Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BX3_04rYluRiLDshE5-joYx5hQQ.roa
File:                     BX3_04rYluRiLDshE5-joYx5hQQ.roa (raw, json)
Hash identifier:          Fbnb+SyRJ/H2BXvy6Z/AzA6c25MGBCEqP7oX0ze2JCk=
Subject key identifier:   05:7D:FF:D3:8A:D8:96:E4:62:2C:3B:21:13:9F:A3:A1:8C:79:85:04
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       165E7551
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BX3_04rYluRiLDshE5-joYx5hQQ.roa
Signing time:             Fri 04 Feb 2022 23:11:02 +0000
ROA not before:           Fri 04 Feb 2022 23:11:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207740
IP address blocks:        2a06:a005:7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375289169 (0x165e7551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Feb  4 23:11:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=057dffd38ad896e4622c3b21139fa3a18c798504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:0e:82:8e:52:11:35:41:78:95:a5:52:91:
                    50:86:1d:5a:9f:1a:8d:0b:ae:7a:09:f5:81:5c:26:
                    cf:60:0e:d5:0a:c9:d5:4c:52:f2:99:d0:d5:67:66:
                    00:8b:5d:99:3d:95:89:95:a8:7a:cf:fb:a3:70:31:
                    c6:fe:e9:63:05:89:c7:b2:c8:24:0b:09:b4:19:d9:
                    73:c5:64:be:61:48:0d:63:4f:01:6b:4a:4c:f2:47:
                    8b:16:15:e6:1b:ec:11:af:5e:db:7f:12:7a:e1:17:
                    92:2d:c6:27:6b:1a:85:4b:48:a3:0c:9f:8b:8d:ec:
                    c8:dc:a6:30:39:7c:b3:9e:b3:a9:c4:82:2e:1a:ac:
                    4c:d2:59:73:ca:42:ab:8f:0c:ff:fb:63:c3:93:95:
                    8b:13:1f:51:2e:cf:5e:92:89:6e:66:e5:6c:23:2e:
                    ac:16:94:62:24:f8:af:42:08:05:27:ba:04:2f:50:
                    b1:6e:e6:03:12:7c:df:76:bb:5d:d1:6f:71:a6:30:
                    a6:2c:99:f2:f8:2b:85:11:7c:3c:ee:84:c9:5e:30:
                    2e:ce:25:e8:ef:21:49:a0:62:38:ce:21:68:39:1c:
                    5f:81:23:67:f0:70:f4:21:e2:a6:dd:08:f3:f2:13:
                    f0:5f:27:ff:c2:09:0d:5e:0b:9e:f9:52:b5:4f:dd:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7D:FF:D3:8A:D8:96:E4:62:2C:3B:21:13:9F:A3:A1:8C:79:85:04
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BX3_04rYluRiLDshE5-joYx5hQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:bb:50:5e:cc:d1:c3:db:9c:cb:29:84:e9:f5:b1:fe:62:7c:
         f6:aa:69:ee:d4:03:3c:27:69:f7:1f:bc:41:c1:41:8d:f4:e8:
         bf:fb:07:b3:d7:76:a5:8a:24:e3:77:79:fa:be:d9:29:22:ee:
         67:3b:4c:73:b6:bc:f8:45:76:23:06:f4:bf:3c:8c:77:b4:92:
         68:16:01:ca:75:e4:ec:b0:45:27:be:24:32:cd:34:89:4d:e1:
         b4:71:07:b5:4c:4b:99:0d:fa:f3:d5:7e:4c:a4:36:a3:e7:97:
         9c:3e:be:5e:2c:1f:f4:8a:bf:5e:50:65:c1:70:f2:3a:ab:d9:
         87:d3:98:85:29:c1:64:7e:cf:4c:52:3d:be:d2:d1:03:3a:fb:
         a5:36:45:d0:df:0c:34:85:fd:d4:38:dc:5f:59:a3:dc:57:72:
         26:13:a0:3f:66:53:57:d5:f8:fb:5e:d5:d2:f2:ea:4a:21:35:
         5b:3e:67:93:b6:9e:cd:e9:33:37:1e:61:7c:1a:59:9f:79:ec:
         91:7f:24:68:de:e4:f5:68:4c:0b:c4:0a:b8:e1:aa:a3:f6:1a:
         01:8e:b0:be:8b:84:f9:de:ea:43:c7:67:08:86:c3:3e:68:ef:
         49:24:fb:3d:f2:20:db:d3:94:ff:e7:38:45:a3:3b:a6:8a:b3:
         bc:ab:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----