Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/89Brkv94q6wUkQwjnNM4L-PaXuE.roa
File:                     89Brkv94q6wUkQwjnNM4L-PaXuE.roa (raw, json)
Hash identifier:          YWHbasgQtqM75v13kiHUlGfFLXXRiNJeR4nSQh9jkoY=
Subject key identifier:   F3:D0:6B:92:FF:78:AB:AC:14:91:0C:23:9C:D3:38:2F:E3:DA:5E:E1
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A878F62
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/89Brkv94q6wUkQwjnNM4L-PaXuE.roa
Signing time:             Thu 02 Jun 2022 20:34:20 +0000
ROA not before:           Thu 02 Jun 2022 20:34:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204857
IP address blocks:        2a06:a005:be0::/44 maxlen: 48
                          2a06:a005:b70::/44 maxlen: 48
                          2a06:a005:bd0::/44 maxlen: 48
                          2a06:a005:b80::/44 maxlen: 48
                          2a06:a005:b90::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445091682 (0x1a878f62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun  2 20:34:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f3d06b92ff78abac14910c239cd3382fe3da5ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:83:77:5f:a7:48:b5:9c:a6:a8:c4:83:b2:f0:
                    93:72:b7:0b:a0:67:3e:a0:c3:a5:a4:eb:48:19:7c:
                    17:3b:12:e3:0c:ea:7b:ab:11:19:80:b0:1f:46:04:
                    df:58:0a:9b:0f:5c:84:db:1a:a9:ca:33:d9:0b:15:
                    05:e0:ff:7a:ba:5f:ba:aa:4f:d6:36:49:af:1d:d8:
                    77:42:ef:df:57:ad:fa:6f:dc:e6:be:aa:5c:77:3d:
                    f3:ba:db:0f:6a:e2:0d:6e:b0:a6:48:21:f0:8a:f4:
                    3f:63:0f:76:d4:26:65:65:6e:91:b9:06:d3:15:59:
                    aa:68:dd:a9:49:5a:10:97:cd:99:d5:61:b9:71:e6:
                    49:b0:18:1c:2e:01:38:1d:40:1c:35:1f:da:d4:4f:
                    6d:56:d9:d1:70:d5:8b:b2:a5:6a:77:b6:3b:51:92:
                    2e:56:cf:0d:f9:fd:eb:08:3e:cc:64:48:70:f2:a0:
                    f1:e0:33:79:8d:91:73:4e:82:dd:00:b7:39:24:de:
                    62:c5:36:d8:5e:bb:2e:a9:da:64:f7:d6:ae:d5:d3:
                    d9:51:2a:72:59:2b:d4:04:79:f3:97:fe:bd:78:bc:
                    c0:02:c2:a8:45:2e:30:4a:ad:a9:98:86:d4:d6:04:
                    bb:c9:ac:88:cf:1e:fb:89:d6:f0:f8:fd:87:40:27:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D0:6B:92:FF:78:AB:AC:14:91:0C:23:9C:D3:38:2F:E3:DA:5E:E1
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/89Brkv94q6wUkQwjnNM4L-PaXuE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b70::-2a06:a005:b9f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:bd0::-2a06:a005:bef:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         1e:a3:8e:a4:04:bb:1a:f0:fb:bc:79:1f:b0:1a:a3:f9:d7:9e:
         1c:bb:aa:20:3e:35:92:a6:af:71:3a:c8:e8:9f:82:05:dc:ad:
         91:2a:e2:67:80:7f:cc:02:0f:e0:2c:63:21:23:86:17:6f:3b:
         ef:6d:df:b1:d1:57:76:f3:fd:0e:ed:85:04:bb:e5:45:1f:2d:
         52:89:97:7b:22:2a:b7:6b:37:77:1f:d2:38:eb:9c:d8:c1:6a:
         07:bd:1f:7c:5e:c0:dc:26:f2:6e:d1:2a:34:f6:e5:94:87:68:
         0f:47:37:0f:5f:07:f6:38:b3:40:a8:7f:a5:2b:04:4a:81:78:
         e2:b8:4d:f2:d6:91:05:c7:70:4d:41:f4:fe:5f:d1:6e:6f:f1:
         b8:03:bf:78:25:78:5f:da:2e:fd:ad:bd:3e:07:92:e5:3c:d9:
         7f:af:79:c4:f0:88:c7:1d:66:63:f1:16:41:a2:26:dd:be:71:
         e1:8b:05:e2:38:7b:f2:ca:d6:df:e0:1a:20:64:bb:3b:88:57:
         1c:d8:80:e3:df:70:5b:b7:97:49:35:34:95:3f:59:0d:43:49:
         6a:55:26:ab:9c:a3:d2:e9:95:ca:13:ce:51:6b:9a:af:d5:76:
         30:e4:8b:66:5a:5b:f7:5c:2f:44:c1:d1:ca:91:4b:c3:cd:7f:
         e9:d8:27:53
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIEGoePYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYw
MjIwMzQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjNkMDZiOTJmZjc4
YWJhYzE0OTEwYzIzOWNkMzM4MmZlM2RhNWVlMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOaDd1+nSLWcpqjEg7Lwk3K3C6BnPqDDpaTrSBl8FzsS4wzq
e6sRGYCwH0YE31gKmw9chNsaqcoz2QsVBeD/erpfuqpP1jZJrx3Yd0Lv31et+m/c
5r6qXHc987rbD2riDW6wpkgh8Ir0P2MPdtQmZWVukbkG0xVZqmjdqUlaEJfNmdVh
uXHmSbAYHC4BOB1AHDUf2tRPbVbZ0XDVi7Klane2O1GSLlbPDfn96wg+zGRIcPKg
8eAzeY2Rc06C3QC3OSTeYsU22F67LqnaZPfWrtXT2VEqclkr1AR585f+vXi8wALC
qEUuMEqtqZiG1NYEu8msiM8e+4nW8Pj9h0AnioECAwEAAaOCAiswggInMB0GA1Ud
DgQWBBTz0GuS/3irrBSRDCOc0zgv49pe4TAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
Lzg5QnJrdjk0cTZ3VWtRd2puTk00TC1QYVh1RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBB
BggrBgEFBQcBBwEB/wQyMDAwLgQCAAIwKDASAwcEKgagBQtwAwcFKgagBQuAMBID
BwQqBqAFC9ADBwQqBqAFC+AwDQYJKoZIhvcNAQELBQADggEBAB6jjqQEuxrw+7x5
H7Aao/nXnhy7qiA+NZKmr3E6yOifggXcrZEq4meAf8wCD+AsYyEjhhdvO+9t37HR
V3bz/Q7thQS75UUfLVKJl3siKrdrN3cf0jjrnNjBage9H3xewNwm8m7RKjT25ZSH
aA9HNw9fB/Y4s0Cof6UrBEqBeOK4TfLWkQXHcE1B9P5f0W5v8bgDv3gleF/aLv2t
vT4HkuU82X+vecTwiMcdZmPxFkGiJt2+ceGLBeI4e/LK1t/gGiBkuzuIVxzYgOPf
cFu3l0k1NJU/WQ1DSWpVJquco9LplcoTzlFrmq/VdjDki2ZaW/dcL0TB0cqRS8PN
f+nYJ1M=
-----END CERTIFICATE-----