Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JVY40tkzTkRvMVOz-M0gteawjcs.roa
File:                     JVY40tkzTkRvMVOz-M0gteawjcs.roa (raw, json)
Hash identifier:          JwJTZ/neT55/4u9pNa10zLili5qPJstxzX6hW2/wB4c=
Subject key identifier:   25:56:38:D2:D9:33:4E:44:6F:31:53:B3:F8:CD:20:B5:E6:B0:8D:CB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018365D56D2EEFA42F58A786722B9EB6D84D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JVY40tkzTkRvMVOz-M0gteawjcs.roa
Signing time:             Thu 22 Sep 2022 15:33:49 +0000
ROA not before:           Thu 22 Sep 2022 15:33:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6145
IP address blocks:        2a06:a005:1500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:65:d5:6d:2e:ef:a4:2f:58:a7:86:72:2b:9e:b6:d8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 22 15:33:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=255638d2d9334e446f3153b3f8cd20b5e6b08dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:92:af:f3:f7:01:d0:62:c1:82:b0:f8:45:78:
                    f2:3b:57:80:ab:95:f8:ea:33:67:bf:ee:b5:c8:32:
                    41:7b:0a:db:5a:03:1e:7f:11:3c:91:0a:0f:85:c8:
                    e9:51:6d:b9:b8:77:a7:8c:ae:73:e5:f8:b5:6c:f9:
                    c5:4b:e5:39:53:9c:a9:b4:cb:99:89:a5:a5:dc:db:
                    8b:13:25:ee:7e:de:86:00:e6:e9:eb:df:17:00:b5:
                    1d:f3:f9:a5:55:f1:35:2f:ec:a4:18:d0:50:d7:74:
                    e1:7b:af:30:62:12:49:0c:d3:b2:5a:39:ec:69:c0:
                    48:f7:e6:12:61:da:6b:bf:34:99:ab:fd:a9:ab:41:
                    c3:5a:ac:1c:9d:55:89:f5:42:1c:28:75:09:fb:3d:
                    ae:e6:4f:22:81:e8:4b:4d:26:27:c5:42:b2:74:f3:
                    08:2e:1c:78:39:a0:bc:18:61:e2:57:64:f6:d9:14:
                    55:2b:f2:17:92:48:b0:f8:ee:37:c7:54:d8:50:bc:
                    9f:df:5e:e2:be:83:15:cf:4f:da:64:29:38:3c:23:
                    7c:30:26:8b:37:3a:3e:d8:4a:75:b4:86:4d:51:da:
                    f4:e4:8c:b1:ba:92:b9:a2:88:0e:66:32:8d:f3:e8:
                    88:5d:64:e8:c4:8b:75:89:8a:d1:98:0b:d7:30:38:
                    9b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:56:38:D2:D9:33:4E:44:6F:31:53:B3:F8:CD:20:B5:E6:B0:8D:CB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JVY40tkzTkRvMVOz-M0gteawjcs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1500::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:cd:06:75:a0:8b:40:a5:5a:e4:28:4f:90:43:6e:2b:62:af:
         58:d0:ad:4e:6f:49:56:f4:80:f7:bd:16:92:f5:95:68:8e:5c:
         73:1f:14:70:eb:fd:26:4e:e4:7e:07:c3:c5:28:78:9c:85:0c:
         20:34:b7:73:79:e9:6b:d7:13:c2:ea:af:b1:48:cb:09:a7:bb:
         43:17:9c:fc:a0:1c:61:fb:d7:0a:ba:3d:77:60:69:c5:d2:1d:
         bf:a6:84:e7:59:bc:fe:0d:45:1f:9d:b3:50:b0:21:97:f9:ed:
         0f:87:da:bc:eb:52:1e:35:ce:15:d0:fd:d5:62:15:7d:ea:2e:
         b9:3a:86:3e:6d:3f:0c:01:68:ce:63:3b:79:43:f9:a4:30:50:
         61:c6:67:17:18:d5:90:32:d0:81:d3:9b:2b:66:3e:19:cb:b8:
         78:46:67:2f:82:d4:cb:b4:a6:24:a5:2c:44:fa:4c:1f:5b:01:
         19:c5:c6:8c:70:79:96:6d:9a:f1:3b:e1:11:53:54:4e:d6:22:
         72:36:92:1b:f6:08:0c:1d:fb:68:8d:a0:ab:62:16:1f:62:21:
         38:82:b0:54:56:5e:43:c8:7d:09:eb:aa:9b:08:8e:1c:97:21:
         f6:14:b4:ab:e0:38:fb:d2:47:da:40:26:30:c0:5f:4f:0f:99:
         dd:83:72:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----