Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7dHyDhGGO71nx2x5l0RfkRrht1o.roa
File:                     7dHyDhGGO71nx2x5l0RfkRrht1o.roa (raw, json)
Hash identifier:          dTxmGX4Fcl6k5y3LgblqYzWpqtjSfoUs0czMD4npqVo=
Subject key identifier:   ED:D1:F2:0E:11:86:3B:BD:67:C7:6C:79:97:44:5F:91:1A:E1:B7:5A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01820E1E6A9D0065DB9C2F406485F6CD8F5F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7dHyDhGGO71nx2x5l0RfkRrht1o.roa
Signing time:             Sun 17 Jul 2022 21:44:10 +0000
ROA not before:           Sun 17 Jul 2022 21:44:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210387
IP address blocks:        2a06:a005:5e1::/48 maxlen: 48
                          2a06:a001:a0f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:0e:1e:6a:9d:00:65:db:9c:2f:40:64:85:f6:cd:8f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 17 21:44:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=edd1f20e11863bbd67c76c7997445f911ae1b75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:8d:05:03:36:09:a2:ab:59:fd:59:70:ac:
                    7a:66:5d:aa:46:55:cd:40:37:b2:62:90:b9:c9:81:
                    25:0b:bd:d7:14:2f:b0:03:6d:63:43:d4:23:bb:f9:
                    cb:10:30:65:c6:fb:c1:c0:62:1d:62:9c:39:31:f9:
                    f8:5e:07:6d:0e:6b:a4:44:68:d0:61:04:5a:6c:cc:
                    20:2c:ed:2d:1b:cc:bf:7b:25:c7:7f:1d:a4:a0:28:
                    d0:c3:67:5c:7d:c5:ab:a1:30:ef:7c:e5:3e:b2:81:
                    d6:ea:b5:2d:43:c4:9b:7a:b9:76:da:8b:e3:b9:d1:
                    0c:84:87:ed:47:ff:02:6d:95:77:81:ac:d3:89:37:
                    a2:b7:71:a3:a4:df:c3:23:12:5e:5d:fa:11:d1:ee:
                    40:eb:37:53:2c:58:7d:bd:53:ee:00:35:4d:61:88:
                    e4:b1:43:dc:45:3c:6c:fb:5e:44:7c:b9:73:83:cf:
                    0f:ac:18:f8:a7:c0:aa:70:76:0d:29:1f:e6:b3:e9:
                    34:87:6a:26:f4:81:84:97:27:64:38:7d:27:d6:11:
                    94:af:c9:41:82:16:27:5c:19:0d:76:c0:78:11:5f:
                    f1:fe:77:0f:ec:28:e1:71:c5:80:72:f3:d0:b3:79:
                    84:35:e0:10:7e:55:c6:44:a5:9a:ee:90:78:2f:e8:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D1:F2:0E:11:86:3B:BD:67:C7:6C:79:97:44:5F:91:1A:E1:B7:5A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7dHyDhGGO71nx2x5l0RfkRrht1o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a0f0::/44
                  2a06:a005:5e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:89:da:5c:05:ed:bb:d0:5a:6c:ec:c2:7f:6d:2e:30:e6:74:
         d0:67:10:74:8b:67:ae:99:12:d2:95:47:87:0f:5d:40:63:fa:
         e6:61:35:2f:4e:b5:f4:34:37:79:d1:e6:41:ab:7d:99:52:40:
         9b:28:f8:06:68:ed:6b:c8:76:36:00:1a:5f:cd:17:55:71:8b:
         17:a9:5d:9d:0a:4c:c2:a4:33:38:d9:92:5a:06:05:da:0f:bc:
         80:38:19:35:2e:16:28:59:f3:50:8a:95:d0:88:6a:0c:0a:50:
         f6:71:87:4e:9c:b7:0e:19:25:b2:b7:86:d0:54:62:cd:2f:76:
         1b:0b:69:db:f0:bd:49:53:df:96:55:8c:cb:f7:e1:13:00:37:
         3a:50:f3:d7:e1:29:3b:b9:b3:43:44:97:19:f8:50:25:25:97:
         99:4f:2f:a7:7b:47:f7:d0:24:4b:31:0e:19:c9:c7:20:ea:eb:
         82:39:9d:a6:78:fe:10:95:5d:3f:5b:f7:84:c3:d8:88:e0:a0:
         55:dd:5e:7c:02:1d:ac:a7:76:3d:1f:b7:c7:8e:9d:f4:4e:df:
         91:46:a7:4c:55:bb:f0:74:f7:b1:81:ec:95:b9:89:64:31:6d:
         c9:e8:b5:25:27:7f:52:4e:63:8e:3f:b7:a0:8b:bb:e4:6e:48:
         56:60:7b:aa
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYIOHmqdAGXbnC9AZIX2zY9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzE3MjE0NDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGQxZjIwZTExODYzYmJkNjdjNzZjNzk5NzQ0NWY5MTFhZTFiNzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptyNBQM2CaKrWf1ZcKx6Zl2qRlXN
QDeyYpC5yYElC73XFC+wA21jQ9Qju/nLEDBlxvvBwGIdYpw5Mfn4XgdtDmukRGjQ
YQRabMwgLO0tG8y/eyXHfx2koCjQw2dcfcWroTDvfOU+soHW6rUtQ8Sberl22ovj
udEMhIftR/8CbZV3gazTiTeit3GjpN/DIxJeXfoR0e5A6zdTLFh9vVPuADVNYYjk
sUPcRTxs+15EfLlzg88PrBj4p8CqcHYNKR/ms+k0h2om9IGElydkOH0n1hGUr8lB
ghYnXBkNdsB4EV/x/ncP7CjhccWAcvPQs3mENeAQflXGRKWa7pB4L+hmyQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO3R8g4Rhju9Z8dseZdEX5Ea4bdaMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvN2RIeURoR0dPNzFueDJ4NWwwUmZrUnJodDFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgagAaDw
AwcAKgagBQXhMA0GCSqGSIb3DQEBCwUAA4IBAQBsidpcBe270Fps7MJ/bS4w5nTQ
ZxB0i2eumRLSlUeHD11AY/rmYTUvTrX0NDd50eZBq32ZUkCbKPgGaO1ryHY2ABpf
zRdVcYsXqV2dCkzCpDM42ZJaBgXaD7yAOBk1LhYoWfNQipXQiGoMClD2cYdOnLcO
GSWyt4bQVGLNL3YbC2nb8L1JU9+WVYzL9+ETADc6UPPX4Sk7ubNDRJcZ+FAlJZeZ
Ty+ne0f30CRLMQ4Zyccg6uuCOZ2meP4QlV0/W/eEw9iI4KBV3V58Ah2sp3Y9H7fH
jp30Tt+RRqdMVbvwdPexgeyVuYlkMW3J6LUlJ39STmOOP7egi7vkbkhWYHuq
-----END CERTIFICATE-----