL7QA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a0e::/48
                  2a06:a005:a12::/48
                  2a06:a005:1000::/44
                  2a06:a005:15b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:47:90:52:53:79:34:9d:bc:a9:01:4f:a1:34:c0:fd:a4:96:
         5e:a9:5e:33:2a:91:9d:c6:2c:1a:8a:b9:c1:e7:07:ea:0f:92:
         40:72:74:bb:a4:8b:d9:c7:05:77:c2:3f:75:5b:a4:74:73:62:
         65:84:8f:3c:5d:b8:05:7f:d8:28:8d:82:a1:b3:93:b1:be:9b:
         96:f6:73:24:a1:87:77:73:d0:55:6d:21:ec:b4:58:dd:36:d7:
         a3:0b:88:78:3e:e9:76:55:6b:5b:ac:98:14:15:6f:57:74:7f:
         d6:24:d3:cd:94:3b:fa:1f:5c:01:00:be:bf:86:36:4b:68:d5:
         51:a5:07:9a:24:20:38:c0:7b:c2:de:bb:e5:d8:be:ee:b4:04:
         96:bc:14:52:db:8c:1d:8f:99:8b:11:f2:9c:12:57:bf:7f:15:
         c1:ed:c1:f1:66:86:f5:6f:b5:b2:91:46:52:5e:f6:d5:55:a7:
         2b:a4:01:af:9d:20:04:38:d6:1e:cb:eb:17:f0:6c:12:5b:a1:
         58:f1:14:08:1f:6c:df:99:d0:dd:dd:3a:f5:f7:2f:4a:09:9d:
         ab:e4:4c:06:2b:86:83:43:81:0e:10:46:e6:98:64:00:0e:12:
         bd:05:91:ec:8e:e8:42:1f:ef:f6:59:46:5e:7f:6b:b9:55:ee:
         56:8d:8a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----