Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/90WziqVDmmgTLRO98wW5PwU2xkY.roa
File:                     90WziqVDmmgTLRO98wW5PwU2xkY.roa (raw, json)
Hash identifier:          UnRfgiVR17rXCM13kt01sAspv0ozNSrKlL6LrspHhL8=
Subject key identifier:   F7:45:B3:8A:A5:43:9A:68:13:2D:13:BD:F3:05:B9:3F:05:36:C6:46
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01832F1BF38D2D37B659DB06166C4F0DAAB7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/90WziqVDmmgTLRO98wW5PwU2xkY.roa
Signing time:             Mon 12 Sep 2022 00:31:44 +0000
ROA not before:           Mon 12 Sep 2022 00:31:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208029
IP address blocks:        2a06:a005:d2b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:2f:1b:f3:8d:2d:37:b6:59:db:06:16:6c:4f:0d:aa:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 12 00:31:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f745b38aa5439a68132d13bdf305b93f0536c646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:93:e7:e0:ae:3a:52:43:97:3e:07:5e:7c:bd:
                    42:6a:8c:b2:ee:6e:df:2a:72:25:d8:ba:8e:fe:c3:
                    f4:50:a4:99:be:91:ed:86:2e:53:4d:e6:fa:55:fb:
                    1f:9d:68:2a:e5:f6:1b:81:60:69:68:7b:9d:e5:cc:
                    bd:14:21:d4:a2:d1:86:a8:2c:04:3b:1f:8c:36:7c:
                    5a:a1:de:28:8f:c8:87:59:fd:0f:de:d7:55:3e:48:
                    bd:f3:4e:28:72:ed:5f:6b:99:c1:b1:cf:e2:99:da:
                    60:42:a7:c2:0a:7d:e2:2f:50:ff:0f:ef:6a:59:c2:
                    d7:6d:a8:16:66:48:b4:54:95:08:79:e8:78:cc:77:
                    e9:7b:dd:33:87:1b:92:b8:6a:e9:c3:e8:be:7f:be:
                    8a:54:b5:e3:1b:41:e3:ad:1c:34:41:d2:24:21:5b:
                    d2:1f:2c:0b:c9:7a:6c:da:ee:f7:45:55:66:07:5a:
                    67:13:ee:e3:be:cb:2f:0d:40:23:26:28:b7:eb:be:
                    3c:c4:df:49:a9:b6:c4:a7:b7:77:53:f2:18:bb:eb:
                    15:62:ed:80:48:30:77:66:df:5b:f1:cf:6f:40:5d:
                    10:ba:03:56:03:73:c8:94:b9:8b:e3:b1:25:d4:48:
                    b9:d8:de:1c:fa:f8:18:4a:29:92:f9:e9:51:01:46:
                    f1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:45:B3:8A:A5:43:9A:68:13:2D:13:BD:F3:05:B9:3F:05:36:C6:46
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/90WziqVDmmgTLRO98wW5PwU2xkY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2b::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:c0:f1:e1:a7:10:df:21:e2:b7:28:14:7c:0f:70:7e:26:c8:
         c2:19:07:0c:37:87:4b:19:9a:d1:8a:ef:14:06:8b:13:7c:d5:
         62:f8:15:1e:cc:e0:7f:3b:a3:9c:54:ae:96:7a:88:ef:e5:45:
         7a:70:8c:fb:8b:7b:d9:88:9f:e1:80:32:8b:57:a8:34:58:17:
         e9:b6:b4:a8:2d:a6:5f:06:15:7d:45:54:9d:98:a1:95:6b:08:
         4b:aa:60:8a:39:f0:b6:f3:f6:09:d8:17:e6:0e:8b:d5:ff:75:
         48:3e:82:37:3d:d8:57:9d:ad:ef:82:ff:4d:66:4d:ca:be:03:
         f3:54:48:a3:00:97:7a:94:9c:aa:49:e9:40:62:15:68:b6:1e:
         0f:17:d5:27:96:bc:53:ad:6c:21:1a:cb:6f:f3:e7:be:72:21:
         a1:be:bf:6a:6d:f2:68:db:f3:e4:5a:a4:62:2e:2d:46:6b:85:
         9a:2a:db:7d:4c:d2:73:12:e1:33:86:3c:c3:fa:37:91:97:5e:
         32:1d:89:75:33:2b:86:be:86:15:07:6d:d3:f5:8c:4c:12:fc:
         62:a1:14:93:b9:15:de:24:a5:7b:4f:85:12:07:30:58:30:0b:
         1d:f9:03:be:ab:42:94:4e:1d:0b:fa:5f:bd:08:96:67:0b:2c:
         fb:41:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----