Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JSthxhHXA4B8cJlXHPsmOw-_byo.roa
File:                     JSthxhHXA4B8cJlXHPsmOw-_byo.roa (raw, json)
Hash identifier:          ZMVOD+uDDwhgm0Nzxer/pKlt77NYcW63xS6M8sOEswk=
Subject key identifier:   25:2B:61:C6:11:D7:03:80:7C:70:99:57:1C:FB:26:3B:0F:BF:6F:2A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B7F4516
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JSthxhHXA4B8cJlXHPsmOw-_byo.roa
Signing time:             Mon 27 Jun 2022 22:21:21 +0000
ROA not before:           Mon 27 Jun 2022 22:21:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213386
IP address blocks:        2a06:a005:2da::/48 maxlen: 48
                          2a06:a005:2d7::/48 maxlen: 48
                          2a06:a005:fb0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461325590 (0x1b7f4516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 27 22:21:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=252b61c611d703807c7099571cfb263b0fbf6f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:76:7a:ca:77:ed:3f:59:e5:22:18:00:9c:
                    7e:f0:4d:82:84:c5:5f:37:69:d1:3c:28:fa:66:21:
                    93:5f:1c:74:19:a5:84:9c:50:05:25:72:09:b2:b3:
                    d2:c7:ec:b7:16:e9:ac:7b:a5:a7:49:6e:39:6e:04:
                    91:ba:e4:39:ad:04:b0:85:bd:2a:14:83:8b:6f:45:
                    58:b8:b2:7c:72:c7:2e:be:50:17:68:74:02:81:d8:
                    c7:7f:e2:89:24:37:d1:1d:78:26:8e:8a:bf:20:28:
                    c2:8a:55:40:a9:44:f3:c7:d2:52:f3:ca:aa:f1:da:
                    59:99:3b:41:2b:b2:81:21:00:a9:3d:29:3a:96:03:
                    40:b1:d2:71:46:03:dd:a6:29:7b:33:1d:de:e7:f7:
                    04:5d:51:0f:7d:11:30:a4:1b:3f:f0:56:d2:a8:7f:
                    b3:25:6e:80:de:5d:cb:f2:e5:63:e2:be:e5:a7:1a:
                    2b:64:7f:28:52:48:f4:d3:d7:6d:f4:db:e9:cb:2a:
                    45:d7:49:e7:a5:64:e7:3d:b7:6e:da:b8:78:fd:e9:
                    96:e1:6d:83:d9:23:cb:eb:64:3e:55:c5:e3:ba:29:
                    55:2e:be:0c:3e:ad:68:a1:c2:1f:4c:52:9d:53:e1:
                    9a:5b:f0:15:a0:9d:0a:e7:41:0f:e2:74:70:82:dd:
                    b2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2B:61:C6:11:D7:03:80:7C:70:99:57:1C:FB:26:3B:0F:BF:6F:2A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JSthxhHXA4B8cJlXHPsmOw-_byo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2d7::/48
                  2a06:a005:2da::/48
                  2a06:a005:fb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:b4:9e:8e:db:81:39:f9:c7:e2:d4:fe:12:cc:04:3b:aa:c6:
         f1:90:f1:67:13:ed:e5:4d:87:98:71:80:ed:ae:f7:e8:0f:05:
         9a:5a:67:d8:e6:88:95:00:21:27:72:13:89:4d:57:c2:d4:7c:
         a2:50:11:39:8c:2d:22:b1:b1:e3:66:79:8a:e0:e7:88:56:e0:
         51:f0:8e:2b:ae:82:6c:cf:3a:e6:94:8c:15:9d:c3:b1:63:ad:
         2f:80:2a:86:7d:98:f4:da:82:10:f4:5d:38:02:f6:8a:66:22:
         a7:86:fe:99:3d:1b:6d:f8:4e:a6:08:17:3a:8d:f5:33:6a:68:
         0c:1f:e6:aa:8a:46:6b:15:26:77:b3:83:2b:96:0a:63:4e:d0:
         d1:48:fb:97:c4:64:23:2d:ac:fc:05:5d:8f:61:6d:5a:c7:93:
         cc:da:0a:45:f7:7b:84:0b:29:17:76:ca:c8:5c:b4:bc:b8:89:
         bc:7b:b0:ad:a1:9a:d6:70:2c:a5:70:9c:c5:ef:9e:5b:27:73:
         db:df:6e:a6:e1:84:85:79:90:f1:76:9f:0c:ed:44:1f:4f:ec:
         d8:45:f8:1b:17:3a:9f:9c:4b:9e:81:a7:5c:02:89:f0:c9:29:
         41:e2:2a:24:d6:52:d8:04:6b:a7:98:41:0c:e2:64:25:72:76:
         d0:f0:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----