Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EILX7E4TZGUXX4ncbqx9iZbJGts.roa
File:                     EILX7E4TZGUXX4ncbqx9iZbJGts.roa (raw, json)
Hash identifier:          +rZ2rL8sSiv3yS6VquDpLsFi/nSN9r0BXuRc6ditC7k=
Subject key identifier:   10:82:D7:EC:4E:13:64:65:17:5F:89:DC:6E:AC:7D:89:96:C9:1A:DB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A683F27
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EILX7E4TZGUXX4ncbqx9iZbJGts.roa
Signing time:             Tue 31 May 2022 20:18:14 +0000
ROA not before:           Tue 31 May 2022 20:18:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204857
IP address blocks:        2a06:a005:b80::/44 maxlen: 48
                          2a06:a005:b70::/44 maxlen: 48
                          2a06:a005:b90::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443039527 (0x1a683f27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 31 20:18:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1082d7ec4e136465175f89dc6eac7d8996c91adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:5d:c5:95:df:9d:a7:06:e0:a2:79:fe:99:
                    a2:99:40:38:e5:b5:ea:97:d5:8a:eb:bd:a7:29:a4:
                    ce:86:8a:cd:a1:50:26:72:f5:38:d1:a0:69:23:1e:
                    36:52:d1:ae:59:0b:27:76:1e:06:42:f9:60:03:19:
                    3b:14:1a:ed:40:ec:84:43:f6:0c:b6:a2:c8:5f:3c:
                    b8:f3:aa:41:60:06:e8:31:2b:6c:8b:55:cb:65:2e:
                    6f:cb:a6:68:13:5d:44:99:92:c1:fa:b9:d5:e5:bb:
                    5b:bd:62:06:f7:cc:db:01:fc:e1:f9:de:1f:af:91:
                    bb:f3:c3:fb:ae:a1:8a:50:86:e6:a8:e1:15:cc:a0:
                    c4:5b:ee:a1:7b:b2:35:ee:cf:2f:4f:c1:5b:68:58:
                    4a:a0:96:bd:d4:26:1c:f7:d0:89:59:47:6b:34:ac:
                    32:23:1d:c2:eb:2f:f3:04:7a:72:b0:96:c8:82:e9:
                    6b:39:02:19:a2:a7:b2:cb:9f:ec:c2:d6:59:db:c8:
                    de:b9:7a:ed:2d:35:0b:63:e0:87:72:04:d1:eb:f7:
                    f7:da:6c:34:a8:b5:30:bc:43:2e:4e:ee:f1:93:fa:
                    81:94:4c:4e:d6:fc:6d:b1:a1:e1:b0:f6:9b:e5:5d:
                    9a:31:45:12:ad:10:41:bb:19:68:dc:60:ec:79:c7:
                    a1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:82:D7:EC:4E:13:64:65:17:5F:89:DC:6E:AC:7D:89:96:C9:1A:DB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EILX7E4TZGUXX4ncbqx9iZbJGts.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b70::-2a06:a005:b9f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         40:e0:cb:bb:62:82:5b:44:81:20:8c:45:28:b5:78:c0:f1:08:
         46:bd:92:cf:de:3f:cd:9d:62:d8:07:45:04:97:71:7f:cf:a5:
         2d:75:19:2a:f8:64:90:99:ca:80:5f:95:b5:8b:6a:14:a1:01:
         5c:65:da:a5:7a:70:f8:25:7e:e2:f2:95:03:96:93:12:81:ba:
         60:83:86:cd:7a:69:88:e4:b9:8b:f3:bd:aa:11:03:ae:78:b2:
         e1:de:d7:66:01:f9:b1:db:3f:99:0f:44:14:f4:61:4f:41:9d:
         50:7f:75:47:bd:99:4d:4c:60:23:82:27:8c:1a:2f:5d:d0:25:
         ce:c4:a3:6d:53:59:d1:57:ac:f8:3e:3b:45:82:d3:c1:27:b7:
         dd:e1:6c:b1:8d:76:59:2a:c6:c9:bc:c2:8f:35:82:ce:27:7e:
         18:34:1f:e3:0d:1f:83:f9:f8:5c:28:65:cd:76:47:a3:0b:b5:
         d2:d6:22:1e:e8:b7:a5:cc:5d:3e:91:92:51:18:5f:fb:a8:fa:
         0d:29:c7:61:03:ce:43:3c:a7:ab:0a:05:a1:dc:9d:8c:10:24:
         e7:42:02:01:0d:96:f5:64:f0:06:24:7f:c3:9e:20:9c:58:33:
         46:b1:e4:e8:f6:93:da:79:c2:67:02:1a:69:e2:d1:b0:10:9e:
         03:1d:43:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----