Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5rAvbKMPuROM1-EnYb_ib-Bg-8k.roa
File:                     5rAvbKMPuROM1-EnYb_ib-Bg-8k.roa (raw, json)
Hash identifier:          ibRtoImeEAOctyZcMoSLVBHGBL4wkENo1Sre3OTkbaA=
Subject key identifier:   E6:B0:2F:6C:A3:0F:B9:13:8C:D7:E1:27:61:BF:E2:6F:E0:60:FB:C9
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01824FD9184126682A1804247A274CDCA742
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5rAvbKMPuROM1-EnYb_ib-Bg-8k.roa
Signing time:             Sat 30 Jul 2022 16:03:23 +0000
ROA not before:           Sat 30 Jul 2022 16:03:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209806
IP address blocks:        2a06:a005:2d9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:4f:d9:18:41:26:68:2a:18:04:24:7a:27:4c:dc:a7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 30 16:03:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e6b02f6ca30fb9138cd7e12761bfe26fe060fbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:66:65:6e:0e:af:b0:ba:fd:34:a0:63:36:31:
                    ff:99:2d:88:ac:ea:92:2b:d2:69:75:2e:8a:db:ae:
                    fe:a9:f8:84:11:95:6c:c7:3b:29:27:f7:0a:48:93:
                    1f:21:8d:41:57:b3:4b:3e:97:14:cd:f6:fb:84:8b:
                    cf:76:3a:ba:b7:5e:cd:ab:73:fd:29:60:aa:b0:e3:
                    03:a3:70:c5:ac:41:eb:39:e6:fd:42:11:96:cb:a3:
                    cb:69:e3:16:b7:47:9c:1b:86:52:d2:08:ed:99:ed:
                    77:6b:33:eb:3a:34:78:9c:cd:11:fa:1e:f6:cb:62:
                    98:56:73:98:57:fd:42:73:3a:5d:12:b0:7f:3e:1b:
                    c0:37:5f:54:ff:1b:56:0f:d9:1a:bc:8a:c1:28:25:
                    92:9a:3a:da:6d:28:71:7e:95:85:64:5b:28:6e:2d:
                    b9:3d:88:31:d1:78:35:b4:fa:12:48:ab:60:a9:b3:
                    e6:23:6b:ca:cd:e9:04:49:2d:76:c8:6d:48:85:02:
                    33:7a:5b:ba:24:5e:db:72:c1:02:d6:4f:62:75:6e:
                    2c:13:37:14:af:67:c4:25:76:2b:d0:ee:04:ed:ce:
                    5b:36:cb:3a:d1:ed:df:d4:07:48:ba:cc:c0:62:35:
                    26:4b:b4:69:e5:fd:95:cd:98:dc:9b:55:b9:0b:85:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B0:2F:6C:A3:0F:B9:13:8C:D7:E1:27:61:BF:E2:6F:E0:60:FB:C9
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5rAvbKMPuROM1-EnYb_ib-Bg-8k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2d9::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:48:db:c0:39:e2:ba:09:81:2f:b1:aa:92:fa:70:2b:b3:1f:
         5a:e9:87:a0:c4:1a:d9:d0:94:35:bb:a4:db:f3:6e:2a:e9:b0:
         f4:cc:d5:7b:83:79:03:89:a2:d1:24:d0:6f:09:07:88:ed:8f:
         ea:39:07:36:b1:9a:cc:6c:fb:e7:8c:f7:06:1a:00:9c:a3:16:
         65:bb:15:b4:b1:37:be:04:7f:a2:06:97:0a:17:43:fc:db:7f:
         b0:be:3f:2a:ef:30:c4:97:8d:ca:61:ad:6a:47:b3:aa:4c:8a:
         a6:4b:b9:a6:1e:6e:84:54:cd:2e:6b:fd:e7:0c:06:40:51:ad:
         aa:b2:34:03:85:b0:57:f9:f7:b6:84:7f:15:99:17:61:5f:d7:
         02:44:97:09:63:e9:23:1f:b8:cd:81:17:f3:3d:e2:fb:f7:f4:
         3c:61:08:8a:3b:cf:4c:cb:4f:fb:68:89:c1:e8:ee:6b:3d:7c:
         2b:fb:24:8b:e8:9e:10:3f:05:78:bb:d4:29:c7:ef:ec:08:83:
         df:92:36:ab:df:b2:b0:76:e9:94:26:7c:f0:f4:87:7c:eb:ea:
         e7:a2:49:52:0f:a3:46:69:6d:3f:59:57:46:81:f3:89:2d:1d:
         e8:35:54:c5:fc:3d:81:4a:38:9b:72:6a:e3:0b:dc:18:5e:10:
         2e:ae:1c:96
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYJP2RhBJmgqGAQkeidM3KdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzMwMTYwMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmIwMmY2Y2EzMGZiOTEzOGNkN2UxMjc2MWJmZTI2ZmUwNjBmYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Zlbg6vsLr9NKBjNjH/mS2IrOqS
K9JpdS6K267+qfiEEZVsxzspJ/cKSJMfIY1BV7NLPpcUzfb7hIvPdjq6t17Nq3P9
KWCqsOMDo3DFrEHrOeb9QhGWy6PLaeMWt0ecG4ZS0gjtme13azPrOjR4nM0R+h72
y2KYVnOYV/1CczpdErB/PhvAN19U/xtWD9kavIrBKCWSmjrabShxfpWFZFsobi25
PYgx0Xg1tPoSSKtgqbPmI2vKzekESS12yG1IhQIzelu6JF7bcsEC1k9idW4sEzcU
r2fEJXYr0O4E7c5bNss60e3f1AdIuszAYjUmS7Rp5f2VzZjcm1W5C4UVTwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOawL2yjD7kTjNfhJ2G/4m/gYPvJMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvNXJBdmJLTVB1Uk9NMS1FblliX2liLUJnLThrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQLZ
MA0GCSqGSIb3DQEBCwUAA4IBAQCVSNvAOeK6CYEvsaqS+nArsx9a6YegxBrZ0JQ1
u6Tb824q6bD0zNV7g3kDiaLRJNBvCQeI7Y/qOQc2sZrMbPvnjPcGGgCcoxZluxW0
sTe+BH+iBpcKF0P823+wvj8q7zDEl43KYa1qR7OqTIqmS7mmHm6EVM0ua/3nDAZA
Ua2qsjQDhbBX+fe2hH8VmRdhX9cCRJcJY+kjH7jNgRfzPeL79/Q8YQiKO89My0/7
aInB6O5rPXwr+ySL6J4QPwV4u9Qpx+/sCIPfkjar37KwdumUJnzw9Id86+rnoklS
D6NGaW0/WVdGgfOJLR3oNVTF/D2BSjibcmrjC9wYXhAurhyW
-----END CERTIFICATE-----