Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CVIVRhhIJt-yEGkARnhchY6Fp6Q.roa
File:                     CVIVRhhIJt-yEGkARnhchY6Fp6Q.roa (raw, json)
Hash identifier:          qoklhyUfhJP5PI49YqT/qq3Lr6tX5fEcEMZryf6XISw=
Subject key identifier:   09:52:15:46:18:48:26:DF:B2:10:69:00:46:78:5C:85:8E:85:A7:A4
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183EF73E2CDF56B80CEBAB9ED13BC63777F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CVIVRhhIJt-yEGkARnhchY6Fp6Q.roa
Signing time:             Wed 19 Oct 2022 08:54:52 +0000
ROA not before:           Wed 19 Oct 2022 08:54:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202518
IP address blocks:        2a06:a005:d2f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ef:73:e2:cd:f5:6b:80:ce:ba:b9:ed:13:bc:63:77:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 19 08:54:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=09521546184826dfb210690046785c858e85a7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2c:d3:43:c1:9e:aa:81:e2:f5:08:99:40:a8:
                    6c:2e:c8:98:c4:6b:15:be:87:c7:31:5a:27:49:11:
                    36:75:6e:06:c5:da:40:9e:f6:8d:c9:d3:01:61:01:
                    b1:47:eb:52:d9:6e:15:0a:72:23:d0:86:4f:f5:35:
                    59:68:7b:e5:b3:7f:c5:91:ad:06:d2:6f:c6:c0:8a:
                    f0:66:ad:7a:c3:62:9c:38:23:be:2e:de:71:62:db:
                    71:3f:2e:bd:44:cb:38:5c:58:7c:a0:73:d5:ab:8f:
                    a0:42:d8:49:8c:03:a4:7e:da:34:ef:f2:1f:f8:db:
                    38:4d:92:b5:26:17:1a:62:d2:a7:53:0e:5a:1f:cd:
                    c9:1a:71:5f:ce:9f:b3:48:a0:d9:ac:89:4c:e8:58:
                    b1:ae:0c:a5:38:19:32:0e:83:94:1a:c9:18:27:ad:
                    6d:80:08:56:0d:59:f3:74:6d:88:76:c0:dd:ff:d5:
                    49:0c:05:88:64:86:30:df:c8:e7:f8:33:5a:40:bc:
                    20:8c:46:a3:93:f8:72:2e:72:29:bf:e1:d0:85:2b:
                    c3:f3:ed:5c:ff:7d:43:8b:d0:be:0a:38:4d:3b:9c:
                    ed:4f:d3:c5:6d:f2:c0:45:af:7b:01:34:1b:ad:ed:
                    85:cf:e2:fb:08:1d:20:06:f9:9a:22:3c:e4:08:27:
                    43:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:52:15:46:18:48:26:DF:B2:10:69:00:46:78:5C:85:8E:85:A7:A4
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CVIVRhhIJt-yEGkARnhchY6Fp6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2f::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:9f:4e:e1:b6:f1:d5:c0:79:33:71:1c:92:97:6f:64:39:18:
         a3:0c:94:5d:14:81:39:d5:ca:a8:4b:d7:ae:e6:4a:77:8a:c5:
         e4:0a:a0:91:f9:76:8d:5b:4b:8b:f1:e4:79:97:18:0f:5c:43:
         f6:69:90:53:c9:7d:0d:c9:ed:42:0f:ff:3f:a2:e4:e7:c7:24:
         a1:85:e8:5b:65:15:a2:62:be:74:18:8c:8b:95:e8:42:96:ea:
         e6:69:69:40:61:6f:14:3f:aa:b7:41:71:6e:09:77:cf:34:32:
         68:a4:2d:72:fc:7b:51:13:58:67:ac:bb:2e:95:84:28:58:70:
         10:16:62:91:52:e8:e8:d7:9a:19:91:7b:99:63:ae:e2:6d:75:
         ce:26:1c:a2:39:11:bb:91:c1:40:98:0b:61:54:66:e6:9c:e1:
         62:d9:94:8d:aa:89:e5:6e:bb:72:51:af:3c:e3:d4:c5:83:25:
         93:52:4d:16:49:a5:9c:47:ed:e2:3d:c5:ec:7f:c8:c3:c1:65:
         c9:b5:d9:57:42:9b:04:6b:07:6e:de:a4:39:67:94:8d:7e:45:
         4a:0d:d3:91:d6:2b:1f:4a:74:54:e8:5b:b6:a6:2b:fc:8f:2a:
         e4:b6:e7:4e:31:bf:f2:81:3e:0b:39:f4:00:03:10:12:97:9a:
         18:97:c1:cb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYPvc+LN9WuAzrq57RO8Y3d/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDE5MDg1NDUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTUyMTU0NjE4NDgyNmRmYjIxMDY5MDA0Njc4NWM4NThlODVhN2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCzTQ8GeqoHi9QiZQKhsLsiYxGsV
vofHMVonSRE2dW4GxdpAnvaNydMBYQGxR+tS2W4VCnIj0IZP9TVZaHvls3/Fka0G
0m/GwIrwZq16w2KcOCO+Lt5xYttxPy69RMs4XFh8oHPVq4+gQthJjAOkfto07/If
+Ns4TZK1JhcaYtKnUw5aH83JGnFfzp+zSKDZrIlM6FixrgylOBkyDoOUGskYJ61t
gAhWDVnzdG2IdsDd/9VJDAWIZIYw38jn+DNaQLwgjEajk/hyLnIpv+HQhSvD8+1c
/31Di9C+CjhNO5ztT9PFbfLARa97ATQbre2Fz+L7CB0gBvmaIjzkCCdDlwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAlSFUYYSCbfshBpAEZ4XIWOhaekMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvQ1ZJVlJoaElKdC15RUdrQVJuaGNoWTZGcDZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQ0v
MA0GCSqGSIb3DQEBCwUAA4IBAQAWn07htvHVwHkzcRySl29kORijDJRdFIE51cqo
S9eu5kp3isXkCqCR+XaNW0uL8eR5lxgPXEP2aZBTyX0Nye1CD/8/ouTnxyShhehb
ZRWiYr50GIyLlehClurmaWlAYW8UP6q3QXFuCXfPNDJopC1y/HtRE1hnrLsulYQo
WHAQFmKRUujo15oZkXuZY67ibXXOJhyiORG7kcFAmAthVGbmnOFi2ZSNqonlbrty
Ua8849TFgyWTUk0WSaWcR+3iPcXsf8jDwWXJtdlXQpsEawdu3qQ5Z5SNfkVKDdOR
1isfSnRU6Fu2piv8jyrktudOMb/ygT4LOfQAAxASl5oYl8HL
-----END CERTIFICATE-----