Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9dGhr_LEVrq3j40IiEWskTSNHBQ.roa
File:                     9dGhr_LEVrq3j40IiEWskTSNHBQ.roa (raw, json)
Hash identifier:          kSaYQjyo38hQ1j8ebdDwdtSitJF+rMHDgo51wUSWAaI=
Subject key identifier:   F5:D1:A1:AF:F2:C4:56:BA:B7:8F:8D:08:88:45:AC:91:34:8D:1C:14
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1969D060
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9dGhr_LEVrq3j40IiEWskTSNHBQ.roa
Signing time:             Sat 07 May 2022 03:50:52 +0000
ROA not before:           Sat 07 May 2022 03:50:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203857
IP address blocks:        2a06:a005:4d4::/48 maxlen: 48
                          2a06:a005:4d2::/48 maxlen: 48
                          2a06:a005:4d5::/48 maxlen: 48
                          2a06:a005:4d3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426365024 (0x1969d060)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  7 03:50:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f5d1a1aff2c456bab78f8d088845ac91348d1c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:10:d8:9f:35:86:98:c8:f5:65:5c:3c:61:3c:
                    12:b8:02:96:53:0f:36:39:dd:af:bf:68:fe:0d:ee:
                    65:99:c1:1f:57:2f:3a:9a:32:52:5e:2a:14:06:e9:
                    9e:69:71:5b:68:36:e7:ad:2c:3f:ff:76:41:78:f7:
                    3f:af:60:98:5f:79:5f:7d:ca:3e:08:c9:79:65:74:
                    08:00:0c:99:43:f8:4c:e0:f4:e4:c2:33:4f:2f:a3:
                    68:95:e0:d7:5b:93:fb:1a:b3:7d:69:90:fa:85:ef:
                    36:a6:91:4c:2c:fd:c7:50:e8:f0:b8:1b:67:94:eb:
                    73:80:b7:3d:3b:e6:a5:4d:3b:e1:18:18:b1:eb:d6:
                    24:e0:20:62:ea:46:8c:be:d2:4f:f1:27:5b:62:14:
                    a4:ef:9b:1f:c5:98:ba:6c:b7:36:af:20:17:16:20:
                    ef:50:9a:22:fd:9d:52:ad:bb:0e:ac:75:42:57:18:
                    af:1b:32:c2:a0:17:5f:bd:07:82:56:03:d5:40:0f:
                    58:65:af:c3:21:71:30:e5:15:cd:1d:c7:3f:e6:d6:
                    fb:63:2f:64:1a:a7:ee:8a:80:46:0c:79:8a:96:30:
                    09:4d:1f:53:bd:4f:f6:61:91:ce:b8:89:d6:a6:1c:
                    74:8e:29:3d:35:63:ae:7e:33:60:53:95:b7:21:08:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D1:A1:AF:F2:C4:56:BA:B7:8F:8D:08:88:45:AC:91:34:8D:1C:14
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9dGhr_LEVrq3j40IiEWskTSNHBQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4d2::-2a06:a005:4d5:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6c:07:bc:4a:f5:e1:78:d7:b9:6c:82:df:34:17:6a:93:a0:81:
         91:d6:3b:c0:ab:63:29:19:a5:74:fc:64:9a:da:fa:5e:95:1f:
         ca:b1:fc:6d:44:f9:9a:11:f2:94:b5:df:87:1f:0d:91:5b:e5:
         ed:c0:12:21:0f:72:1d:ed:13:08:3a:a4:fd:b3:45:dd:7b:ba:
         48:8c:17:ab:c2:f5:71:c7:0c:be:1f:b9:c7:99:eb:d9:eb:d4:
         e3:e2:1d:a0:14:01:f3:bc:4e:c6:4f:7e:28:fa:51:3b:49:7c:
         9b:f0:e8:86:4a:d6:cc:4f:f9:14:0a:53:e4:0e:c9:eb:83:e1:
         8e:32:f2:4b:2d:52:37:4c:bd:5b:84:ee:8e:9e:37:1c:6d:f1:
         22:34:1b:0b:e6:d9:fa:95:a9:44:60:c2:b8:e3:f2:3b:ec:17:
         51:d4:bc:4f:b5:4e:98:59:1b:4b:3e:4d:13:b8:1a:41:13:db:
         46:9f:64:c8:ae:94:ca:3b:48:03:83:7f:95:a3:8f:e9:6d:8a:
         3a:ce:b5:4e:af:16:25:cb:20:87:51:9c:8f:16:78:41:22:43:
         63:98:8f:be:29:c4:9f:5e:ec:e9:fd:4a:ab:df:b4:2e:7f:be:
         d9:17:4b:e9:31:c4:bf:e8:3f:a9:38:dd:ae:8a:12:5b:33:00:
         88:d1:49:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----