Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KVwDpremEVxDrep3Il4gXoXlJMI.roa
File:                     KVwDpremEVxDrep3Il4gXoXlJMI.roa (raw, json)
Hash identifier:          JRxh2FsNgZUHkqDCv6Z7uED7TkmIhq7ZcKg6uBj8k2s=
Subject key identifier:   29:5C:03:A6:B7:A6:11:5C:43:AD:EA:77:22:5E:20:5E:85:E5:24:C2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184EBF87ED2317E9AEA94AE4E0C6022DBA9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KVwDpremEVxDrep3Il4gXoXlJMI.roa
Signing time:             Wed 07 Dec 2022 09:44:01 +0000
ROA not before:           Wed 07 Dec 2022 09:44:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200879
IP address blocks:        2a0a:6040:f200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:eb:f8:7e:d2:31:7e:9a:ea:94:ae:4e:0c:60:22:db:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  7 09:44:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=295c03a6b7a6115c43adea77225e205e85e524c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f7:c1:08:85:64:db:b5:b9:e5:0a:39:ff:f9:
                    e4:ca:08:45:d1:cb:e4:c9:ec:93:f2:31:14:0f:d1:
                    55:ce:89:fb:15:85:58:29:61:7a:59:cf:3c:83:d4:
                    99:5d:07:36:93:32:4c:c8:6d:27:27:28:9c:a1:17:
                    ce:86:47:24:10:1f:fa:81:35:b9:6e:50:6b:64:1c:
                    44:dd:64:c3:98:81:1f:9a:b8:42:8b:ee:3a:28:6c:
                    a2:fe:93:77:c8:fa:33:68:90:6d:cc:ba:75:07:a2:
                    03:f5:bf:65:05:f5:84:23:05:4c:d3:4d:bb:39:e1:
                    8a:0c:74:be:a6:25:aa:b9:c1:d2:67:a9:17:f5:95:
                    79:4a:16:d1:25:11:5d:43:66:db:ff:5d:73:7d:26:
                    00:bc:fd:e0:b0:f7:0c:26:f9:e8:bb:9b:c8:f8:16:
                    46:8f:da:cf:60:c5:9e:98:13:c9:4c:5c:18:03:d0:
                    ee:34:21:d5:71:73:b2:ef:94:7e:c3:7b:83:d1:c0:
                    3e:d0:8d:7a:38:da:e5:5d:bf:ea:71:0c:17:15:37:
                    12:66:a8:0f:c9:d9:dc:84:1a:11:ee:3d:68:a8:13:
                    91:27:3d:74:0f:2c:6a:25:33:b4:0b:73:15:51:6d:
                    25:26:5b:f9:5c:9a:b9:eb:01:a4:9e:9e:0d:97:f4:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5C:03:A6:B7:A6:11:5C:43:AD:EA:77:22:5E:20:5E:85:E5:24:C2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KVwDpremEVxDrep3Il4gXoXlJMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:5d:21:f3:a5:9d:7e:34:80:70:c8:3b:f8:2b:33:fa:54:ac:
         d3:36:b1:0c:fe:ee:0f:7c:d9:45:64:24:f2:ee:f0:8f:cf:ba:
         5c:33:a7:d8:3a:df:7b:6b:71:e3:ea:d0:4e:37:61:65:46:49:
         4f:7f:24:5d:74:08:51:3b:92:3f:fa:71:3e:9a:81:6d:7f:3e:
         a9:a6:07:5c:1f:7a:71:47:44:42:da:bd:a8:8d:8f:7e:76:12:
         d1:80:c6:1d:a7:5c:a0:0f:88:81:26:cd:12:8e:29:07:84:64:
         8c:67:82:3e:d7:59:2b:d5:11:85:48:6a:c0:22:f0:16:55:e3:
         b1:09:40:10:50:30:52:49:c9:6b:07:78:46:92:af:d8:e3:e3:
         bf:0e:36:6c:09:2b:74:02:80:b4:ae:e7:21:bd:e6:0d:40:38:
         4e:04:39:36:24:cc:ed:c2:e8:31:e1:fd:56:2f:99:03:de:71:
         3a:81:e7:e3:c1:b0:6a:12:26:0c:32:30:0e:33:86:16:80:7d:
         ec:83:8c:ce:f8:c1:93:c5:fa:85:ac:4c:7f:04:28:d4:c9:82:
         ca:21:34:99:19:9f:6c:41:89:b7:02:02:6a:b5:9b:44:2e:64:
         82:68:30:d9:99:a8:b0:ba:3e:65:6a:47:ae:98:2e:25:46:cd:
         14:6f:e0:48
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYTr+H7SMX6a6pSuTgxgItupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjA3MDk0NDAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTVjMDNhNmI3YTYxMTVjNDNhZGVhNzcyMjVlMjA1ZTg1ZTUyNGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPfBCIVk27W55Qo5//nkyghF0cvk
yeyT8jEUD9FVzon7FYVYKWF6Wc88g9SZXQc2kzJMyG0nJyicoRfOhkckEB/6gTW5
blBrZBxE3WTDmIEfmrhCi+46KGyi/pN3yPozaJBtzLp1B6ID9b9lBfWEIwVM0027
OeGKDHS+piWqucHSZ6kX9ZV5ShbRJRFdQ2bb/11zfSYAvP3gsPcMJvnou5vI+BZG
j9rPYMWemBPJTFwYA9DuNCHVcXOy75R+w3uD0cA+0I16ONrlXb/qcQwXFTcSZqgP
ydnchBoR7j1oqBORJz10DyxqJTO0C3MVUW0lJlv5XJq56wGknp4Nl/SUWQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFClcA6a3phFcQ63qdyJeIF6F5STCMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvS1Z3RHByZW1FVnhEcmVwM0lsNGdYb1hsSk1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQPIw
DQYJKoZIhvcNAQELBQADggEBADldIfOlnX40gHDIO/grM/pUrNM2sQz+7g982UVk
JPLu8I/Pulwzp9g633trcePq0E43YWVGSU9/JF10CFE7kj/6cT6agW1/PqmmB1wf
enFHRELavaiNj352EtGAxh2nXKAPiIEmzRKOKQeEZIxngj7XWSvVEYVIasAi8BZV
47EJQBBQMFJJyWsHeEaSr9jj478ONmwJK3QCgLSu5yG95g1AOE4EOTYkzO3C6DHh
/VYvmQPecTqB5+PBsGoSJgwyMA4zhhaAfeyDjM74wZPF+oWsTH8EKNTJgsohNJkZ
n2xBibcCAmq1m0QuZIJoMNmZqLC6PmVqR66YLiVGzRRv4Eg=
-----END CERTIFICATE-----