Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JNFLqaM7a7fQQ48TzIg5O_LfCrE.roa
File:                     JNFLqaM7a7fQQ48TzIg5O_LfCrE.roa (raw, json)
Hash identifier:          g+9KkESqQccAQulf1KDe3x92cxUDtPYkRLf9Q/VDHv8=
Subject key identifier:   24:D1:4B:A9:A3:3B:6B:B7:D0:43:8F:13:CC:88:39:3B:F2:DF:0A:B1
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01839434274EEE9F7F562B7D4981DB486067
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JNFLqaM7a7fQQ48TzIg5O_LfCrE.roa
Signing time:             Sat 01 Oct 2022 15:39:49 +0000
ROA not before:           Sat 01 Oct 2022 15:39:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207320
IP address blocks:        2a06:a005:43d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:94:34:27:4e:ee:9f:7f:56:2b:7d:49:81:db:48:60:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct  1 15:39:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=24d14ba9a33b6bb7d0438f13cc88393bf2df0ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:22:53:84:c4:5f:c7:db:b4:fc:d4:28:27:
                    f9:6e:a0:8f:61:c3:1e:a4:1e:dc:26:36:01:fb:e8:
                    17:41:65:28:c0:5d:2e:e7:de:46:37:c5:5f:7d:df:
                    50:29:6f:55:02:4f:68:c7:cf:70:b2:62:1f:82:bc:
                    c6:76:2e:5c:ed:ca:d0:44:cb:29:4e:50:d2:3c:42:
                    6c:a4:e0:19:89:3c:f7:81:08:47:32:77:aa:3b:11:
                    d7:31:f1:2c:34:8e:54:db:21:ff:ba:06:d3:aa:68:
                    f1:f0:27:0b:ee:64:b3:3c:32:c9:08:02:36:68:4a:
                    88:da:96:4f:11:6e:9e:72:6d:54:87:e1:db:56:ea:
                    33:47:5a:7c:12:28:d4:f9:5e:a4:b0:e7:36:c2:a8:
                    50:1a:92:10:d2:15:87:ac:dd:e7:ff:40:be:72:e7:
                    cb:9e:85:3b:e3:63:b1:56:f6:e6:45:48:cb:98:3f:
                    ed:b3:2a:a4:e6:1c:f6:47:09:e7:4c:71:3e:b0:aa:
                    9c:5c:8a:7f:4e:7b:9f:f1:8d:a4:2a:88:17:4a:97:
                    9f:7f:a5:5b:77:be:b6:e6:6e:43:c8:fe:72:3c:34:
                    0d:4b:8a:45:9d:77:66:f2:87:ae:58:7c:11:7e:12:
                    0b:31:e6:88:a6:04:80:2e:87:c9:f3:2e:6b:7e:b3:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D1:4B:A9:A3:3B:6B:B7:D0:43:8F:13:CC:88:39:3B:F2:DF:0A:B1
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JNFLqaM7a7fQQ48TzIg5O_LfCrE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:43d::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:2a:71:3a:e2:5c:04:5f:54:3d:b3:2a:67:23:5c:c9:0f:b9:
         5e:7f:1f:c0:8b:d4:dd:4d:f0:12:58:9a:b3:0d:ef:a1:a2:c8:
         17:d0:23:ca:4f:e0:bd:b4:c4:26:b3:3a:b9:5f:2e:9c:51:cb:
         35:82:e4:c3:77:2b:a6:fe:30:2c:e6:9d:63:94:19:47:ae:0d:
         ed:e1:22:c2:57:e7:ba:d3:6e:c7:7b:11:bb:c9:6d:9a:52:ee:
         3b:41:86:39:5f:17:0b:fb:07:7e:2d:e3:9b:4a:05:74:2d:9a:
         8a:c7:21:19:17:8b:d1:74:39:1c:ce:4e:6e:66:92:e3:ad:e8:
         56:10:9e:74:0c:24:a3:cb:5a:d3:6c:68:9a:ea:12:de:ed:c0:
         df:4b:fe:45:e3:ca:05:ca:c7:fc:70:a4:1b:eb:39:67:a9:e9:
         d7:c1:be:e3:bc:3f:17:bc:b4:a7:fc:2b:a2:51:aa:64:bb:f9:
         19:c9:f2:ad:78:0b:96:93:3c:8c:7f:7c:64:8a:ec:5f:cc:27:
         46:e7:5c:bc:96:21:57:64:35:61:5b:e7:19:5b:b0:5a:b2:6c:
         88:72:b6:08:3e:fc:d5:a4:1f:2c:79:85:b0:ae:8b:69:5a:b2:
         3f:4a:3c:94:fb:bb:f9:5d:37:c4:e5:83:54:20:c1:d1:90:39:
         52:7c:2a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----