Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H3yBmPKscfCyOVPL5u0XT16TGtY.roa
File:                     H3yBmPKscfCyOVPL5u0XT16TGtY.roa (raw, json)
Hash identifier:          21esYjcsxUdYx+SWy5jSri3xSGCf7fAi8corQHwR0fI=
Subject key identifier:   1F:7C:81:98:F2:AC:71:F0:B2:39:53:CB:E6:ED:17:4F:5E:93:1A:D6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018281191B8EFAF7622D964DAB28D176A041
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H3yBmPKscfCyOVPL5u0XT16TGtY.roa
Signing time:             Tue 09 Aug 2022 05:34:42 +0000
ROA not before:           Tue 09 Aug 2022 05:34:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203979
IP address blocks:        2a06:a005:454::/48 maxlen: 48
                          2a06:a005:45a::/48 maxlen: 48
                          2a06:a005:5a8::/48 maxlen: 48
                          2a06:a005:455::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:81:19:1b:8e:fa:f7:62:2d:96:4d:ab:28:d1:76:a0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  9 05:34:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1f7c8198f2ac71f0b23953cbe6ed174f5e931ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:33:fc:9e:25:63:96:51:25:31:fe:ca:97:d9:
                    82:cd:96:cc:a4:ed:ba:36:5e:9d:2d:7e:1f:0a:70:
                    c1:8b:46:0a:2e:39:57:d2:65:e3:9f:f4:a7:90:df:
                    7a:62:1f:f2:f4:27:85:4c:3f:a6:0f:7a:75:53:3c:
                    ab:48:68:ba:d4:35:07:c1:3e:dc:0c:98:26:46:93:
                    5d:42:1c:d5:c2:a4:b9:ba:ea:2c:66:c2:ae:96:d2:
                    c9:24:ed:f9:35:8e:27:a9:27:cc:63:71:ae:36:fd:
                    d5:10:f6:3a:37:6e:8a:fb:82:bf:72:4c:5e:56:54:
                    e7:93:6a:de:e6:3e:ae:38:e5:46:d0:0f:b5:49:e4:
                    af:24:49:f2:fb:f9:90:5a:b7:20:68:44:1c:76:cc:
                    10:a6:a1:c7:f0:a7:70:87:af:ce:a2:18:31:e0:15:
                    c5:e9:a0:6c:9c:8b:6c:d9:f0:bf:07:2b:d2:5a:e5:
                    99:cf:55:5a:e0:9d:84:36:12:2f:ea:ec:07:9b:c0:
                    d1:3b:6f:17:b2:2b:61:fb:19:4a:a8:b7:0d:82:d5:
                    85:a9:d6:76:97:ef:7b:ac:ff:66:ae:2f:8d:d1:ab:
                    a0:42:ef:2d:88:95:8e:4e:15:67:f0:80:33:14:5c:
                    a1:e1:49:2b:02:df:d9:cd:f9:3f:50:f1:59:c9:5a:
                    1d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7C:81:98:F2:AC:71:F0:B2:39:53:CB:E6:ED:17:4F:5E:93:1A:D6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H3yBmPKscfCyOVPL5u0XT16TGtY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:454::/47
                  2a06:a005:45a::/48
                  2a06:a005:5a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:51:83:5b:33:78:18:d2:e0:ee:6c:d7:c7:8c:04:f4:b7:08:
         53:28:45:7a:7a:cc:3c:83:c3:fc:be:99:0a:47:e0:31:fc:eb:
         41:ed:18:71:cd:58:d1:47:1a:69:7e:f6:ed:16:24:9b:24:19:
         e9:81:ce:6a:7e:0c:8f:35:38:05:cd:65:84:8f:f4:05:2b:5c:
         a4:68:a5:b4:20:84:f1:5a:36:37:5a:92:f2:23:88:46:d4:7f:
         75:3c:69:a6:b3:67:61:f5:d9:59:56:f3:1b:fe:22:f3:34:5e:
         d6:37:ca:27:ae:4d:d0:ac:a5:3b:7f:e6:12:5a:e0:1d:12:25:
         85:cf:ce:e0:4a:8d:3e:46:99:e7:ba:c8:11:fd:e4:c6:93:96:
         db:18:04:f1:39:41:2a:7f:14:2d:75:b4:90:89:17:5b:85:32:
         4c:da:1a:a7:29:e6:a9:09:07:45:ef:ee:89:a2:74:03:84:f4:
         83:27:ad:1c:bd:07:11:67:64:80:11:a6:9a:9c:89:fc:dd:3a:
         dc:ac:5c:80:aa:59:03:a9:e1:24:3d:4e:fc:f1:22:d9:2a:d8:
         be:15:5e:6a:d9:6b:f6:8a:ee:0f:50:73:d2:b7:e7:f2:7a:37:
         6b:64:d8:42:4a:bc:6a:28:e3:5d:34:14:88:ed:fc:fc:d2:01:
         69:fd:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----