Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8EvMbgAAkieJ-_Xsa6XSUpeUbtY.roa
File:                     8EvMbgAAkieJ-_Xsa6XSUpeUbtY.roa (raw, json)
Hash identifier:          /AcuyJAEK0rpFN4Yxwk3pLsuLkOxHrWq7eCJKWRyO7c=
Subject key identifier:   F0:4B:CC:6E:00:00:92:27:89:FB:F5:EC:6B:A5:D2:52:97:94:6E:D6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01845EB2275F200211BAD38A5E8A8EBB567C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8EvMbgAAkieJ-_Xsa6XSUpeUbtY.roa
Signing time:             Wed 09 Nov 2022 23:20:44 +0000
ROA not before:           Wed 09 Nov 2022 23:20:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51312
IP address blocks:        2a06:a005:2280::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5e:b2:27:5f:20:02:11:ba:d3:8a:5e:8a:8e:bb:56:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov  9 23:20:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f04bcc6e0000922789fbf5ec6ba5d25297946ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:e5:74:9f:8a:51:e9:93:9e:4e:89:69:e8:
                    95:e9:9a:e0:e8:eb:56:1a:d1:41:dd:af:44:a4:9b:
                    2a:64:e9:f2:d6:6c:12:f9:1e:76:34:43:2d:6e:95:
                    d8:e1:d2:0c:9a:e3:76:76:94:b2:c4:95:7d:b1:86:
                    01:f8:23:0e:bc:1d:9b:bf:16:7d:95:35:ae:fb:cb:
                    91:93:4a:b6:fc:8f:6e:8d:b5:16:75:bb:aa:61:d4:
                    ae:db:2b:2c:90:b4:f2:12:ce:c9:28:78:c9:21:b0:
                    f0:80:af:f4:a9:fb:c3:5a:80:86:f6:07:12:b8:ef:
                    95:fd:46:fb:6c:71:a1:6a:05:20:13:26:58:2b:2c:
                    04:54:cc:39:33:b9:50:ba:36:05:c7:8a:f0:aa:7c:
                    52:c7:4a:a5:73:d1:2c:54:4f:81:19:c6:b2:c8:dd:
                    b3:fe:3b:11:d4:e6:f8:f7:54:a2:5e:85:d7:1d:9e:
                    cb:d2:86:a0:5c:50:c3:4c:13:a0:db:74:8b:d5:f2:
                    d4:51:f0:d0:b4:97:fe:9d:0a:f8:cb:0f:02:1e:7e:
                    3b:6c:0b:7b:2b:8f:11:7e:da:5e:9a:f9:8f:c8:04:
                    3c:e0:4d:c7:65:91:b3:57:e0:66:e7:5f:f8:9b:72:
                    fc:b2:e5:7b:50:19:ee:e3:a1:53:2c:f3:dd:10:1e:
                    77:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4B:CC:6E:00:00:92:27:89:FB:F5:EC:6B:A5:D2:52:97:94:6E:D6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8EvMbgAAkieJ-_Xsa6XSUpeUbtY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2280::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:d4:c2:d7:96:4d:d7:24:bb:0b:17:6c:2f:14:9b:b4:79:bb:
         bc:e8:94:c5:31:bc:ab:5e:93:4b:c4:ba:f1:a9:2a:66:66:15:
         98:b9:4b:2a:8f:f1:95:ca:ff:6f:71:8a:a5:ad:9c:f6:eb:86:
         bc:c9:11:a6:1f:6f:16:40:b0:02:f1:6d:4c:61:c8:c4:fa:76:
         2b:37:aa:09:5e:4b:66:ad:64:5e:ab:0a:6d:e5:94:7a:32:ec:
         1d:2b:8c:4f:02:37:c7:23:1f:50:ee:21:0f:16:fb:09:d1:a7:
         a2:3a:ed:bd:9f:67:ff:66:31:bc:ab:c5:31:a9:05:64:73:39:
         ca:c0:72:42:5c:32:48:40:3e:31:3b:cf:81:ce:84:74:9b:1e:
         00:18:56:50:fb:30:a4:d4:5d:bd:0f:57:04:6d:07:65:d9:81:
         7a:83:26:8c:dc:e0:b7:36:70:cd:20:80:c5:1d:d3:7e:2d:1d:
         5e:54:f5:c0:60:9b:38:c8:81:1a:66:3f:f9:74:d4:8a:03:b5:
         74:22:f5:07:08:a3:b9:b1:42:f8:ad:a5:d3:12:13:59:92:55:
         4d:69:f5:e0:34:d6:97:e5:2d:79:b1:39:1e:cb:49:93:f4:7b:
         70:29:ef:f6:1d:ba:fe:b1:3d:80:af:42:eb:f0:ce:79:0e:91:
         b9:56:d3:76
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYResidfIAIRutOKXoqOu1Z8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTA5MjMyMDQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDRiY2M2ZTAwMDA5MjI3ODlmYmY1ZWM2YmE1ZDI1Mjk3OTQ2ZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyTldJ+KUemTnk6JaeiV6Zrg6OtW
GtFB3a9EpJsqZOny1mwS+R52NEMtbpXY4dIMmuN2dpSyxJV9sYYB+CMOvB2bvxZ9
lTWu+8uRk0q2/I9ujbUWdbuqYdSu2ysskLTyEs7JKHjJIbDwgK/0qfvDWoCG9gcS
uO+V/Ub7bHGhagUgEyZYKywEVMw5M7lQujYFx4rwqnxSx0qlc9EsVE+BGcayyN2z
/jsR1Ob491SiXoXXHZ7L0oagXFDDTBOg23SL1fLUUfDQtJf+nQr4yw8CHn47bAt7
K48RftpemvmPyAQ84E3HZZGzV+Bm51/4m3L8suV7UBnu46FTLPPdEB53JwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPBLzG4AAJInifv17Gul0lKXlG7WMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvOEV2TWJnQUFraWVKLV9Yc2E2WFNVcGVVYnRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBSKA
MA0GCSqGSIb3DQEBCwUAA4IBAQCL1MLXlk3XJLsLF2wvFJu0ebu86JTFMbyrXpNL
xLrxqSpmZhWYuUsqj/GVyv9vcYqlrZz264a8yRGmH28WQLAC8W1MYcjE+nYrN6oJ
XktmrWReqwpt5ZR6MuwdK4xPAjfHIx9Q7iEPFvsJ0aeiOu29n2f/ZjG8q8UxqQVk
cznKwHJCXDJIQD4xO8+BzoR0mx4AGFZQ+zCk1F29D1cEbQdl2YF6gyaM3OC3NnDN
IIDFHdN+LR1eVPXAYJs4yIEaZj/5dNSKA7V0IvUHCKO5sUL4raXTEhNZklVNafXg
NNaX5S15sTkey0mT9HtwKe/2Hbr+sT2Ar0Lr8M55DpG5VtN2
-----END CERTIFICATE-----