Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Cg-RdYocsBOs7VDm3Eaw7gGetAc.roa
File:                     Cg-RdYocsBOs7VDm3Eaw7gGetAc.roa (raw, json)
Hash identifier:          vrYbFWsO//+wF0SvzROHbvIy1ALCL7LVmgnBIqA509s=
Subject key identifier:   0A:0F:91:75:8A:1C:B0:13:AC:ED:50:E6:DC:46:B0:EE:01:9E:B4:07
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184F3D78FDB9FE88DADF0651D20CB3E6701
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Cg-RdYocsBOs7VDm3Eaw7gGetAc.roa
Signing time:             Thu 08 Dec 2022 22:25:01 +0000
ROA not before:           Thu 08 Dec 2022 22:25:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200728
IP address blocks:        2a0a:6040:d000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f3:d7:8f:db:9f:e8:8d:ad:f0:65:1d:20:cb:3e:67:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  8 22:25:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a0f91758a1cb013aced50e6dc46b0ee019eb407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:b8:96:96:0d:7d:5e:af:e8:de:c1:8c:f7:
                    d0:6e:9c:ec:f0:d5:c0:88:33:a6:a4:2f:03:83:b5:
                    a7:c0:8f:16:24:d3:99:65:a0:dc:6c:41:10:45:52:
                    b8:41:76:8e:30:3c:57:b6:cf:8c:9c:86:56:1e:a5:
                    70:97:9e:0e:f7:c3:6e:f1:dc:79:76:fc:89:2e:cc:
                    55:c2:e3:0b:2f:a8:c0:76:c8:96:58:01:1e:78:28:
                    6f:fd:c6:fd:8b:68:4c:95:73:8b:f9:1e:a4:13:b1:
                    39:ac:22:20:ef:a3:b0:d3:c3:94:1c:97:c6:e6:27:
                    18:8f:4a:1c:6a:2c:5f:97:6c:35:a0:31:a0:e6:14:
                    10:5d:64:b4:9f:d7:ea:af:d1:a2:60:1c:5f:15:57:
                    47:83:da:83:b1:9b:f7:46:81:70:31:b3:7b:8c:73:
                    9c:84:c1:e2:d7:a9:5d:d6:c8:14:c3:62:19:69:60:
                    c3:43:59:4c:f6:cb:f7:c4:78:18:41:3e:88:d1:e5:
                    29:f7:9b:fc:09:e2:cf:da:05:a4:b5:45:56:3e:07:
                    db:d6:03:03:11:6c:39:85:ea:a5:69:18:4f:62:fa:
                    9c:4d:59:b6:59:4d:6e:86:0e:cb:8f:30:3a:fc:11:
                    f0:16:3a:67:b0:7e:ce:6c:f6:23:ed:31:d0:f8:83:
                    e9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0F:91:75:8A:1C:B0:13:AC:ED:50:E6:DC:46:B0:EE:01:9E:B4:07
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Cg-RdYocsBOs7VDm3Eaw7gGetAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:70:1c:bc:b9:26:82:4c:5b:80:25:16:4a:ea:4c:10:16:0c:
         fe:5d:ca:b5:74:05:7f:b8:11:b6:96:b8:3e:d2:d9:c7:f9:e5:
         f4:3c:bc:3b:5b:39:3f:31:7e:2a:19:b7:2a:e4:2d:02:c9:71:
         de:a7:4b:4f:f6:3d:13:05:7e:4f:dd:e6:a6:53:ae:90:cd:05:
         dc:aa:db:e1:97:fe:b1:19:05:ad:1b:c0:de:69:fa:f6:e2:0d:
         83:58:d7:f6:ca:80:15:04:c7:fa:1c:3a:64:ad:e1:41:c0:6f:
         cb:8b:9e:a6:16:d9:f1:c3:77:1a:65:37:02:f5:c7:2a:75:c2:
         61:2d:8d:2a:78:7e:fe:13:dc:c7:ae:42:eb:5b:6f:66:39:37:
         28:ac:0a:0c:ff:f4:eb:e5:42:1c:c7:db:6f:3a:dd:2b:91:4e:
         08:8c:a4:f6:6f:4c:7f:ea:ed:bd:d5:f9:72:f6:95:c0:87:52:
         33:d1:69:47:56:16:cc:0b:1d:bc:70:eb:fd:4d:81:f2:b0:66:
         a0:4c:c9:80:c5:8e:fe:8f:26:a0:76:f7:bb:93:a8:2d:22:1c:
         02:33:8a:6a:98:95:5b:a9:14:9b:92:cc:6a:33:01:8f:2a:ef:
         61:ad:3d:12:e2:6a:5d:05:4d:83:b9:dc:28:6e:0c:84:02:16:
         08:cb:42:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----