Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LUBOe4IpDdbDoxGhOOfrvkHEL7k.roa
File:                     LUBOe4IpDdbDoxGhOOfrvkHEL7k.roa (raw, json)
Hash identifier:          VZInsJ/ZbtsHYVkrYiQss+kfiI+pNME3NkANJvLJ8Gs=
Subject key identifier:   2D:40:4E:7B:82:29:0D:D6:C3:A3:11:A1:38:E7:EB:BE:41:C4:2F:B9
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01847C8BC748E4D8D382D22884739B61A949
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LUBOe4IpDdbDoxGhOOfrvkHEL7k.roa
Signing time:             Tue 15 Nov 2022 18:27:26 +0000
ROA not before:           Tue 15 Nov 2022 18:27:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206131
IP address blocks:        2a06:a005:1084::/48 maxlen: 48
                          2a06:a005:1c78::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:7c:8b:c7:48:e4:d8:d3:82:d2:28:84:73:9b:61:a9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 15 18:27:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d404e7b82290dd6c3a311a138e7ebbe41c42fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:22:5d:ac:a9:45:23:e2:3e:f7:a7:a3:fa:5c:
                    6a:45:95:18:5f:64:a7:c1:78:e2:d4:ed:1b:68:da:
                    cc:e6:d7:7f:3a:50:a8:84:1d:a1:96:5a:b6:da:fa:
                    04:6a:75:a2:93:81:d2:d6:be:27:bb:fa:13:6f:8a:
                    2f:ae:20:46:28:d7:4d:7c:c6:83:ce:d5:44:b5:9a:
                    8f:fe:26:f1:a6:94:9a:51:5e:98:32:56:d8:67:0b:
                    e6:3d:55:d1:1d:57:ef:1f:78:f6:e8:6b:5c:c4:25:
                    3c:35:d0:9c:50:8c:55:c1:ff:99:15:43:f5:a1:c1:
                    a5:d3:63:9e:7d:72:77:b1:1b:b6:f8:ed:66:19:4e:
                    34:9a:ab:a5:52:9f:a9:fb:4f:66:6f:31:8a:68:25:
                    af:6a:9b:04:9f:59:fd:bf:9b:44:61:aa:da:ad:ba:
                    d1:f1:7c:8b:5e:b1:2b:a7:b7:8f:72:57:bd:08:a5:
                    dc:9b:24:ee:0a:40:96:b4:14:06:90:3d:12:35:af:
                    07:09:2b:b4:d5:5e:c1:68:de:20:0a:27:00:94:12:
                    e8:67:ff:2e:e8:31:08:73:9b:e0:9b:95:36:8f:3d:
                    4c:50:61:56:3c:b2:c3:31:17:d2:24:6e:9d:a0:07:
                    25:b8:61:fa:ab:33:2d:da:48:8a:0e:d8:00:de:74:
                    03:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:40:4E:7B:82:29:0D:D6:C3:A3:11:A1:38:E7:EB:BE:41:C4:2F:B9
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LUBOe4IpDdbDoxGhOOfrvkHEL7k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1084::/48
                  2a06:a005:1c78::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:8d:db:33:3c:40:aa:5e:4c:47:bc:82:79:80:3c:c0:a0:
         4a:4e:e9:c6:b6:b9:7b:ba:fd:66:d5:17:53:a8:cc:5e:58:9b:
         81:00:60:67:66:fa:e3:57:15:b4:90:4e:d3:43:2b:94:15:e2:
         88:7e:fb:48:36:31:dc:5b:05:69:52:d3:1b:c6:bb:f8:85:b5:
         3a:c0:99:fa:18:c7:4d:36:31:68:86:b7:18:f3:26:81:9d:97:
         a4:f6:e1:ce:55:ae:05:63:70:0e:00:c8:6b:98:23:15:3e:19:
         6c:35:ae:54:22:cc:7f:56:ff:11:83:71:a0:fe:40:ce:d5:23:
         b2:a4:44:da:0b:e1:64:bf:63:fb:8c:20:54:2f:10:c6:e3:ee:
         ab:3f:b3:ee:08:50:3b:b2:ba:ab:07:92:d6:0f:30:fa:fc:fd:
         5f:f7:7a:e8:63:38:2a:6a:a2:ae:6c:2a:25:ab:51:1c:44:0b:
         a1:15:0a:08:b7:e3:00:b6:aa:2e:24:c9:b5:4b:a3:11:16:15:
         f9:64:6c:1d:7a:30:42:9b:86:25:26:f7:1a:94:e0:23:07:23:
         31:ca:e3:46:3b:3e:05:f9:69:3c:be:a4:91:83:52:52:76:e0:
         54:ef:95:b5:2c:a6:a1:c4:88:b3:ac:57:40:dc:fe:5a:84:27:
         58:57:e4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----