Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AuoYWABJsfhnGRr6uUfYGLZpq8I.roa
File:                     AuoYWABJsfhnGRr6uUfYGLZpq8I.roa (raw, json)
Hash identifier:          neS/yUsoSiSYI1fBAnOobylfeUUFAKfXEnKqWWaChI4=
Subject key identifier:   02:EA:18:58:00:49:B1:F8:67:19:1A:FA:B9:47:D8:18:B6:69:AB:C2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182EAEEAE8C1C10E54B2B2423AD5F6E628D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AuoYWABJsfhnGRr6uUfYGLZpq8I.roa
Signing time:             Mon 29 Aug 2022 18:48:07 +0000
ROA not before:           Mon 29 Aug 2022 18:48:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     400542
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ea:ee:ae:8c:1c:10:e5:4b:2b:24:23:ad:5f:6e:62:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 29 18:48:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02ea18580049b1f867191afab947d818b669abc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3f:00:32:fa:cb:fa:e9:2a:36:dd:2f:c0:72:
                    b7:5e:b7:49:44:e7:57:5a:4d:8f:ed:31:2e:35:76:
                    50:02:96:4a:04:93:9c:10:4c:1a:28:31:b0:fd:a3:
                    49:15:81:47:89:f2:2e:3f:74:d1:dc:d3:ed:22:a9:
                    13:1c:13:f0:77:52:f6:bf:8f:af:61:31:a7:5b:de:
                    e3:d6:ca:c1:4c:ff:d0:0d:77:cd:50:7d:10:7b:e5:
                    64:51:09:34:f2:04:a9:07:e0:69:4e:b5:37:e7:67:
                    e4:56:64:09:b7:d3:5d:79:5b:35:05:fa:44:cd:df:
                    00:c3:12:e7:fa:36:45:60:7c:4f:53:8d:02:a1:84:
                    13:43:13:d6:bc:a0:8f:53:65:cd:7a:d2:00:c0:16:
                    43:f1:da:1c:f6:aa:bf:8c:d4:7f:97:8d:cd:9f:76:
                    99:72:c5:bf:8d:6c:d1:ae:f3:b2:36:d7:89:3c:06:
                    fe:5c:3f:50:db:b1:76:8e:7d:57:8a:e3:a9:bf:0e:
                    53:4f:f4:fe:75:44:e4:5a:b4:90:24:f9:69:4c:12:
                    de:05:01:af:80:12:4a:07:6c:76:48:ba:e7:80:11:
                    8f:b4:bb:60:a3:12:9e:2c:61:45:84:f9:ae:80:c9:
                    b0:a9:b8:6e:e4:1c:93:61:88:d5:d6:8e:85:0d:9f:
                    1b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EA:18:58:00:49:B1:F8:67:19:1A:FA:B9:47:D8:18:B6:69:AB:C2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AuoYWABJsfhnGRr6uUfYGLZpq8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:36:11:4b:c4:64:c2:4d:3d:4e:bf:55:47:c9:f1:30:1d:f6:
         69:97:20:43:40:6d:a1:0a:83:19:e5:de:35:e8:34:b2:4a:2d:
         34:14:0f:0d:ca:50:b2:7b:74:09:c9:c7:bb:95:bd:30:d3:f9:
         b2:4b:0f:a8:31:75:fb:24:34:76:88:78:f5:86:01:01:35:83:
         22:e7:0a:af:24:a3:36:92:c3:0d:eb:52:47:96:23:6d:e5:d8:
         41:4d:aa:de:76:77:0c:84:88:1d:d3:bf:72:d5:a3:4b:fc:35:
         f8:2c:1d:57:02:9e:30:97:31:04:61:e8:38:58:94:c7:83:a6:
         b9:96:f9:02:db:ad:a9:20:98:66:46:99:58:aa:6a:80:0b:6a:
         c5:c1:1c:65:e0:c5:dc:0f:4f:f8:84:67:5f:36:76:5c:a2:2c:
         69:05:6f:64:fb:c0:b6:e7:05:4e:e1:6f:5d:f4:2b:1c:5d:ef:
         b2:68:8b:dc:b1:9a:47:c2:e1:02:95:c3:1a:08:62:9c:fd:1f:
         1d:d4:6a:25:42:16:bd:f1:c0:f4:00:94:6b:6d:91:75:7d:4c:
         21:29:e1:b6:89:41:05:d0:5c:a3:ed:ee:42:6b:17:2e:11:b2:
         2d:27:40:61:90:04:2e:96:01:ca:b2:28:6c:35:a4:68:2b:96:
         85:16:1b:8a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYLq7q6MHBDlSyskI61fbmKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODI5MTg0ODA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmVhMTg1ODAwNDliMWY4NjcxOTFhZmFiOTQ3ZDgxOGI2NjlhYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD8AMvrL+ukqNt0vwHK3XrdJROdX
Wk2P7TEuNXZQApZKBJOcEEwaKDGw/aNJFYFHifIuP3TR3NPtIqkTHBPwd1L2v4+v
YTGnW97j1srBTP/QDXfNUH0Qe+VkUQk08gSpB+BpTrU352fkVmQJt9NdeVs1BfpE
zd8AwxLn+jZFYHxPU40CoYQTQxPWvKCPU2XNetIAwBZD8doc9qq/jNR/l43Nn3aZ
csW/jWzRrvOyNteJPAb+XD9Q27F2jn1XiuOpvw5TT/T+dUTkWrSQJPlpTBLeBQGv
gBJKB2x2SLrngBGPtLtgoxKeLGFFhPmugMmwqbhu5ByTYYjV1o6FDZ8b7wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFALqGFgASbH4Zxka+rlH2Bi2aavCMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvQXVvWVdBQkpzZmhuR1JyNnVVZllHTFpwcThJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwrAL
MA0GCSqGSIb3DQEBCwUAA4IBAQAaNhFLxGTCTT1Ov1VHyfEwHfZplyBDQG2hCoMZ
5d416DSySi00FA8NylCye3QJyce7lb0w0/mySw+oMXX7JDR2iHj1hgEBNYMi5wqv
JKM2ksMN61JHliNt5dhBTaredncMhIgd079y1aNL/DX4LB1XAp4wlzEEYeg4WJTH
g6a5lvkC262pIJhmRplYqmqAC2rFwRxl4MXcD0/4hGdfNnZcoixpBW9k+8C25wVO
4W9d9CscXe+yaIvcsZpHwuEClcMaCGKc/R8d1GolQha98cD0AJRrbZF1fUwhKeG2
iUEF0Fyj7e5CaxcuEbItJ0BhkAQulgHKsihsNaRoK5aFFhuK
-----END CERTIFICATE-----