Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7EXUTtnxsMoLicyp1VOxgc-Lq_g.roa
File:                     7EXUTtnxsMoLicyp1VOxgc-Lq_g.roa (raw, json)
Hash identifier:          Z56p9Mhmi6sA2UlyGKQZ389BU6Y/ahhB/CdzYeOCMVA=
Subject key identifier:   EC:45:D4:4E:D9:F1:B0:CA:0B:89:CC:A9:D5:53:B1:81:CF:8B:AB:F8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182AFD7ECE1A3B658A48E155AC6D5D83D07
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7EXUTtnxsMoLicyp1VOxgc-Lq_g.roa
Signing time:             Thu 18 Aug 2022 07:25:39 +0000
ROA not before:           Thu 18 Aug 2022 07:25:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203333
IP address blocks:        2a06:a005:1860::/44 maxlen: 48
                          2a06:a005:480::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:af:d7:ec:e1:a3:b6:58:a4:8e:15:5a:c6:d5:d8:3d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 18 07:25:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec45d44ed9f1b0ca0b89cca9d553b181cf8babf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:40:d3:d8:e8:b4:6e:89:f0:60:e8:05:8c:
                    3d:d6:53:7b:df:d3:c7:3c:0f:dd:17:da:1a:ad:7b:
                    17:60:c5:8e:92:d7:5b:55:ae:3c:6b:c6:a4:30:37:
                    f9:71:59:b5:f6:16:fd:2b:49:67:7e:21:68:04:5a:
                    6b:3b:86:1c:da:9e:39:16:9c:91:eb:13:f3:81:8b:
                    c6:20:62:8c:7e:8b:f5:b8:0f:41:00:88:34:7a:a6:
                    76:02:4f:9d:00:c2:b1:47:87:e4:20:b7:3f:d4:da:
                    b1:b0:49:d5:66:e5:1a:ba:e1:84:5a:b4:51:f6:a5:
                    1f:12:b5:1e:1c:63:d9:a0:51:63:65:83:e2:fe:b5:
                    e1:93:bb:55:08:5d:b8:d6:8d:14:52:57:3b:25:d4:
                    18:a9:32:54:76:80:d3:dd:e8:48:9c:61:e5:60:b4:
                    8b:7e:6e:f5:5f:c4:8f:63:81:d7:12:7e:92:fa:08:
                    51:a3:80:f6:1c:68:d8:7b:41:c9:2f:70:6f:b7:08:
                    e3:98:f0:20:8f:2c:f3:9e:6b:e4:1f:cf:17:20:12:
                    9f:36:cc:f8:a3:36:71:3a:e5:68:a0:ff:da:3b:02:
                    94:01:91:1c:ee:1b:bd:59:97:77:13:16:2c:9f:e6:
                    42:5a:c0:f0:af:c4:f8:29:ef:89:a9:8f:9e:0c:38:
                    0d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:45:D4:4E:D9:F1:B0:CA:0B:89:CC:A9:D5:53:B1:81:CF:8B:AB:F8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7EXUTtnxsMoLicyp1VOxgc-Lq_g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:480::/48
                  2a06:a005:1860::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:33:6b:23:14:61:eb:d0:fc:f0:99:7c:42:b6:dd:90:20:b1:
         89:b1:e4:ea:5b:ff:24:8e:9f:ef:b3:7f:3e:0c:3e:2c:4f:13:
         1f:f2:2a:eb:10:e7:18:6a:b1:26:ca:5e:1e:4a:40:c9:9a:80:
         0e:3d:3f:db:45:64:cd:0c:ee:84:e7:73:21:8b:a8:0d:f3:3d:
         1b:be:e9:94:64:ed:11:01:96:31:17:07:50:4e:1f:0c:2c:16:
         03:98:57:de:88:b7:2c:2d:c0:c9:9c:0b:fb:42:77:92:a7:dd:
         fd:13:6f:fb:00:42:30:05:f5:d6:41:f3:2b:8f:fd:c7:d9:b2:
         35:0d:a5:1c:51:ab:ab:4c:8c:21:e6:b3:04:53:2c:d3:62:a4:
         1f:ee:24:77:48:1a:f1:34:f8:c8:ad:56:e3:e9:44:25:af:be:
         23:bb:d2:cd:31:75:6e:88:4a:c1:57:19:61:06:f5:67:60:ca:
         1a:23:c4:1d:95:ad:e6:ea:18:84:90:a0:d1:4a:5d:00:85:8d:
         6a:b6:1a:15:66:fb:8e:28:fd:3b:76:d7:b5:4b:10:be:57:72:
         71:c8:7c:1c:bb:90:13:ab:cf:da:51:92:7d:e5:ed:b5:03:2c:
         66:75:29:cb:e6:20:d3:a9:50:be:65:76:75:d5:e1:49:66:41:
         8a:63:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----