Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FQT6a2R1ghMdq7mMugO17iq7K-w.roa
File:                     FQT6a2R1ghMdq7mMugO17iq7K-w.roa (raw, json)
Hash identifier:          j8lnJxZeoFJU29VOedR80RfRff6xLLWlFJCURwcANoA=
Subject key identifier:   15:04:FA:6B:64:75:82:13:1D:AB:B9:8C:BA:03:B5:EE:2A:BB:2B:EC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01836BC7F125CC1CDC56ABBBE40AC1DFAD3C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FQT6a2R1ghMdq7mMugO17iq7K-w.roa
Signing time:             Fri 23 Sep 2022 19:16:48 +0000
ROA not before:           Fri 23 Sep 2022 19:16:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19625
IP address blocks:        2a06:a005:1530::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:6b:c7:f1:25:cc:1c:dc:56:ab:bb:e4:0a:c1:df:ad:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 23 19:16:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1504fa6b647582131dabb98cba03b5ee2abb2bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b3:1e:0b:b3:13:12:a3:85:ae:36:73:86:12:
                    29:7b:02:54:36:17:6f:7f:b3:15:0e:29:0e:10:06:
                    a1:53:30:40:00:52:ca:fd:ef:a3:76:6c:af:2d:6f:
                    31:58:1a:e7:3c:c0:7b:fe:cb:e9:a0:64:e5:ae:86:
                    b9:c9:1f:3b:1c:77:20:31:8d:99:61:f9:8f:30:4d:
                    b5:85:48:1f:3d:be:79:7f:f0:18:63:69:96:e0:53:
                    7f:ab:83:1a:71:79:9e:c1:48:c3:bd:ae:02:3b:43:
                    33:d5:17:53:8a:c4:62:da:aa:08:db:36:31:ea:5a:
                    fd:be:7b:24:1c:6b:74:0b:f0:ff:79:f5:90:25:d5:
                    e0:8c:70:1c:6d:53:3e:9e:fe:3d:9d:07:23:2c:92:
                    85:8c:da:85:e3:b6:dd:76:a5:81:66:56:f6:f4:21:
                    ca:56:87:f5:ab:fd:0f:07:d6:df:b9:a6:70:80:cf:
                    47:8e:76:91:fd:f6:da:48:f0:6e:f0:40:b0:97:61:
                    37:be:e0:1f:b7:77:85:fb:3d:21:d6:d4:8d:68:12:
                    73:f4:12:9d:b6:0e:f3:31:07:d5:9a:cd:d8:e2:37:
                    f6:9d:da:e6:c8:7a:07:7b:77:ea:53:2a:00:7d:c9:
                    03:31:76:e9:64:1c:39:b4:e9:d3:73:26:72:56:0d:
                    da:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:04:FA:6B:64:75:82:13:1D:AB:B9:8C:BA:03:B5:EE:2A:BB:2B:EC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FQT6a2R1ghMdq7mMugO17iq7K-w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1530::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:8f:92:29:2a:ff:1c:42:d1:9d:9f:d9:3d:62:91:f9:06:b8:
         41:32:f6:19:cd:0c:80:04:5a:a2:dd:f2:51:8a:69:ca:00:ee:
         9b:f8:bd:be:a5:bd:fb:a2:1c:56:86:28:00:38:91:48:32:2f:
         e5:06:f8:59:4a:83:ca:9d:9a:52:7f:e4:e6:e8:e8:10:e0:54:
         87:d3:bb:50:62:3b:1b:07:2e:40:9f:a7:55:7b:37:33:dd:ab:
         c6:ca:b4:0e:6f:ec:5c:bb:62:e4:81:7c:63:9f:68:fc:b5:67:
         6f:3c:67:78:0d:ab:96:ad:42:50:3c:89:ae:50:ef:61:48:e7:
         fa:b5:41:ba:6b:1b:ad:c8:53:5b:80:57:92:54:6b:ff:db:c6:
         cf:53:d4:ef:de:50:bd:f8:f5:9a:ab:02:1b:37:01:55:ea:37:
         4a:0d:35:e3:be:4b:cf:91:e5:8d:10:c1:e6:d1:8c:68:1e:63:
         93:15:dc:e2:8c:04:5d:b2:41:06:d2:05:1f:58:c5:00:99:f9:
         a9:7e:eb:4f:b1:3d:93:b1:d9:ca:24:ca:5d:c5:9b:68:6f:f5:
         73:88:5a:1c:f1:dc:4c:30:97:5a:49:ca:2f:54:67:83:7a:11:
         77:52:56:6d:3d:c3:d5:ca:98:c6:7c:79:a4:c8:76:6f:79:f5:
         69:99:5c:4d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYNrx/ElzBzcVqu75ArB3608MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTIzMTkxNjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTA0ZmE2YjY0NzU4MjEzMWRhYmI5OGNiYTAzYjVlZTJhYmIyYmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rMeC7MTEqOFrjZzhhIpewJUNhdv
f7MVDikOEAahUzBAAFLK/e+jdmyvLW8xWBrnPMB7/svpoGTlroa5yR87HHcgMY2Z
YfmPME21hUgfPb55f/AYY2mW4FN/q4MacXmewUjDva4CO0Mz1RdTisRi2qoI2zYx
6lr9vnskHGt0C/D/efWQJdXgjHAcbVM+nv49nQcjLJKFjNqF47bddqWBZlb29CHK
Vof1q/0PB9bfuaZwgM9HjnaR/fbaSPBu8ECwl2E3vuAft3eF+z0h1tSNaBJz9BKd
tg7zMQfVms3Y4jf2ndrmyHoHe3fqUyoAfckDMXbpZBw5tOnTcyZyVg3aQwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBUE+mtkdYITHau5jLoDte4quyvsMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvRlFUNmEyUjFnaE1kcTdtTXVnTzE3aXE3Sy13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBRUw
MA0GCSqGSIb3DQEBCwUAA4IBAQAtj5IpKv8cQtGdn9k9YpH5BrhBMvYZzQyABFqi
3fJRimnKAO6b+L2+pb37ohxWhigAOJFIMi/lBvhZSoPKnZpSf+Tm6OgQ4FSH07tQ
YjsbBy5An6dVezcz3avGyrQOb+xcu2LkgXxjn2j8tWdvPGd4DauWrUJQPImuUO9h
SOf6tUG6axutyFNbgFeSVGv/28bPU9Tv3lC9+PWaqwIbNwFV6jdKDTXjvkvPkeWN
EMHm0YxoHmOTFdzijARdskEG0gUfWMUAmfmpfutPsT2TsdnKJMpdxZtob/VziFoc
8dxMMJdaScovVGeDehF3UlZtPcPVypjGfHmkyHZvefVpmVxN
-----END CERTIFICATE-----