Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4BDdIqJLBh7KXdh29UU_E9cYf0s.roa
File:                     4BDdIqJLBh7KXdh29UU_E9cYf0s.roa (raw, json)
Hash identifier:          vCT7mWXCA+QDVp7Fyd3EA9Pmg5NQvo8FFLj9c2vLUMk=
Subject key identifier:   E0:10:DD:22:A2:4B:06:1E:CA:5D:D8:76:F5:45:3F:13:D7:18:7F:4B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184E232CB08E9A51FBED96295952BDBFC3C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4BDdIqJLBh7KXdh29UU_E9cYf0s.roa
Signing time:             Mon 05 Dec 2022 12:11:30 +0000
ROA not before:           Mon 05 Dec 2022 12:11:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200895
IP address blocks:        2a0a:6040:d700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e2:32:cb:08:e9:a5:1f:be:d9:62:95:95:2b:db:fc:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  5 12:11:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e010dd22a24b061eca5dd876f5453f13d7187f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:be:2a:5a:94:87:e6:6f:2d:de:78:50:b6:
                    92:75:c4:de:c2:c1:4a:fc:87:c4:c6:29:8e:0f:9e:
                    82:79:5a:d8:8f:61:e8:1f:61:bd:9c:e0:78:62:c2:
                    4a:42:0d:5c:ee:bc:f1:25:10:35:7e:56:5b:dc:78:
                    fe:86:5b:6c:4d:09:1f:02:a6:bb:cc:fd:a5:de:f4:
                    6b:f0:fd:e0:0c:7a:c6:1a:1f:de:4d:11:84:f0:79:
                    67:1e:4a:7d:7d:61:45:0e:55:2c:23:db:51:87:d4:
                    99:1c:32:19:67:e9:bb:3c:98:f6:ac:fa:71:e7:63:
                    b3:07:27:e2:de:a1:ea:d2:81:a9:ad:4d:57:3b:5f:
                    42:6a:d0:3b:65:22:0c:8b:65:2a:6e:c6:e1:41:ac:
                    97:fd:b0:47:aa:94:57:95:1e:0b:5b:91:ab:a1:29:
                    c6:0d:43:21:d5:68:5b:d6:8b:3b:68:75:f2:40:24:
                    e1:83:5a:44:d6:22:07:54:fc:8a:6c:58:12:75:e6:
                    8c:c1:08:86:92:6f:73:3c:6c:c8:b5:a0:ea:44:7a:
                    a8:27:6f:99:6b:68:1e:ae:7b:13:6a:ae:74:9b:15:
                    1d:d3:02:78:7e:fb:ae:0b:c6:8b:e9:d9:a2:c4:a5:
                    16:0f:97:99:fc:18:69:fb:d0:bd:8e:f9:1c:0f:64:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:10:DD:22:A2:4B:06:1E:CA:5D:D8:76:F5:45:3F:13:D7:18:7F:4B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4BDdIqJLBh7KXdh29UU_E9cYf0s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:d700::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:8d:3f:1f:e3:d5:81:9b:75:db:f7:05:f9:c5:bf:8d:5d:00:
         fc:20:81:74:d7:3f:e3:9e:37:c1:fa:31:48:86:a7:d0:67:ae:
         fd:8e:c6:c4:5d:41:5f:c5:be:aa:e2:08:bd:18:fe:89:3c:c3:
         91:1d:9a:1a:9b:bc:b3:22:73:26:7d:16:86:c8:39:a7:b3:0f:
         7b:6c:79:c1:5d:76:06:74:02:35:f4:ee:fc:06:55:b0:31:e3:
         89:49:94:7d:df:54:18:41:14:62:ad:ba:af:85:0a:cf:36:fa:
         59:64:e2:b9:d5:04:75:bb:38:c1:ad:4e:6e:03:b4:d5:71:ab:
         0e:56:3c:2c:1f:26:86:23:09:2c:04:74:f9:57:7f:d2:06:4d:
         10:f1:1b:24:e8:0c:c3:a6:23:1b:42:6b:fd:50:73:89:df:3f:
         91:d6:de:67:19:82:cb:a7:69:2b:63:5b:49:62:bf:cd:c1:27:
         44:e0:40:7c:3e:61:80:39:34:77:37:16:09:a9:ec:9c:9f:c7:
         25:eb:4f:33:b6:dd:e1:d6:3d:d2:b9:af:df:ab:dc:4d:10:e8:
         61:4b:44:bd:25:81:59:54:f9:ee:30:c8:89:27:ab:7c:67:a7:
         61:35:bf:74:a3:94:55:bf:d4:d1:de:d5:21:7e:ef:63:7c:36:
         c2:aa:b3:8c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYTiMssI6aUfvtlilZUr2/w8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjA1MTIxMTMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDEwZGQyMmEyNGIwNjFlY2E1ZGQ4NzZmNTQ1M2YxM2Q3MTg3ZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpG+KlqUh+ZvLd54ULaSdcTewsFK
/IfEximOD56CeVrYj2HoH2G9nOB4YsJKQg1c7rzxJRA1flZb3Hj+hltsTQkfAqa7
zP2l3vRr8P3gDHrGGh/eTRGE8HlnHkp9fWFFDlUsI9tRh9SZHDIZZ+m7PJj2rPpx
52OzByfi3qHq0oGprU1XO19CatA7ZSIMi2UqbsbhQayX/bBHqpRXlR4LW5GroSnG
DUMh1Whb1os7aHXyQCThg1pE1iIHVPyKbFgSdeaMwQiGkm9zPGzItaDqRHqoJ2+Z
a2gernsTaq50mxUd0wJ4fvuuC8aL6dmixKUWD5eZ/Bhp+9C9jvkcD2SbQQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOAQ3SKiSwYeyl3YdvVFPxPXGH9LMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvNEJEZElxSkxCaDdLWGRoMjlVVV9FOWNZZjBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQNcw
DQYJKoZIhvcNAQELBQADggEBAJiNPx/j1YGbddv3BfnFv41dAPwggXTXP+OeN8H6
MUiGp9Bnrv2OxsRdQV/FvqriCL0Y/ok8w5EdmhqbvLMicyZ9FobIOaezD3tsecFd
dgZ0AjX07vwGVbAx44lJlH3fVBhBFGKtuq+FCs82+llk4rnVBHW7OMGtTm4DtNVx
qw5WPCwfJoYjCSwEdPlXf9IGTRDxGyToDMOmIxtCa/1Qc4nfP5HW3mcZgsunaStj
W0liv83BJ0TgQHw+YYA5NHc3Fgmp7JyfxyXrTzO23eHWPdK5r9+r3E0Q6GFLRL0l
gVlU+e4wyIknq3xnp2E1v3SjlFW/1NHe1SF+72N8NsKqs4w=
-----END CERTIFICATE-----