Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B_P-WRvySE8klP8BRBUUjZQnYec.roa
File:                     B_P-WRvySE8klP8BRBUUjZQnYec.roa (raw, json)
Hash identifier:          uij3ekRC5Yuh+a/S0KcbcQOZCqMHn7WIvK0xq5cF+mE=
Subject key identifier:   07:F3:FE:59:1B:F2:48:4F:24:94:FF:01:44:15:14:8D:94:27:61:E7
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184D5978BEA421AEC8669037649A9A2FEB1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B_P-WRvySE8klP8BRBUUjZQnYec.roa
Signing time:             Sat 03 Dec 2022 01:26:29 +0000
ROA not before:           Sat 03 Dec 2022 01:26:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44570
IP address blocks:        2a06:a004::/32 maxlen: 48
                          2a06:a000::/32 maxlen: 48
                          2a06:1280:1000::/36 maxlen: 48
                          2a06:a005::/32 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a05:dfc0::/32 maxlen: 48
                          2a06:a005:1d54::/48 maxlen: 48
                          2a06:a003::/32 maxlen: 48
                          2a06:a005:1fd0::/44 maxlen: 48
                          2a06:a005:18b0::/44 maxlen: 48
                          2a06:a005:1a70::/44 maxlen: 48
                          2a06:a005:1fa0::/44 maxlen: 48
                          2a06:a005:1d70::/44 maxlen: 48
                          2a06:a005:1fe0::/44 maxlen: 48
                          2a06:a005:1f90::/44 maxlen: 48
                          2a05:dfc7:1300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d5:97:8b:ea:42:1a:ec:86:69:03:76:49:a9:a2:fe:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  3 01:26:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=07f3fe591bf2484f2494ff014415148d942761e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a2:26:2f:bc:6a:80:cb:92:e2:f3:9c:de:5d:
                    a4:48:57:3c:87:5b:2a:02:2b:88:ab:fe:55:e0:b3:
                    15:04:94:b5:cd:35:b2:c5:99:d6:48:9b:52:ec:3d:
                    73:b5:bc:b2:e1:57:87:ba:e2:58:a3:94:a6:54:d9:
                    3c:68:92:e2:b7:d4:c4:f0:e4:84:ce:c8:43:b5:12:
                    63:21:9b:5e:4f:ba:ed:7a:ca:cf:ad:a8:e8:21:e7:
                    68:af:6b:9f:46:f9:20:a1:25:36:d5:14:94:52:cd:
                    56:b5:cb:d2:45:40:0b:45:cf:ff:a3:3e:cc:11:a1:
                    1c:ba:b9:7b:c4:f6:d8:ce:61:da:a7:e8:78:b3:ad:
                    86:7b:3b:a1:b1:9e:db:cc:17:31:9c:b3:0d:0e:86:
                    dd:fa:5b:f7:58:5e:db:2d:04:56:fe:5d:f4:49:91:
                    fa:2d:72:16:70:8a:c2:17:ee:e5:0d:b7:1b:39:23:
                    45:50:a2:44:81:de:61:e0:e2:5e:52:05:82:f3:30:
                    14:2b:bd:8a:47:c6:ff:b1:e5:57:92:20:02:e5:2f:
                    18:d4:32:ec:54:14:b6:fd:01:83:62:fc:31:14:64:
                    bb:1e:e7:78:1f:52:81:21:0f:e6:3b:e7:40:fa:02:
                    04:06:67:df:33:bc:1d:77:40:80:1d:23:81:8f:16:
                    2f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F3:FE:59:1B:F2:48:4F:24:94:FF:01:44:15:14:8D:94:27:61:E7
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B_P-WRvySE8klP8BRBUUjZQnYec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc0::/32
                  2a05:dfc7:1300::/40
                  2a06:1280:1000::/36
                  2a06:a000::/32
                  2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:72:a5:ff:d1:6a:91:9d:d5:ee:6c:13:7f:ce:ad:16:aa:ba:
         5e:3a:e8:e7:08:15:c3:8c:09:46:2c:e6:d8:f9:39:c3:26:12:
         af:34:72:d4:8c:ed:99:59:96:fd:16:9f:66:f7:10:44:1c:c2:
         0f:9d:22:4d:8a:d9:2f:2c:e1:8c:bf:33:ee:d4:09:a2:76:05:
         14:46:e8:e5:b8:a5:7f:05:aa:a3:05:79:b6:38:1e:b7:61:fc:
         b0:6e:d6:d0:18:c2:37:09:4d:9c:0b:eb:60:2e:b9:f7:9c:1a:
         90:11:b4:75:7e:88:f4:89:da:91:cd:e5:b9:6a:e7:1b:74:e5:
         0e:53:54:84:df:7b:e7:1c:1e:d3:3d:59:1a:a4:ec:f0:ba:da:
         aa:ee:55:1e:3d:2c:35:82:fb:b2:2e:76:df:9f:ef:1c:36:cb:
         0c:54:3d:31:04:b3:2c:89:bc:e9:19:0d:4c:02:52:5d:4f:d9:
         18:8f:ec:10:95:dd:db:07:c0:3c:ed:fb:00:0c:14:06:4d:0d:
         1e:bf:24:6d:e8:82:40:cc:91:83:ae:66:c4:c6:d7:2f:20:55:
         0c:6b:03:df:b3:66:27:2d:9d:5c:2f:4b:a0:93:11:27:30:7e:
         ea:4c:d3:bd:69:9e:db:d7:f5:ac:23:ea:d8:86:a4:fd:27:95:
         71:5f:2a:0f
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAYTVl4vqQhrshmkDdkmpov6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjAzMDEyNjI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2YzZmU1OTFiZjI0ODRmMjQ5NGZmMDE0NDE1MTQ4ZDk0Mjc2MWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKImL7xqgMuS4vOc3l2kSFc8h1sq
AiuIq/5V4LMVBJS1zTWyxZnWSJtS7D1ztbyy4VeHuuJYo5SmVNk8aJLit9TE8OSE
zshDtRJjIZteT7rtesrPrajoIedor2ufRvkgoSU21RSUUs1WtcvSRUALRc//oz7M
EaEcurl7xPbYzmHap+h4s62GezuhsZ7bzBcxnLMNDobd+lv3WF7bLQRW/l30SZH6
LXIWcIrCF+7lDbcbOSNFUKJEgd5h4OJeUgWC8zAUK72KR8b/seVXkiAC5S8Y1DLs
VBS2/QGDYvwxFGS7Hud4H1KBIQ/mO+dA+gIEBmffM7wdd0CAHSOBjxYvIQIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFAfz/lkb8khPJJT/AUQVFI2UJ2HnMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvQl9QLVdSdnlTRThrbFA4QlJCVVVqWlFuWWVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzA9BAIAAjA3AwUAKgXfwAMG
ACoF38cTAwYEKgYSgBADBQAqBqAAMA4DBQAqBqADAwUBKgagBAMHACoHVMKwCzAN
BgkqhkiG9w0BAQsFAAOCAQEAe3Kl/9FqkZ3V7mwTf86tFqq6Xjro5wgVw4wJRizm
2Pk5wyYSrzRy1IztmVmW/RafZvcQRBzCD50iTYrZLyzhjL8z7tQJonYFFEbo5bil
fwWqowV5tjget2H8sG7W0BjCNwlNnAvrYC6595wakBG0dX6I9Inakc3luWrnG3Tl
DlNUhN975xwe0z1ZGqTs8Lraqu5VHj0sNYL7si5235/vHDbLDFQ9MQSzLIm86RkN
TAJSXU/ZGI/sEJXd2wfAPO37AAwUBk0NHr8kbeiCQMyRg65mxMbXLyBVDGsD37Nm
Jy2dXC9LoJMRJzB+6kzTvWme29f1rCPq2Iak/SeVcV8qDw==
-----END CERTIFICATE-----