Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/NGjHAIqtj4soDQmV1wM2ccRju0A.roa
File:                     NGjHAIqtj4soDQmV1wM2ccRju0A.roa (raw, json)
Hash identifier:          7Q4AjqOOgy8y9KyRkdxqT9wJvWTr1iCvjjcC6Nfcc7g=
Subject key identifier:   34:68:C7:00:8A:AD:8F:8B:28:0D:09:95:D7:03:36:71:C4:63:BB:40
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19A35E27
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/NGjHAIqtj4soDQmV1wM2ccRju0A.roa
Signing time:             Mon 09 May 2022 07:46:19 +0000
ROA not before:           Mon 09 May 2022 07:46:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206216
IP address blocks:        2a06:a005:4d1::/48 maxlen: 48
                          2a06:a005:855::/48 maxlen: 48
                          2a06:a005:853::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430136871 (0x19a35e27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  9 07:46:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3468c7008aad8f8b280d0995d7033671c463bb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:ee:97:53:e4:c7:66:84:db:8f:11:a8:8b:
                    fe:0b:59:ae:5c:be:e7:e0:c2:df:29:62:7a:fe:2a:
                    46:ff:4a:ab:c7:05:28:e9:c3:ac:06:ba:ab:f0:8b:
                    29:a4:48:12:90:94:a4:6a:b8:5d:cb:73:20:95:92:
                    c2:9e:7a:d1:b6:a4:76:a7:43:31:94:9e:3a:f0:ad:
                    2a:a4:5b:aa:ef:72:99:ee:86:2a:54:aa:97:fc:5c:
                    72:79:19:7f:b3:80:fa:56:45:2d:8b:43:2a:45:5d:
                    c8:f2:0c:c7:c4:82:fb:58:99:eb:0b:23:20:68:e4:
                    45:ff:5a:46:64:79:df:d3:58:98:3f:7f:36:8a:e4:
                    e6:ff:2e:6c:ed:15:61:d5:05:89:56:fe:28:90:00:
                    96:d8:cc:d4:11:da:d9:0c:18:09:e0:a7:dc:d7:7d:
                    76:93:f5:56:db:48:49:db:e1:a4:1f:12:eb:a3:d3:
                    30:a2:42:95:51:ce:a8:7a:ab:6f:c2:92:53:06:59:
                    2f:c2:f3:9a:54:db:b4:3e:bf:1b:cc:47:3e:be:b3:
                    40:37:4b:e5:04:54:32:21:78:5b:50:14:de:14:37:
                    99:2d:f1:d0:bb:3b:10:04:5a:15:25:ca:78:ff:ba:
                    02:1f:52:14:88:e0:29:2b:01:7d:63:38:b9:b8:00:
                    ff:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:68:C7:00:8A:AD:8F:8B:28:0D:09:95:D7:03:36:71:C4:63:BB:40
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/NGjHAIqtj4soDQmV1wM2ccRju0A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4d1::/48
                  2a06:a005:853::/48
                  2a06:a005:855::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:e5:eb:4d:e7:07:e0:73:c7:37:73:9c:22:2f:e3:b8:de:09:
         68:b0:12:00:ef:c4:27:43:ee:60:20:30:9b:45:29:b4:b6:81:
         42:76:9c:2a:32:b3:a8:07:ee:7a:89:be:1f:eb:94:d0:a6:db:
         2e:ac:34:88:62:69:fc:82:68:6e:58:f1:7a:6c:42:f4:77:8f:
         fd:9c:e7:bd:b4:28:83:93:8b:3e:1d:e5:13:e0:43:77:5a:88:
         24:8f:fc:12:a8:f4:c6:9a:3d:c2:36:54:ce:8c:33:d3:e4:7f:
         a2:87:e3:3b:fc:ed:a6:20:b2:76:a9:f6:0a:bf:81:b4:e9:8a:
         b1:e1:a8:18:2b:be:7f:e7:6a:48:b9:7e:12:75:ce:83:4e:07:
         b4:9a:b5:55:07:df:cc:8d:53:b2:0e:e9:74:38:bd:6f:60:73:
         0a:6e:bb:b5:04:9c:30:89:c7:df:1c:24:0b:f8:df:a7:72:7b:
         fa:77:c6:78:8d:d9:a3:6d:aa:95:8d:ca:5f:a6:23:04:f0:f3:
         7f:e1:a0:e9:1c:7f:91:6f:b0:6d:fb:08:6b:1a:63:39:fc:31:
         1a:0b:b3:39:b9:4a:f4:f6:ee:a0:e0:64:6c:36:e6:eb:9f:0b:
         05:a2:5e:c8:54:a0:34:25:96:c0:bc:f6:b1:4d:20:63:1d:9c:
         0e:68:d2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----