Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7s4Di8C8DUesJGR1jqynZ8ZPeZY.roa
File:                     7s4Di8C8DUesJGR1jqynZ8ZPeZY.roa (raw, json)
Hash identifier:          3qnNLauA1OgibO5dvs59enk+x1ELwU9TPQiccbOZ6fY=
Subject key identifier:   EE:CE:03:8B:C0:BC:0D:47:AC:24:64:75:8E:AC:A7:67:C6:4F:79:96
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182DAE315E23280F7EFE6F177100FD4FC21
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7s4Di8C8DUesJGR1jqynZ8ZPeZY.roa
Signing time:             Fri 26 Aug 2022 16:01:31 +0000
ROA not before:           Fri 26 Aug 2022 16:01:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203174
IP address blocks:        2a06:a005:1a10::/44 maxlen: 48
                          2a06:a005:1900::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:da:e3:15:e2:32:80:f7:ef:e6:f1:77:10:0f:d4:fc:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 26 16:01:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eece038bc0bc0d47ac2464758eaca767c64f7996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:20:3e:fc:1f:b7:0e:3d:5f:54:95:98:89:46:
                    dd:e0:88:c6:56:8e:51:0b:ec:e9:e7:f2:b6:75:26:
                    6f:40:2c:cf:20:3a:60:af:e8:8a:a7:fd:7c:b9:7b:
                    0d:db:4d:32:20:3e:2d:c2:08:0f:21:72:7f:42:27:
                    01:03:3d:fe:67:3c:b7:6c:a1:97:2e:c4:09:00:16:
                    4c:bb:6a:87:3b:b8:49:3f:54:f3:6f:6c:c6:90:ab:
                    d4:2a:22:5e:f1:2e:cf:86:20:26:6b:67:f9:f6:fc:
                    77:ba:20:58:66:e2:2e:78:45:7f:f2:2a:7c:45:9e:
                    83:53:fc:c9:51:12:02:f8:43:66:5a:b4:2d:0c:43:
                    cf:3e:a7:e8:6b:5f:0a:2b:86:af:53:f6:70:6b:5d:
                    e6:ce:da:c2:be:6b:a2:2a:12:c6:bf:3d:79:7b:86:
                    55:21:b4:c6:d1:27:a4:ff:4d:29:dc:d9:57:36:02:
                    6c:14:31:a4:bf:e5:f7:c3:d1:bc:8f:f1:e8:52:af:
                    15:86:b6:66:43:ae:c9:93:5f:bd:6e:c6:30:40:d0:
                    d7:a1:94:74:f1:55:43:be:10:04:a1:bd:18:02:d8:
                    c0:1c:e0:df:0c:a5:e6:03:f1:eb:64:f2:c1:37:75:
                    1f:a8:ff:01:f1:8e:a0:72:f6:67:9a:78:4c:47:fc:
                    9a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CE:03:8B:C0:BC:0D:47:AC:24:64:75:8E:AC:A7:67:C6:4F:79:96
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7s4Di8C8DUesJGR1jqynZ8ZPeZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1900::/44
                  2a06:a005:1a10::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:40:11:5a:0b:f6:a8:9a:c0:5b:1a:7a:8f:cb:ce:3d:61:22:
         55:86:e1:f4:b0:1c:ac:45:21:03:e5:39:a5:d0:a0:72:ec:08:
         98:69:87:ae:d7:f9:7c:c6:49:b4:54:c9:0e:2e:f4:fd:5a:ac:
         1d:c0:f0:6b:9a:b2:bf:d4:8c:3a:1c:7c:bf:d4:c7:08:99:c4:
         58:31:11:8d:a0:49:2a:68:26:42:56:02:b6:e6:49:c2:9d:cb:
         7b:a5:80:d3:a4:bc:48:fb:3c:7e:66:ef:b0:ea:bf:7b:a9:f9:
         07:c8:b7:b0:7e:42:f9:b8:9f:c7:72:07:e2:a2:31:da:ff:2f:
         13:95:3b:75:78:d6:f8:ff:af:92:b4:1b:9e:bd:63:7a:13:24:
         6a:a9:a9:5f:46:c1:dc:68:4e:eb:78:50:8f:8f:3e:14:4b:cd:
         93:fc:f7:85:e2:26:86:e5:b4:e8:11:38:ea:00:5b:f8:39:ec:
         e0:a6:a2:7e:3c:4a:1c:55:81:f8:94:5e:16:de:df:72:c1:f6:
         6b:e7:23:5d:76:fb:b0:54:ff:dd:65:05:e6:cb:9f:33:81:58:
         34:d4:bb:22:28:85:f6:20:9d:57:23:a1:19:98:97:b2:b2:30:
         2b:52:09:98:41:4e:2d:69:c9:53:71:d5:b1:54:59:0a:a7:7e:
         f5:e7:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----