Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JFGUjBUxcEjIhpR0RcIDZOEY3YU.roa
File:                     JFGUjBUxcEjIhpR0RcIDZOEY3YU.roa (raw, json)
Hash identifier:          D0fGK6QCkqR2enJM/5nRqOHjbVlH1kijkpwJfvdst0I=
Subject key identifier:   24:51:94:8C:15:31:70:48:C8:86:94:74:45:C2:03:64:E1:18:DD:85
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01840FED7C1789F6DEBCD170E937E84CCE97
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JFGUjBUxcEjIhpR0RcIDZOEY3YU.roa
Signing time:             Tue 25 Oct 2022 16:15:32 +0000
ROA not before:           Tue 25 Oct 2022 16:15:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201865
IP address blocks:        2a06:a005:5a6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0f:ed:7c:17:89:f6:de:bc:d1:70:e9:37:e8:4c:ce:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 25 16:15:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2451948c15317048c886947445c20364e118dd85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:12:c1:00:42:25:be:8f:1f:15:ad:08:2e:b5:
                    5d:ac:e2:7f:84:54:e8:1c:05:95:4d:49:f3:21:e2:
                    10:08:74:0e:9a:90:ad:f9:df:78:72:f1:84:af:84:
                    c4:7c:cb:77:11:05:2f:89:6b:9f:07:dd:c6:93:ee:
                    c2:a3:31:9c:5b:23:7b:07:36:60:bb:47:d9:8b:2d:
                    f3:47:18:85:17:8b:57:49:35:8b:e1:35:cc:8f:f7:
                    a9:9a:40:5a:31:7b:9c:36:b9:13:fd:65:f5:46:ed:
                    5d:fa:34:f4:d7:25:3b:c1:9d:36:fd:80:22:76:f5:
                    a0:cf:43:81:2c:83:9c:4a:e1:08:70:7e:61:d0:c2:
                    3f:88:72:21:80:4a:73:af:e1:f2:03:93:16:cc:61:
                    12:c6:78:94:3e:0f:9d:4a:4e:e1:88:29:1d:61:51:
                    98:03:44:5d:89:f3:50:e6:0c:cd:d4:19:b0:91:8e:
                    00:5c:52:b5:c8:8a:e5:3c:e9:65:90:fb:7e:6d:2b:
                    52:1b:2b:51:f6:1b:ec:b7:48:e6:0f:76:cf:53:95:
                    72:91:da:63:01:e3:47:b8:ba:28:e3:50:2c:ac:a5:
                    76:f0:19:b5:07:24:3f:d4:d6:88:79:aa:cf:fc:20:
                    1a:67:c8:33:c0:fa:81:24:ce:e1:56:7e:2b:8a:33:
                    31:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:51:94:8C:15:31:70:48:C8:86:94:74:45:C2:03:64:E1:18:DD:85
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JFGUjBUxcEjIhpR0RcIDZOEY3YU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5a6::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:11:b1:38:e8:f1:73:40:71:d1:3b:09:b5:62:ab:d6:a5:81:
         2f:5a:57:5f:73:22:85:c4:73:05:5b:fe:8e:12:5c:67:e6:ea:
         f7:76:e8:30:74:bc:bd:45:3d:f9:0c:80:13:54:98:f5:ae:48:
         32:76:72:a7:76:d7:05:09:e1:f3:87:95:8d:34:f4:5f:c5:f9:
         b8:17:ea:9a:f4:bf:dd:94:dd:e6:21:ec:30:5c:70:5e:ae:4e:
         b2:e2:f4:19:87:e8:54:0d:a8:91:4c:05:43:23:c7:5b:40:07:
         45:6c:a3:8d:72:3a:75:d8:64:59:d3:4e:ca:d6:a3:9e:bf:d3:
         7e:41:eb:2b:65:e6:7f:9f:2a:17:9f:8b:2c:96:ab:06:ac:9b:
         a5:5f:38:ac:59:b0:77:26:e5:2f:04:fb:9a:42:d6:5a:24:58:
         fa:9d:7e:ac:18:7b:b0:c3:30:7a:53:02:b5:7a:e3:90:23:c8:
         83:50:f1:b5:b9:3d:96:8a:b7:36:8b:60:13:75:0f:cf:24:e0:
         e1:dc:27:e3:bc:ed:4b:a5:5f:c3:a3:81:a6:4d:b0:64:f0:9e:
         64:46:4b:96:2d:17:b2:15:e1:c4:57:33:a9:3e:70:64:75:f0:
         cd:6a:71:ca:fc:fc:01:e1:ce:fd:96:00:d5:cb:1a:43:11:55:
         e6:a0:e7:a1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYQP7XwXifbevNFw6TfoTM6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDI1MTYxNTMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDUxOTQ4YzE1MzE3MDQ4Yzg4Njk0NzQ0NWMyMDM2NGUxMThkZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/BLBAEIlvo8fFa0ILrVdrOJ/hFTo
HAWVTUnzIeIQCHQOmpCt+d94cvGEr4TEfMt3EQUviWufB93Gk+7CozGcWyN7BzZg
u0fZiy3zRxiFF4tXSTWL4TXMj/epmkBaMXucNrkT/WX1Ru1d+jT01yU7wZ02/YAi
dvWgz0OBLIOcSuEIcH5h0MI/iHIhgEpzr+HyA5MWzGESxniUPg+dSk7hiCkdYVGY
A0RdifNQ5gzN1BmwkY4AXFK1yIrlPOllkPt+bStSGytR9hvst0jmD3bPU5Vykdpj
AeNHuLoo41AsrKV28Bm1ByQ/1NaIearP/CAaZ8gzwPqBJM7hVn4rijMxGQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCRRlIwVMXBIyIaUdEXCA2ThGN2FMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvSkZHVWpCVXhjRWpJaHBSMFJjSURaT0VZM1lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQWm
MA0GCSqGSIb3DQEBCwUAA4IBAQAVEbE46PFzQHHROwm1YqvWpYEvWldfcyKFxHMF
W/6OElxn5ur3dugwdLy9RT35DIATVJj1rkgydnKndtcFCeHzh5WNNPRfxfm4F+qa
9L/dlN3mIewwXHBerk6y4vQZh+hUDaiRTAVDI8dbQAdFbKONcjp12GRZ007K1qOe
v9N+QesrZeZ/nyoXn4sslqsGrJulXzisWbB3JuUvBPuaQtZaJFj6nX6sGHuwwzB6
UwK1euOQI8iDUPG1uT2Wirc2i2ATdQ/PJODh3CfjvO1LpV/Do4GmTbBk8J5kRkuW
LReyFeHEVzOpPnBkdfDNanHK/PwB4c79lgDVyxpDEVXmoOeh
-----END CERTIFICATE-----