Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JrMYSeJAlXAZEjpJYzubSR-LwmU.roa
File:                     JrMYSeJAlXAZEjpJYzubSR-LwmU.roa (raw, json)
Hash identifier:          YrLIB1kcbn0vH1y+mDNIIos9Ez8xUQl5h9wkVUIIOs0=
Subject key identifier:   26:B3:18:49:E2:40:95:70:19:12:3A:49:63:3B:9B:49:1F:8B:C2:65
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01823EA912B4CDBADC703805B20486311677
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JrMYSeJAlXAZEjpJYzubSR-LwmU.roa
Signing time:             Wed 27 Jul 2022 07:57:23 +0000
ROA not before:           Wed 27 Jul 2022 07:57:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44001
IP address blocks:        2a06:a005:13a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:3e:a9:12:b4:cd:ba:dc:70:38:05:b2:04:86:31:16:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 27 07:57:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=26b31849e240957019123a49633b9b491f8bc265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:75:e6:95:5a:8b:6b:d9:f0:d7:bc:a6:77:f3:
                    08:fd:e9:94:68:3e:6b:da:f9:33:77:c5:9e:8c:80:
                    e4:9a:ef:33:9a:ca:7d:fa:ab:8e:be:69:a5:eb:ff:
                    6e:c7:24:11:10:ac:b0:8b:51:65:fc:4e:a5:8d:7b:
                    61:55:30:5d:12:8f:88:11:c8:76:d9:64:93:ee:b2:
                    65:e8:4c:1c:1c:f0:f4:2b:54:83:05:03:1e:b7:81:
                    9a:d2:c4:ef:e4:ff:e0:3d:90:d9:2f:14:36:9d:76:
                    fd:18:db:8b:7f:31:8c:a9:85:25:92:f4:10:d3:37:
                    b7:da:3b:e6:83:d3:d0:59:22:1d:98:bc:4a:a4:d2:
                    39:1b:61:70:07:82:bd:7c:d2:79:fe:eb:7a:c0:3a:
                    3e:a9:38:e4:c8:20:f5:16:dd:61:d5:6b:c3:8d:02:
                    f5:55:fe:52:df:2c:a9:71:62:0d:58:71:77:78:04:
                    b0:79:fb:42:91:a1:60:1e:bd:ef:0c:6e:5e:bf:97:
                    67:3f:44:1e:11:f0:7e:d9:cf:50:f3:08:d8:20:a3:
                    f2:34:6b:a4:79:d6:f3:a0:43:a1:92:91:0c:a3:7d:
                    2a:bc:c2:63:1a:2b:03:2d:ee:52:fe:b1:ee:a3:91:
                    88:6a:0d:1b:23:73:90:3d:ed:1d:72:de:07:a9:c4:
                    34:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B3:18:49:E2:40:95:70:19:12:3A:49:63:3B:9B:49:1F:8B:C2:65
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JrMYSeJAlXAZEjpJYzubSR-LwmU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:13a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:af:ad:c5:12:20:6e:c5:aa:50:70:c8:e7:e7:8f:19:20:b7:
         87:ab:b6:d9:3d:fb:6a:ed:ef:90:9e:e5:a0:56:fe:0f:19:d9:
         07:3b:18:3a:2f:04:96:af:b2:93:d5:91:7d:32:29:95:70:77:
         a1:4c:cc:40:85:98:5d:cc:2f:23:b5:11:f6:61:06:47:39:b0:
         7b:17:ff:46:59:2d:0a:58:59:d2:35:4e:cd:d3:83:14:6d:05:
         07:48:90:4e:79:c6:8d:ef:64:c3:07:e1:f9:e8:f7:41:73:63:
         08:18:e8:16:45:08:48:20:e2:a2:7a:6f:d3:89:0d:49:cf:6c:
         85:30:d4:6d:79:15:3f:e1:c1:fd:29:93:ab:9a:3b:04:5b:84:
         2d:99:3f:53:7e:31:c4:3c:79:a4:c6:6e:e5:32:6d:df:ff:6b:
         74:40:94:d1:cf:94:9e:8b:77:9f:aa:86:c3:43:b4:87:94:d9:
         7a:01:5c:dd:5c:3f:3e:2f:8d:7e:be:f0:51:77:59:c7:06:a0:
         1d:1c:f8:a1:af:bd:6e:ea:65:32:8f:13:47:d2:0f:f3:fd:6e:
         80:be:0c:0b:6b:bf:97:85:09:b2:4a:d2:ad:63:62:29:76:8b:
         3a:b2:1d:77:59:23:d1:df:c4:5b:e7:fd:e3:21:4b:4d:33:7e:
         25:60:e1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----