Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Aqsp22g673SZWQpM38kG8EVegAs.roa
File:                     Aqsp22g673SZWQpM38kG8EVegAs.roa (raw, json)
Hash identifier:          hKmcPwFLNnKiRHX88bjYnaylxixQhoJGwTgf85zgBVo=
Subject key identifier:   02:AB:29:DB:68:3A:EF:74:99:59:0A:4C:DF:C9:06:F0:45:5E:80:0B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18AAA7F1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Aqsp22g673SZWQpM38kG8EVegAs.roa
Signing time:             Sun 24 Apr 2022 13:17:27 +0000
ROA not before:           Sun 24 Apr 2022 13:17:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199549
IP address blocks:        2a06:a005:4d0::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413837297 (0x18aaa7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 24 13:17:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02ab29db683aef7499590a4cdfc906f0455e800b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:43:e8:3f:eb:7f:50:fb:84:f0:bb:2f:31:f5:
                    11:ab:33:20:34:c3:03:3a:9a:ea:81:07:c7:8b:6a:
                    b9:66:02:ab:08:30:29:b4:d3:60:56:0f:40:b1:ff:
                    eb:e1:b3:97:83:51:bb:41:9f:d0:16:80:b5:25:b7:
                    5c:18:2d:ff:43:ed:ae:8a:1f:1a:45:aa:45:e9:c0:
                    17:81:59:30:99:d9:43:09:26:ac:be:3a:0c:81:47:
                    f2:9e:ab:bb:f6:72:d2:59:4c:9b:64:d1:1f:46:5a:
                    69:3f:c8:dc:ed:92:30:2c:3f:a3:b8:b1:44:eb:74:
                    0f:37:48:43:95:c5:1c:e0:d4:11:38:7d:49:68:b7:
                    49:de:0e:1c:a1:88:8d:2d:dd:a1:d6:16:14:93:01:
                    3b:fc:41:9e:09:3c:98:6c:dc:eb:13:5b:f5:bd:6c:
                    15:b8:f4:4d:32:7a:cf:37:b3:a3:7a:9a:94:fd:2c:
                    69:73:3f:1b:12:37:7a:d2:c9:78:93:3c:61:05:9f:
                    5d:ab:2d:f3:1e:77:bd:65:60:f4:fa:e5:5f:2b:61:
                    dd:6c:7c:36:de:41:d5:ff:a6:53:ed:57:64:03:af:
                    40:c2:dc:cd:c3:62:5d:38:13:12:49:44:53:b0:45:
                    d5:3c:5e:53:44:5a:d4:2f:46:09:ac:d5:27:43:86:
                    8f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AB:29:DB:68:3A:EF:74:99:59:0A:4C:DF:C9:06:F0:45:5E:80:0B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Aqsp22g673SZWQpM38kG8EVegAs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4d0::/45

    Signature Algorithm: sha256WithRSAEncryption
         4c:d9:5f:e3:81:55:28:52:ef:31:a4:40:99:3f:ac:53:39:32:
         bf:e7:cd:5f:f2:53:f2:b0:69:7d:80:ff:22:31:bc:6b:22:e4:
         c2:cc:da:b8:a4:03:66:57:c8:9c:2e:43:86:21:aa:4b:db:ef:
         7f:f1:26:63:77:f0:de:6d:54:32:55:05:0c:d2:8b:48:fa:e3:
         fc:ee:19:d3:c2:c1:50:d1:22:3a:97:18:72:9c:8f:c6:fd:70:
         e6:5c:13:43:d5:5b:f0:e0:1b:2c:f8:78:63:04:e7:a5:52:46:
         ef:8a:90:9e:1c:0e:9f:e1:0c:1b:8b:b3:6e:3a:3a:37:00:78:
         65:ec:e8:b6:a5:46:a6:d7:52:75:7d:ae:ae:61:cd:14:17:e5:
         5d:8c:3b:d2:ba:75:25:4b:13:f2:ec:8d:a2:21:91:ef:73:68:
         1d:e3:a6:16:ed:f5:b6:bd:51:68:fa:e4:43:87:0a:9e:b3:d8:
         a5:14:ac:4b:46:e5:05:48:fd:3e:bf:dc:03:cb:43:57:b1:a9:
         b0:d1:b1:7a:c6:31:eb:f1:58:5e:45:bc:08:d7:28:09:74:3f:
         20:2a:52:5d:72:ac:36:f9:d6:e5:c8:d3:35:25:42:85:84:7f:
         95:a3:45:c1:bc:b2:8c:ba:4a:f8:c0:76:6e:9f:20:c2:b3:f5:
         1d:2c:13:68
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGKqn8TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDQy
NDEzMTcyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDJhYjI5ZGI2ODNh
ZWY3NDk5NTkwYTRjZGZjOTA2ZjA0NTVlODAwYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPZD6D/rf1D7hPC7LzH1EaszIDTDAzqa6oEHx4tquWYCqwgw
KbTTYFYPQLH/6+Gzl4NRu0Gf0BaAtSW3XBgt/0PtroofGkWqRenAF4FZMJnZQwkm
rL46DIFH8p6ru/Zy0llMm2TRH0ZaaT/I3O2SMCw/o7ixROt0DzdIQ5XFHODUETh9
SWi3Sd4OHKGIjS3dodYWFJMBO/xBngk8mGzc6xNb9b1sFbj0TTJ6zzezo3qalP0s
aXM/GxI3etLJeJM8YQWfXast8x53vWVg9PrlXyth3Wx8Nt5B1f+mU+1XZAOvQMLc
zcNiXTgTEklEU7BF1TxeU0Ra1C9GCazVJ0OGj0kCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQCqynbaDrvdJlZCkzfyQbwRV6ACzAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L0Fxc3AyMmc2NzNTWldRcE0zOGtHOEVWZWdBcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAyoGoAUE0DANBgkqhkiG9w0BAQsF
AAOCAQEATNlf44FVKFLvMaRAmT+sUzkyv+fNX/JT8rBpfYD/IjG8ayLkwszauKQD
ZlfInC5DhiGqS9vvf/EmY3fw3m1UMlUFDNKLSPrj/O4Z08LBUNEiOpcYcpyPxv1w
5lwTQ9Vb8OAbLPh4YwTnpVJG74qQnhwOn+EMG4uzbjo6NwB4ZezotqVGptdSdX2u
rmHNFBflXYw70rp1JUsT8uyNoiGR73NoHeOmFu31tr1RaPrkQ4cKnrPYpRSsS0bl
BUj9Pr/cA8tDV7GpsNGxesYx6/FYXkW8CNcoCXQ/ICpSXXKsNvnW5cjTNSVChYR/
laNFwbyyjLpK+MB2bp8gwrP1HSwTaA==
-----END CERTIFICATE-----