Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BNZRhLy5Nxs78MJm3uJ4zajtPMI.roa
File:                     BNZRhLy5Nxs78MJm3uJ4zajtPMI.roa (raw, json)
Hash identifier:          tXkQUFpuvgwVCAJncecl9aO4gJeBnTLdfaB16TnQnQY=
Subject key identifier:   04:D6:51:84:BC:B9:37:1B:3B:F0:C2:66:DE:E2:78:CD:A8:ED:3C:C2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018383C463AE285AEDFA6E8D2810DAF414D7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BNZRhLy5Nxs78MJm3uJ4zajtPMI.roa
Signing time:             Wed 28 Sep 2022 11:03:49 +0000
ROA not before:           Wed 28 Sep 2022 11:03:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62430
IP address blocks:        2a06:a005:19::/48 maxlen: 48
                          2a06:a005:840::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:83:c4:63:ae:28:5a:ed:fa:6e:8d:28:10:da:f4:14:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 28 11:03:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=04d65184bcb9371b3bf0c266dee278cda8ed3cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:29:5f:39:f0:bb:fb:78:ef:5c:88:07:6d:
                    76:a4:76:84:48:dd:1a:86:41:2d:b0:b8:7a:b7:20:
                    ce:17:26:60:d6:ab:dc:60:50:47:63:9d:21:9b:63:
                    72:12:34:77:d9:99:3b:3b:b3:a6:8a:f8:22:8f:52:
                    2f:21:e8:25:95:88:87:87:53:45:fa:8c:39:20:2d:
                    81:80:26:d6:b8:2a:68:e8:d2:77:fa:06:19:80:fa:
                    c6:76:32:65:f9:c5:c8:0e:ed:c4:b9:f3:0a:d3:7d:
                    aa:bd:87:f3:6e:12:ff:cc:53:6a:08:c7:1b:10:d1:
                    f9:f2:8e:fe:bc:d4:81:01:32:1d:ae:a5:ea:a8:a6:
                    4a:99:de:ac:1d:d2:0a:d2:6a:29:fb:aa:3b:1c:d2:
                    8f:6d:e9:85:95:cd:47:33:6d:b2:dc:3c:93:c8:76:
                    6d:de:6a:c8:e4:8b:60:1d:c6:2b:28:ec:9a:97:13:
                    07:e9:63:da:11:81:fd:68:73:22:0e:a9:a7:a8:c8:
                    60:7d:0c:04:fb:e2:75:8d:1c:24:c4:0b:55:80:f4:
                    97:4c:ab:ea:01:f7:81:08:43:25:12:b6:71:30:f7:
                    c5:b2:5a:7d:8b:c9:dc:eb:a4:9d:26:86:f5:11:61:
                    9b:5c:75:2b:44:2f:45:bc:95:f5:e0:9e:33:4b:3a:
                    16:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D6:51:84:BC:B9:37:1B:3B:F0:C2:66:DE:E2:78:CD:A8:ED:3C:C2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BNZRhLy5Nxs78MJm3uJ4zajtPMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:19::/48
                  2a06:a005:840::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:3a:51:d2:4b:66:53:c1:fb:d9:52:7e:17:05:dc:90:54:5c:
         56:50:d2:33:7e:e4:f8:45:37:5b:07:31:b2:af:6f:1c:73:d8:
         dc:c5:23:c8:40:d5:90:d0:c4:4e:26:af:50:42:70:3d:76:c1:
         78:35:b4:47:83:28:fb:4a:b3:ea:f4:22:f2:e7:bd:75:dd:9e:
         12:cd:d3:d2:d0:76:9d:25:20:22:55:17:b7:60:8e:42:5c:6b:
         a7:c9:e2:76:0c:f0:05:1d:31:9f:ae:dd:1d:a1:45:be:ab:84:
         e7:5d:0a:0a:8c:8c:b7:8f:36:25:ff:81:15:6f:ea:1e:71:12:
         90:40:bd:ce:1c:71:f4:8e:4e:f1:41:1c:2e:c3:b6:3b:ef:af:
         69:b5:c9:59:1e:18:76:29:36:26:c8:07:d2:ce:39:4b:21:8b:
         5f:72:fa:80:5f:ff:ab:a3:c1:54:78:de:df:c3:09:15:3a:3d:
         c5:70:4c:af:93:d3:12:63:6d:de:79:92:98:a1:98:b9:ea:ee:
         6c:19:fb:e0:67:0f:d3:d2:f8:6f:f6:a3:bd:c9:88:ca:47:e5:
         24:eb:16:69:db:cb:d8:25:db:c2:82:71:75:c1:a6:01:aa:e0:
         a8:15:d6:e1:1b:ef:97:fa:99:d6:62:58:47:54:7d:f6:f6:1b:
         1c:6b:94:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----