Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HUkGRKfj8RCt7hZ8R3WTT_b8fEw.roa
File:                     HUkGRKfj8RCt7hZ8R3WTT_b8fEw.roa (raw, json)
Hash identifier:          6V+UGsr99aMmG/iZykCLxOi9oH/EWGGzt/3KlwhEfqU=
Subject key identifier:   1D:49:06:44:A7:E3:F1:10:AD:EE:16:7C:47:75:93:4F:F6:FC:7C:4C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01838A3F548C83F78D74E19DFB6B89679B76
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HUkGRKfj8RCt7hZ8R3WTT_b8fEw.roa
Signing time:             Thu 29 Sep 2022 17:15:49 +0000
ROA not before:           Thu 29 Sep 2022 17:15:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202573
IP address blocks:        2a06:a005:1ed0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:8a:3f:54:8c:83:f7:8d:74:e1:9d:fb:6b:89:67:9b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 29 17:15:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1d490644a7e3f110adee167c4775934ff6fc7c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ca:93:89:ae:a0:e9:91:42:d8:8d:97:80:40:
                    6b:79:2f:9e:3a:a8:f2:ec:77:42:0f:03:7e:a7:5f:
                    54:3e:bd:59:8b:cb:9d:30:58:4a:79:d7:8b:da:2a:
                    12:30:13:96:9c:0d:b7:6b:5e:50:35:53:f3:d5:2e:
                    eb:94:3a:62:ad:aa:92:02:51:cf:45:c6:8e:19:49:
                    ff:19:2a:0d:cd:f9:c9:49:53:96:dd:60:26:d8:bd:
                    7d:53:da:11:53:6e:6e:b1:f9:db:92:30:44:14:83:
                    d1:e4:a7:ff:5f:7b:f1:1f:d5:81:c8:de:2f:89:87:
                    c0:c4:6c:8b:93:53:82:4f:71:18:ca:07:c0:97:9e:
                    ac:e1:8c:6e:17:c0:09:c7:52:ac:24:03:c0:af:ee:
                    a3:87:a0:7a:5f:e1:f5:c8:64:b8:52:e7:c7:6c:91:
                    45:25:64:74:e1:d8:10:5c:98:b8:c8:bf:da:42:3a:
                    66:cd:2e:16:0d:e8:63:73:20:da:6f:6b:e2:42:a0:
                    19:e8:a4:39:1e:08:ee:51:35:d2:20:df:60:34:cd:
                    e3:39:85:1f:b9:ed:02:d1:40:73:d8:83:70:02:4d:
                    dc:9c:53:48:33:ab:28:32:87:16:d1:a9:23:b3:83:
                    67:89:f6:27:31:0c:2b:c8:0d:22:43:63:0f:16:79:
                    7c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:49:06:44:A7:E3:F1:10:AD:EE:16:7C:47:75:93:4F:F6:FC:7C:4C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HUkGRKfj8RCt7hZ8R3WTT_b8fEw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1ed0::/44

    Signature Algorithm: sha256WithRSAEncryption
         06:18:b0:26:5c:8d:dc:5b:df:b5:29:5e:07:e1:17:a2:be:eb:
         6d:6d:8f:7c:5c:83:19:54:47:04:4a:6d:85:46:fc:fb:58:63:
         8c:4c:a9:16:7c:ef:84:7b:47:0f:63:1b:5c:c2:9c:11:d0:c0:
         5b:bc:22:4c:ad:e3:41:97:8e:2a:64:d1:42:a7:d7:c3:e8:99:
         da:17:53:23:b9:d5:4e:a4:b8:46:bb:ce:86:95:9c:9c:35:17:
         7c:81:a4:7f:0d:5a:5c:7a:1b:f9:9a:b7:a0:7f:83:48:88:2c:
         7f:76:1a:11:51:1a:77:75:cd:a8:13:07:15:c8:bb:82:81:47:
         8b:0d:e5:4e:91:26:f2:25:59:c1:4d:31:85:30:8b:23:d4:ef:
         29:40:fa:e2:ca:9a:b2:8b:42:74:a8:0e:7e:82:41:bb:02:69:
         2a:c6:e4:df:d5:bc:91:35:fc:c2:1e:d7:60:05:94:a1:93:f0:
         f1:33:ad:45:98:39:ec:ad:fd:b6:4f:9e:47:25:8a:6d:7f:16:
         2e:32:e1:aa:06:99:b1:d5:07:02:3c:f0:18:7b:33:f9:41:14:
         25:fd:64:ca:f5:b4:3b:18:88:7a:73:01:8f:ac:86:47:70:10:
         08:77:07:de:f1:79:34:1e:a2:b0:a2:d0:90:dc:8d:14:3f:f1:
         9a:39:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----