Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F3D1xxjuqO9AjyUy35faIQ24S9I.roa
File:                     F3D1xxjuqO9AjyUy35faIQ24S9I.roa (raw, json)
Hash identifier:          gVSXo+7+rVQYCq9EFsJeHBYBLvWw4h7LObP1J79qJFE=
Subject key identifier:   17:70:F5:C7:18:EE:A8:EF:40:8F:25:32:DF:97:DA:21:0D:B8:4B:D2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B831007
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F3D1xxjuqO9AjyUy35faIQ24S9I.roa
Signing time:             Tue 28 Jun 2022 15:25:02 +0000
ROA not before:           Tue 28 Jun 2022 15:25:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204992
IP address blocks:        2a06:a005:fc0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461574151 (0x1b831007)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 28 15:25:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1770f5c718eea8ef408f2532df97da210db84bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:44:ca:3b:76:a3:54:ef:c8:c6:32:d0:e5:
                    64:91:ee:83:bf:dc:2b:69:69:63:d6:97:90:96:6d:
                    73:36:12:9d:00:37:6c:33:77:b5:ef:4d:c4:8f:58:
                    3d:78:0b:ee:8e:32:ba:5d:b7:15:be:2b:ea:9f:d5:
                    f2:25:ed:7b:b4:6d:a0:73:2a:8d:d6:ef:51:b5:07:
                    2b:b6:b8:ca:05:53:a1:a1:63:84:e1:db:53:8c:35:
                    3d:33:cc:3d:00:5b:2f:44:7b:ec:27:cf:6e:f4:0b:
                    f8:cb:e3:e3:0c:32:c6:ab:83:8c:9f:d6:18:36:73:
                    b7:ab:ae:85:87:e2:78:77:52:09:41:b5:ee:c5:6b:
                    fe:b3:26:59:84:53:10:56:89:cd:65:30:b5:e3:9e:
                    8b:fb:dc:db:bf:64:9e:8b:b4:77:8d:dc:87:2b:9d:
                    d0:e9:f2:a1:5f:b9:75:8e:a8:94:ae:49:3e:92:17:
                    e4:66:07:33:d1:f2:77:98:5b:6a:48:c6:c8:8f:3a:
                    c6:5d:ca:f9:03:a4:f6:17:b8:0d:3f:f5:ae:a3:1e:
                    45:72:a5:36:a3:f8:6f:8f:5c:4f:09:7d:5a:0b:20:
                    dc:9b:94:98:64:f3:e2:0a:aa:d5:86:df:56:92:6a:
                    de:c9:60:f9:f6:7e:56:48:a8:51:a8:c7:7f:2b:aa:
                    e4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:70:F5:C7:18:EE:A8:EF:40:8F:25:32:DF:97:DA:21:0D:B8:4B:D2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F3D1xxjuqO9AjyUy35faIQ24S9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:fc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:39:e7:50:8f:93:45:34:ca:0b:dc:de:b9:fc:b5:00:6f:d3:
         54:a6:dc:5b:3a:7e:1a:4f:61:11:39:80:16:82:20:91:cc:0b:
         8f:41:22:99:bc:dc:9e:56:95:72:ec:a3:9f:4a:e3:5b:e4:7f:
         e6:bb:9d:03:64:37:20:65:1c:0e:7d:99:52:14:03:5c:47:1b:
         8c:52:39:70:d6:4f:4e:52:f5:97:68:22:14:ce:f9:0e:31:36:
         94:56:95:6e:7a:1d:90:89:1c:60:3c:20:c1:ef:ff:8e:f5:f8:
         02:38:3d:bc:f6:18:e4:17:93:bb:97:d2:46:78:a5:48:53:b9:
         d2:82:ab:4d:3b:7e:07:03:03:c5:75:5b:11:5b:1d:3d:8c:80:
         ab:cd:62:5a:dc:6c:ae:6e:93:63:fb:7c:80:a1:d8:b7:9f:74:
         bb:0d:f3:6a:d2:06:21:fe:d0:50:f0:c9:6a:92:b0:55:7d:5e:
         fb:3f:45:c1:db:fc:35:a7:78:1a:68:48:7f:2c:ed:a5:3f:96:
         74:1b:c9:ab:39:41:4e:a5:9a:a6:6a:e1:45:8e:f2:22:75:03:
         1d:88:c8:32:79:fc:63:0e:ca:0f:88:98:b7:fb:1d:85:b2:c2:
         a9:11:c3:06:5c:8d:66:26:24:b7:96:d4:38:14:13:85:31:e8:
         c0:8c:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----