Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FrrAViZwNUVNcWKPdAKxTqRvZH0.roa
File:                     FrrAViZwNUVNcWKPdAKxTqRvZH0.roa (raw, json)
Hash identifier:          c25u/HqJtP584hBvMzWpZ7lMi0BQ02dlvUcsuvNGzRg=
Subject key identifier:   16:BA:C0:56:26:70:35:45:4D:71:62:8F:74:02:B1:4E:A4:6F:64:7D
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15B3F5C7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FrrAViZwNUVNcWKPdAKxTqRvZH0.roa
Signing time:             Sat 01 Jan 2022 05:59:00 +0000
ROA not before:           Sat 01 Jan 2022 05:59:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60438
IP address blocks:        2a06:a005:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364115399 (0x15b3f5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:59:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16bac056267035454d71628f7402b14ea46f647d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:19:43:22:87:71:b5:73:2c:b4:34:79:a3:60:
                    07:0b:67:41:ca:42:60:ba:ad:a3:77:0e:ba:68:70:
                    a0:e0:13:93:0a:87:b7:5e:94:5d:1d:2f:fb:a5:aa:
                    d7:5c:71:ca:7b:97:77:e7:06:84:99:b1:a6:cd:40:
                    62:28:dd:03:67:d0:06:f8:e1:8d:e1:7e:27:c8:02:
                    57:ce:7c:80:64:92:84:27:ad:e1:c3:df:f1:49:98:
                    05:9a:ad:4a:b5:5c:63:f6:dd:d5:f5:5f:a7:5d:79:
                    97:f7:39:c0:66:65:09:2f:29:34:de:97:90:3f:c2:
                    5d:66:af:6f:59:2a:33:70:ef:b7:35:2a:e6:9d:d0:
                    8c:e3:5f:0d:95:09:08:eb:0e:c6:4c:4a:90:86:5b:
                    3c:20:a6:02:0d:6e:fe:10:29:be:1c:72:1a:93:2a:
                    e4:79:9b:3b:bc:46:64:ca:d8:6c:b1:61:27:15:af:
                    e3:26:fa:11:5d:3b:f6:2a:99:99:f8:f7:3e:a1:5a:
                    d7:3d:6f:4b:ce:06:ab:d1:cf:7f:ec:b3:e6:dd:94:
                    e3:79:5e:3b:c4:a7:4c:27:bc:94:47:e6:78:44:0b:
                    97:97:4d:7c:60:d9:20:81:be:5b:0b:a9:1c:ba:e9:
                    f2:e2:1f:a7:58:da:94:57:ff:2d:f5:d3:ba:d7:87:
                    5b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BA:C0:56:26:70:35:45:4D:71:62:8F:74:02:B1:4E:A4:6F:64:7D
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FrrAViZwNUVNcWKPdAKxTqRvZH0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:b3:40:a8:8a:69:44:de:34:e2:71:98:aa:91:6c:d8:a6:8e:
         5d:68:2f:d3:d5:1c:e1:f7:25:e0:77:fb:8b:41:77:36:49:9d:
         b6:2d:63:55:82:55:0f:e9:aa:aa:ee:82:ef:f2:e5:31:33:fe:
         be:71:c8:0f:17:64:63:92:f4:16:6c:3c:fd:c4:28:99:9d:c2:
         4c:e4:62:11:31:00:85:ca:47:11:e5:56:a8:a9:2d:60:63:9a:
         8f:ec:91:ae:66:c0:e5:a3:04:22:a0:52:0a:5d:51:bf:47:c9:
         9c:ef:b2:02:fb:12:ff:87:fe:1a:74:6c:72:29:9f:ad:59:fd:
         75:fb:74:05:df:13:19:37:bf:85:29:4a:54:dd:59:2a:11:d4:
         bf:15:bc:af:fb:c0:b7:b6:33:a1:cd:51:6e:c9:6f:2d:df:ef:
         b6:ba:e6:1c:f8:dc:a9:97:3a:09:1b:93:33:07:18:86:33:f8:
         57:21:e8:73:89:1f:aa:6e:01:92:9d:e6:6d:c8:dc:23:bf:5f:
         f6:f6:11:d8:aa:4f:29:cf:27:55:13:a9:66:83:c8:df:96:aa:
         b1:22:61:f7:b7:6d:bd:2a:67:14:9c:ae:59:92:57:6e:e1:33:
         99:20:ee:53:3a:b2:04:17:c0:ef:90:78:9d:c1:66:65:49:bb:
         6d:cd:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----