Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H_ZYG8J6KCFRofJH33SFUE9SA54.roa
File:                     H_ZYG8J6KCFRofJH33SFUE9SA54.roa (raw, json)
Hash identifier:          yTlHjQMyS9c4iqRytBCCKvWaEiRJysa68GUujPdVwuk=
Subject key identifier:   1F:F6:58:1B:C2:7A:28:21:51:A1:F2:47:DF:74:85:50:4F:52:03:9E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018474E08FBEB052E0ABC18E6BEC8A8F66E1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H_ZYG8J6KCFRofJH33SFUE9SA54.roa
Signing time:             Mon 14 Nov 2022 06:43:04 +0000
ROA not before:           Mon 14 Nov 2022 06:43:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203888
IP address blocks:        2a06:a005:d22::/48 maxlen: 48
                          2a06:a005:b60::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:74:e0:8f:be:b0:52:e0:ab:c1:8e:6b:ec:8a:8f:66:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 14 06:43:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ff6581bc27a282151a1f247df7485504f52039e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:65:82:d5:17:52:c5:43:c5:7a:3f:d7:bb:
                    f1:52:6c:b9:73:ab:4e:79:ab:38:5a:27:5e:ea:bd:
                    f3:d2:ee:48:eb:97:06:43:3c:f7:54:07:87:15:cb:
                    11:b9:ae:9c:4c:dc:f8:97:24:14:8d:27:78:ec:64:
                    c6:cd:cc:a3:64:48:3f:6a:45:70:5f:b2:74:99:3b:
                    2c:f1:20:0c:8d:46:e2:87:5d:38:e7:f2:f6:b9:9f:
                    67:82:36:9f:61:f2:92:82:6a:f7:a1:df:eb:28:59:
                    50:07:44:67:db:9e:c0:a5:eb:1c:cc:2d:85:d7:2c:
                    e1:e3:b8:2f:41:b3:b6:05:7a:bb:08:c0:4f:ae:1a:
                    02:8f:18:8d:d5:3e:63:df:68:d5:a1:36:d1:eb:6a:
                    de:7e:09:60:90:9e:7e:bb:f8:65:92:b3:2f:d2:a4:
                    fe:48:fe:3c:00:23:45:83:2b:81:76:ec:91:c5:33:
                    d4:b5:87:8b:35:5e:cb:2f:6d:25:08:5f:c8:8d:07:
                    bb:0e:f0:e5:0c:66:f8:e8:71:8e:f6:b6:0c:5a:13:
                    d0:1f:28:4d:ab:a8:8d:28:87:78:fe:b0:38:42:1d:
                    1a:75:eb:37:07:7e:ba:62:d7:eb:d6:7c:b3:72:b7:
                    a5:26:39:d9:96:f5:e3:f6:f3:7f:7d:5b:1f:e0:6b:
                    af:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F6:58:1B:C2:7A:28:21:51:A1:F2:47:DF:74:85:50:4F:52:03:9E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H_ZYG8J6KCFRofJH33SFUE9SA54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b60::/44
                  2a06:a005:d22::/48
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:ac:f4:c0:a6:b7:a0:bd:2b:ab:60:8a:ec:37:6c:33:f1:d1:
         eb:2b:51:61:b7:29:1f:aa:8f:5f:a8:c9:93:aa:b8:0e:9f:28:
         9f:a6:9c:21:71:2b:16:f5:17:09:a0:17:86:4f:41:50:44:9f:
         ea:17:a5:31:2e:73:3c:16:d2:0b:c6:2c:7f:d5:c6:6a:5c:bf:
         9e:fe:c0:51:84:9a:6b:a8:39:07:c8:44:72:96:65:5e:16:b2:
         a8:8d:e7:3f:76:dd:9d:fc:31:2f:cf:b9:f5:d3:82:51:80:cf:
         d6:d0:ae:07:2d:6d:d4:e4:99:a7:eb:50:da:ce:c1:ae:e8:c9:
         cd:d7:b2:f2:c5:6c:ce:15:49:4d:30:7e:7e:32:30:c1:82:fc:
         9d:5e:cc:03:0e:a5:c9:b1:04:de:c4:f4:2c:39:69:7b:98:bb:
         b6:c0:27:8d:a5:f8:82:f6:0a:63:db:81:d9:78:2e:37:51:79:
         1c:f3:1a:ad:92:94:7f:b7:46:86:a4:cd:af:a9:d2:ea:1b:2b:
         d6:02:0c:8b:7a:92:70:be:0b:32:d2:cd:b9:14:63:38:47:bf:
         be:2d:13:a9:e7:d8:b1:ae:a1:40:36:28:8f:c7:fa:c4:61:06:
         dd:f0:10:b2:b4:ea:50:e6:45:79:88:cb:fe:10:10:a9:b4:a0:
         50:6d:cb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----