Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3dPihjYlXOvkYBbUwUwfZxQZGyk.roa
File:                     3dPihjYlXOvkYBbUwUwfZxQZGyk.roa (raw, json)
Hash identifier:          vIgMa9qMCbawww1nzsqcRlWhK+BajPKoHRXL4DObKME=
Subject key identifier:   DD:D3:E2:86:36:25:5C:EB:E4:60:16:D4:C1:4C:1F:67:14:19:1B:29
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01831D77A71D2353CB9305A168BD56E44D76
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3dPihjYlXOvkYBbUwUwfZxQZGyk.roa
Signing time:             Thu 08 Sep 2022 14:18:44 +0000
ROA not before:           Thu 08 Sep 2022 14:18:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203333
IP address blocks:        2a06:a005:1860::/44 maxlen: 48
                          2a06:a005:12f0::/44 maxlen: 48
                          2a06:a005:d25::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:1d:77:a7:1d:23:53:cb:93:05:a1:68:bd:56:e4:4d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  8 14:18:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ddd3e28636255cebe46016d4c14c1f6714191b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:97:8d:f5:1e:26:11:62:fa:b1:e9:ff:85:df:
                    54:49:39:6c:d0:08:18:32:01:2c:f4:1b:10:c5:20:
                    21:8f:c1:67:e9:07:5a:a3:c0:0f:06:a8:40:9d:45:
                    cc:d6:f8:e8:14:b9:45:cc:30:55:e3:89:40:da:c5:
                    58:bf:6e:55:ad:62:94:15:cc:33:96:6e:db:9f:f4:
                    66:8e:90:d3:88:70:fc:bb:14:36:73:15:98:2b:6f:
                    09:d7:13:23:39:c1:f5:7d:39:a9:74:66:a7:44:5b:
                    f6:c9:3b:d8:59:aa:45:c8:f1:45:85:b7:bc:1e:34:
                    d0:20:4b:ba:d7:bd:96:99:7e:fa:a9:bb:0f:93:c2:
                    76:ce:21:a9:7e:8d:5f:e6:f0:10:b3:68:8b:53:61:
                    45:63:5e:be:17:85:6e:d3:92:8f:e5:f7:e7:e5:56:
                    37:4a:ff:19:57:8c:75:0b:75:db:d6:6d:fb:9a:1e:
                    b8:34:6e:89:3d:45:ed:ac:90:ee:6d:3e:8c:ef:e1:
                    e5:9e:56:f1:1e:f4:e2:3c:86:8a:20:20:ce:17:24:
                    8c:44:59:19:c5:fd:f6:9e:e4:18:fb:f4:e6:e9:09:
                    f4:21:b7:36:62:4e:07:13:fa:51:14:0b:a8:2b:72:
                    96:25:ff:48:3d:17:ec:35:6a:75:05:58:ee:3c:46:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D3:E2:86:36:25:5C:EB:E4:60:16:D4:C1:4C:1F:67:14:19:1B:29
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3dPihjYlXOvkYBbUwUwfZxQZGyk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d25::/48
                  2a06:a005:12f0::/44
                  2a06:a005:1860::/44

    Signature Algorithm: sha256WithRSAEncryption
         a1:09:68:1b:c0:4e:8f:a5:09:78:e3:73:24:a4:f3:a2:1c:00:
         b7:c7:58:84:a1:24:8a:d4:5a:6c:63:b5:49:cc:69:83:31:b2:
         8a:39:cd:8c:6d:61:bd:3c:ec:11:bc:27:53:6b:02:d8:c4:5e:
         2b:6d:7c:76:49:92:38:49:29:8d:c1:1f:9a:e2:16:07:72:ba:
         20:f3:b9:46:82:4d:cb:18:57:4b:56:e4:75:60:38:e8:7b:3b:
         c9:7a:5c:e7:76:cf:89:ae:ec:d7:32:8c:a1:1c:67:14:11:e7:
         dd:7a:93:5d:7e:63:fa:ef:64:1f:43:49:7a:c6:ea:0d:0e:fb:
         cb:49:5d:24:57:4a:78:5d:06:c5:31:9b:5c:1d:8b:79:10:40:
         77:5a:a3:45:48:9f:a3:7b:fb:d5:01:dd:bc:01:7c:05:12:a4:
         35:a2:e2:41:e8:10:67:49:34:5d:47:83:78:5e:bd:fe:f8:07:
         fc:9c:c9:e2:63:24:5a:d1:15:c1:77:5c:d3:d7:59:0a:5d:d0:
         db:66:92:47:45:36:74:12:6f:6d:31:f1:8c:cd:80:a7:25:ea:
         33:0b:b7:90:0a:00:ea:6f:fa:65:e6:42:76:9b:e3:41:c3:67:
         69:32:b7:b8:06:49:74:a5:f7:31:6c:fb:82:d1:b4:05:a5:7d:
         30:00:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----