Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6GFEhbWn9J_AVsAZXlpU4pvNBqY.roa
File:                     6GFEhbWn9J_AVsAZXlpU4pvNBqY.roa (raw, json)
Hash identifier:          +Lop/R1POsF3rmYFD8z5VP9IlLdJW/4OZnZmCSn/Wbw=
Subject key identifier:   E8:61:44:85:B5:A7:F4:9F:C0:56:C0:19:5E:5A:54:E2:9B:CD:06:A6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1AA34CCC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6GFEhbWn9J_AVsAZXlpU4pvNBqY.roa
Signing time:             Mon 06 Jun 2022 12:26:20 +0000
ROA not before:           Mon 06 Jun 2022 12:26:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205794
IP address blocks:        2a06:a005:c50::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446909644 (0x1aa34ccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun  6 12:26:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8614485b5a7f49fc056c0195e5a54e29bcd06a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:1b:da:c1:cf:7f:7e:2d:8e:a6:0a:52:7d:
                    ad:4b:1c:53:f2:3b:af:06:29:87:45:25:33:f1:3e:
                    3f:5c:f9:6c:57:b5:1d:ea:13:f5:5e:80:90:88:13:
                    04:61:8d:f0:52:92:d4:d5:e7:f7:22:34:be:f7:1d:
                    69:28:47:5b:86:bf:ec:a5:88:36:63:58:ae:ea:7f:
                    06:39:8c:f2:67:8f:64:fc:e3:fb:96:56:77:03:ef:
                    df:8d:30:2f:34:28:5c:48:0d:a3:f2:da:27:01:a8:
                    d4:41:d0:c0:f6:e4:30:55:c5:69:22:be:90:1b:d7:
                    a5:3e:ef:fb:e7:07:a1:12:42:39:61:57:f3:ad:84:
                    ee:82:07:21:5a:5e:1b:8d:fb:dd:c6:8a:34:ba:65:
                    9e:ef:d3:0a:26:ee:e5:83:11:71:8f:e4:46:9d:7f:
                    51:b3:15:3b:38:45:72:38:ac:77:e3:27:c0:89:9a:
                    73:db:1d:1b:73:29:07:70:f6:f5:60:2d:02:0a:79:
                    dc:72:4d:bb:b2:59:2c:bb:26:5c:b3:fc:37:ae:c2:
                    1d:38:86:95:e9:aa:8e:ad:64:47:03:32:ae:c7:e9:
                    e5:c2:25:92:4f:f2:be:6b:71:66:3f:34:d1:fe:f4:
                    5f:19:fd:69:4b:b3:a3:c7:73:77:23:35:94:a7:74:
                    ba:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:61:44:85:B5:A7:F4:9F:C0:56:C0:19:5E:5A:54:E2:9B:CD:06:A6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6GFEhbWn9J_AVsAZXlpU4pvNBqY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:c50::/44

    Signature Algorithm: sha256WithRSAEncryption
         61:01:42:27:5d:45:95:d4:1f:43:32:37:9c:41:0f:b1:39:74:
         00:a9:fd:2d:a5:66:37:4b:13:c3:d2:35:16:06:e0:00:e7:90:
         da:45:b3:b8:59:7b:5a:37:6c:d6:06:1b:c7:df:28:59:1b:12:
         0d:4f:81:d8:72:90:fc:fd:1a:e5:2d:e2:6a:d3:49:4e:37:c7:
         78:64:bd:08:3f:ce:dc:4f:a3:69:91:ea:2d:ed:a5:45:3a:f6:
         9c:d4:86:0a:65:01:70:ed:35:7b:37:dc:b7:eb:ee:77:88:b5:
         a5:59:a7:a3:08:00:2b:18:64:2a:d2:ef:af:a0:10:72:c7:b2:
         d8:ee:1c:3d:db:93:65:b1:0a:f4:30:3a:c4:9b:a0:b2:93:44:
         0f:63:66:4a:b3:f8:68:18:30:b5:88:ba:e9:9e:5e:4c:69:04:
         34:5b:68:ba:94:45:66:70:ce:b3:5c:ee:0f:04:8f:0f:5b:15:
         78:cf:3d:93:6e:e3:4e:ce:2a:a9:35:56:d7:89:c8:a2:1f:1b:
         e7:6e:78:20:c8:bd:e8:d9:7b:cc:1c:e1:33:09:8b:b8:81:eb:
         96:96:56:75:29:38:89:71:8c:1c:b3:96:e4:82:fd:e5:95:9b:
         a5:a7:1e:a4:0f:a0:1f:f9:94:9e:78:d7:dd:79:ba:de:30:bc:
         1b:a8:c6:32
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGqNMzDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYw
NjEyMjYyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTg2MTQ0ODViNWE3
ZjQ5ZmMwNTZjMDE5NWU1YTU0ZTI5YmNkMDZhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALePG9rBz39+LY6mClJ9rUscU/I7rwYph0UlM/E+P1z5bFe1
HeoT9V6AkIgTBGGN8FKS1NXn9yI0vvcdaShHW4a/7KWINmNYrup/BjmM8mePZPzj
+5ZWdwPv340wLzQoXEgNo/LaJwGo1EHQwPbkMFXFaSK+kBvXpT7v++cHoRJCOWFX
862E7oIHIVpeG4373caKNLplnu/TCibu5YMRcY/kRp1/UbMVOzhFcjisd+MnwIma
c9sdG3MpB3D29WAtAgp53HJNu7JZLLsmXLP8N67CHTiGlemqjq1kRwMyrsfp5cIl
kk/yvmtxZj800f70Xxn9aUuzo8dzdyM1lKd0uhsCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBToYUSFtaf0n8BWwBleWlTim80GpjAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
LzZHRkVoYlduOUpfQVZzQVpYbHBVNHB2TkJxWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGoAUMUDANBgkqhkiG9w0BAQsF
AAOCAQEAYQFCJ11FldQfQzI3nEEPsTl0AKn9LaVmN0sTw9I1FgbgAOeQ2kWzuFl7
Wjds1gYbx98oWRsSDU+B2HKQ/P0a5S3iatNJTjfHeGS9CD/O3E+jaZHqLe2lRTr2
nNSGCmUBcO01ezfct+vud4i1pVmnowgAKxhkKtLvr6AQcsey2O4cPduTZbEK9DA6
xJugspNED2NmSrP4aBgwtYi66Z5eTGkENFtoupRFZnDOs1zuDwSPD1sVeM89k27j
Ts4qqTVW14nIoh8b5254IMi96Nl7zBzhMwmLuIHrlpZWdSk4iXGMHLOW5IL95ZWb
pacepA+gH/mUnnjX3Xm63jC8G6jGMg==
-----END CERTIFICATE-----