Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JZPGocQDl8tnE_GhTgepy8jVuPg.roa
File:                     JZPGocQDl8tnE_GhTgepy8jVuPg.roa (raw, json)
Hash identifier:          vifgGhSN//VLhsOLh1RYq7aUaPwLgnZdEOqbRbIlphI=
Subject key identifier:   25:93:C6:A1:C4:03:97:CB:67:13:F1:A1:4E:07:A9:CB:C8:D5:B8:F8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182BE0FB4E7A288E8430FF94E68EA955C09
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JZPGocQDl8tnE_GhTgepy8jVuPg.roa
Signing time:             Sun 21 Aug 2022 01:41:16 +0000
ROA not before:           Sun 21 Aug 2022 01:41:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203333
IP address blocks:        2a06:a005:18d0::/44 maxlen: 48
                          2a06:a005:1860::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:be:0f:b4:e7:a2:88:e8:43:0f:f9:4e:68:ea:95:5c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 21 01:41:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2593c6a1c40397cb6713f1a14e07a9cbc8d5b8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:42:b9:0d:cb:d6:a1:58:e6:fc:bb:fb:f3:78:
                    00:f2:d4:a6:ff:ea:71:04:e5:e9:e2:3c:b4:dc:cf:
                    ad:94:7b:5e:a5:ff:92:a0:eb:d7:8c:2e:2e:06:5d:
                    6f:04:f5:ff:d7:72:43:02:cc:d4:8e:9a:30:52:3a:
                    27:e9:b2:18:cf:7b:83:4d:fb:87:31:ee:ac:28:ee:
                    17:91:e4:92:a7:11:ff:20:92:c6:36:e2:69:4b:1c:
                    5a:c0:b4:74:93:3e:04:f5:3d:e7:9d:88:33:69:d1:
                    92:13:39:8a:be:d2:db:b5:70:7d:e0:ac:9b:d9:eb:
                    12:0f:71:11:aa:48:3a:04:39:7a:5f:72:b0:f4:19:
                    df:ec:a5:76:14:56:ec:89:f3:9d:89:4f:48:85:18:
                    7d:65:29:4d:14:d1:fb:6e:08:56:b3:64:b6:68:0a:
                    f1:17:59:f1:5e:1f:69:ad:67:a6:1d:64:c6:76:ce:
                    88:06:be:d6:bd:4f:fc:4f:af:d4:f4:6a:42:01:c2:
                    93:12:d6:f2:97:af:80:30:07:98:cb:67:ea:cc:20:
                    9a:bb:2e:93:4b:d6:28:5d:cd:de:74:e8:4a:08:b3:
                    88:fb:25:f4:8f:a0:f3:f1:a0:01:79:e3:0a:be:6d:
                    60:65:c6:be:b7:48:e5:89:51:63:66:0e:82:dd:19:
                    bd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:93:C6:A1:C4:03:97:CB:67:13:F1:A1:4E:07:A9:CB:C8:D5:B8:F8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JZPGocQDl8tnE_GhTgepy8jVuPg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1860::/44
                  2a06:a005:18d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0d:c1:02:50:77:9f:f6:55:c2:99:9c:3a:cc:e8:a6:a3:8d:c4:
         c3:21:89:39:d8:4e:7a:cb:49:55:d5:15:28:c3:bc:d5:d0:41:
         b0:b8:5a:8c:06:11:ba:e6:83:37:a9:6b:7d:57:14:e5:43:60:
         47:c1:e8:9b:ff:c8:d0:be:51:99:3e:bc:ed:73:38:c3:b6:8e:
         75:49:ac:9e:23:ca:75:1b:d8:22:6b:f8:dd:db:7b:a8:45:06:
         bc:aa:d1:d7:93:ef:1f:88:9d:80:da:e2:0d:2f:90:ee:b2:60:
         0f:3d:e1:76:d5:f9:43:1f:ec:a8:fe:4f:5b:2b:b1:58:05:cf:
         66:84:c0:72:3f:47:b1:3c:8d:9f:94:8f:9f:66:cb:57:78:27:
         31:b1:62:a6:f6:94:0e:f0:86:ce:ab:7a:4b:f2:59:20:5f:d4:
         58:96:11:d9:49:0c:74:a4:e6:23:da:36:56:7a:04:e9:b9:ea:
         aa:b5:25:0f:cf:e8:b0:7c:5a:39:1f:17:c0:9f:46:2f:78:aa:
         76:77:52:49:b7:ee:0e:8b:dd:51:45:51:3f:d3:41:8d:9d:4f:
         0a:17:45:bf:73:45:69:b6:d4:15:a7:93:f1:4c:d2:bc:d8:31:
         f3:1d:c0:39:fd:ff:d3:9b:7d:e1:d5:24:9c:5c:55:71:d0:72:
         10:8c:28:5c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYK+D7TnoojoQw/5TmjqlVwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODIxMDE0MTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTkzYzZhMWM0MDM5N2NiNjcxM2YxYTE0ZTA3YTljYmM4ZDViOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUK5DcvWoVjm/Lv783gA8tSm/+px
BOXp4jy03M+tlHtepf+SoOvXjC4uBl1vBPX/13JDAszUjpowUjon6bIYz3uDTfuH
Me6sKO4XkeSSpxH/IJLGNuJpSxxawLR0kz4E9T3nnYgzadGSEzmKvtLbtXB94Kyb
2esSD3ERqkg6BDl6X3Kw9Bnf7KV2FFbsifOdiU9IhRh9ZSlNFNH7bghWs2S2aArx
F1nxXh9prWemHWTGds6IBr7WvU/8T6/U9GpCAcKTEtbyl6+AMAeYy2fqzCCauy6T
S9YoXc3edOhKCLOI+yX0j6Dz8aABeeMKvm1gZca+t0jliVFjZg6C3Rm92wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCWTxqHEA5fLZxPxoU4HqcvI1bj4MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvSlpQR29jUURsOHRuRV9HaFRnZXB5OGpWdVBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgagBRhg
AwcEKgagBRjQMA0GCSqGSIb3DQEBCwUAA4IBAQANwQJQd5/2VcKZnDrM6KajjcTD
IYk52E56y0lV1RUow7zV0EGwuFqMBhG65oM3qWt9VxTlQ2BHweib/8jQvlGZPrzt
czjDto51SayeI8p1G9gia/jd23uoRQa8qtHXk+8fiJ2A2uINL5DusmAPPeF21flD
H+yo/k9bK7FYBc9mhMByP0exPI2flI+fZstXeCcxsWKm9pQO8IbOq3pL8lkgX9RY
lhHZSQx0pOYj2jZWegTpueqqtSUPz+iwfFo5HxfAn0YveKp2d1JJt+4Oi91RRVE/
00GNnU8KF0W/c0VpttQVp5PxTNK82DHzHcA5/f/Tm33h1SScXFVx0HIQjChc
-----END CERTIFICATE-----