Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/765Yju1ktyLoI0cbfNACTKLaIUg.roa
File:                     765Yju1ktyLoI0cbfNACTKLaIUg.roa (raw, json)
Hash identifier:          rEPwxkk1xnrTBHP+KL79h0qz3YbD9Kcu2UVXmyDcmWM=
Subject key identifier:   EF:AE:58:8E:ED:64:B7:22:E8:23:47:1B:7C:D0:02:4C:A2:DA:21:48
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A1629D9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/765Yju1ktyLoI0cbfNACTKLaIUg.roa
Signing time:             Tue 24 May 2022 20:15:16 +0000
ROA not before:           Tue 24 May 2022 20:15:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208223
IP address blocks:        2a06:a005:770::/44 maxlen: 48
                          2a06:a005:4de::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437660121 (0x1a1629d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 24 20:15:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=efae588eed64b722e823471b7cd0024ca2da2148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:0e:27:6b:50:82:47:0a:5b:ce:5b:31:ea:
                    e9:03:3c:d9:fb:4a:9c:4e:bc:25:0d:a7:53:e2:e3:
                    e9:d3:f4:6b:cf:06:7d:c3:f8:9b:13:03:00:3b:74:
                    3e:79:a0:8f:4f:ec:ed:fc:3f:b5:0c:a7:80:eb:78:
                    81:c3:f2:d6:7a:b7:3c:f2:67:6c:20:ff:80:1b:a5:
                    92:17:2b:6c:51:c8:fc:0f:a5:9d:3a:5b:bf:16:d8:
                    e3:ae:72:8a:1f:d0:32:4d:0d:bc:6c:85:ed:b1:80:
                    e2:be:32:76:f3:cc:66:59:bc:fc:e5:eb:e0:7b:10:
                    77:dc:3f:0a:d9:ef:2e:82:c5:27:f9:e6:a8:b8:c7:
                    2c:54:7e:f5:a6:77:ba:9c:b6:12:08:a9:26:98:0b:
                    6f:e2:f5:7a:5c:c8:2e:3b:99:88:dd:6b:d0:a9:f4:
                    e5:42:5e:62:66:50:49:51:59:eb:c2:f7:a4:e2:56:
                    c1:92:c3:80:45:2d:1e:c9:6c:86:27:06:59:0c:10:
                    e0:d4:d9:98:a0:aa:47:ce:41:be:99:e3:de:97:1d:
                    12:c1:47:09:97:ab:70:71:77:68:40:3f:19:87:7a:
                    0b:97:00:02:13:7d:8e:a7:e0:af:22:c3:d1:63:36:
                    51:23:d5:25:80:e0:db:54:2b:66:27:cb:b9:55:bc:
                    35:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AE:58:8E:ED:64:B7:22:E8:23:47:1B:7C:D0:02:4C:A2:DA:21:48
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/765Yju1ktyLoI0cbfNACTKLaIUg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4de::/48
                  2a06:a005:770::/44

    Signature Algorithm: sha256WithRSAEncryption
         17:72:71:65:c2:70:3b:1e:ab:19:96:20:31:62:26:e8:43:8e:
         b8:29:a1:fd:7f:2b:dc:90:8e:38:34:87:d3:8c:74:13:11:a9:
         08:c0:11:f9:7b:46:79:27:68:58:28:3c:b7:d5:65:ae:b2:7f:
         66:fe:ac:fa:8d:c7:45:ce:74:1d:6d:1a:0c:91:98:cb:0a:e9:
         b7:a2:fc:d9:e0:b3:7a:b2:24:ff:f0:35:57:c2:fa:3d:8a:44:
         8d:3f:2c:fe:6d:dd:2d:dd:bc:93:71:cd:9b:ab:48:78:8d:7e:
         d2:b1:10:6c:a2:45:92:33:c2:15:d9:77:49:c2:e8:6f:23:18:
         67:08:ad:3a:3d:1e:22:73:be:09:f0:5f:3f:15:2d:70:97:3d:
         1b:7c:cf:f6:e8:aa:31:10:00:78:03:4c:b7:dc:56:b4:a3:d3:
         e5:f5:b1:5a:ec:03:d7:af:db:ac:df:6e:d3:3a:c3:19:fa:3d:
         2b:c7:31:05:3d:a2:70:4d:fa:c9:3b:c0:33:b3:4d:08:ec:e7:
         62:20:f6:74:05:f0:04:6f:c1:03:5a:57:4b:73:b8:ea:e6:24:
         f5:fc:9b:bb:fe:e0:b2:31:8b:43:67:9b:7f:64:4d:5f:47:c6:
         f1:f2:e5:0d:f7:0b:1a:cf:cf:66:e3:08:f4:9b:4f:a9:a2:46:
         3a:6f:39:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----