Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Oigs1Xh4RSGSUmKl1E7gQ4wbFOE.roa
File:                     Oigs1Xh4RSGSUmKl1E7gQ4wbFOE.roa (raw, json)
Hash identifier:          j9J8WR9vhK1LRzgH7wk1+LF4NFtMvsOrGrhM09BGPd4=
Subject key identifier:   3A:28:2C:D5:78:78:45:21:92:52:62:A5:D4:4E:E0:43:8C:1B:14:E1
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183561350E13AE82AF6D505A2DA1FE1C544
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Oigs1Xh4RSGSUmKl1E7gQ4wbFOE.roa
Signing time:             Mon 19 Sep 2022 14:07:29 +0000
ROA not before:           Mon 19 Sep 2022 14:07:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204789
IP address blocks:        2a06:a005:1de0::/44 maxlen: 48
                          2a06:a005:1df0::/44 maxlen: 48
                          2a06:a005:1dd0::/44 maxlen: 48
                          2a06:a005:1dc0::/44 maxlen: 48
                          2a06:a005:1db0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:56:13:50:e1:3a:e8:2a:f6:d5:05:a2:da:1f:e1:c5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 19 14:07:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a282cd578784521925262a5d44ee0438c1b14e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b7:bc:52:b1:a1:eb:81:f6:42:d6:f2:5c:af:
                    86:78:0b:be:d3:09:88:f7:49:b0:6b:89:0a:c8:cb:
                    17:64:48:29:83:c6:f3:f8:aa:62:2b:51:26:6e:d1:
                    5b:43:ac:04:01:00:a4:cf:d9:f4:cb:e8:36:e5:25:
                    2e:53:4c:f0:b7:d5:31:33:73:86:e7:01:fd:77:e8:
                    b4:02:45:4d:35:1d:f3:36:58:0b:37:93:b4:0d:70:
                    ce:2b:47:a0:b5:c2:d2:89:03:82:e8:12:03:4b:b0:
                    ca:8c:5c:7e:b6:d2:6e:8b:96:93:e5:23:eb:f1:9d:
                    a4:fa:d6:54:23:90:fb:a9:9f:c7:01:47:ca:ab:a3:
                    7a:9f:99:4b:d7:63:64:2f:03:dd:0e:57:90:24:e6:
                    ce:d7:b9:35:82:4a:d0:08:6f:78:49:a3:0d:d1:4f:
                    e0:80:ca:ba:a3:9a:35:5e:a0:1c:59:d9:ff:cc:84:
                    cb:da:4d:8a:0b:fc:e3:8b:66:8f:7b:b9:47:1d:f3:
                    17:29:1f:7a:01:0f:7b:e7:96:ba:03:9a:79:c9:e9:
                    17:6f:f3:6e:08:c6:49:6a:0c:28:3c:38:d7:63:ab:
                    75:da:19:e6:f7:91:3e:50:3c:ba:5e:b8:3a:7b:57:
                    8c:97:8b:c1:b8:95:01:6a:43:d4:ac:89:4f:c4:95:
                    c3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:28:2C:D5:78:78:45:21:92:52:62:A5:D4:4E:E0:43:8C:1B:14:E1
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Oigs1Xh4RSGSUmKl1E7gQ4wbFOE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1db0::-2a06:a005:1dff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         59:9c:3a:00:f9:3e:9a:84:57:b1:ce:30:0e:94:54:86:0f:80:
         75:4f:59:0a:16:0a:b3:ee:42:1a:e3:6c:db:5f:5b:2d:9c:a0:
         fd:ce:15:83:0e:18:11:df:15:56:1a:4f:92:03:88:04:1b:cd:
         13:8e:76:11:64:86:60:54:bd:2d:d3:95:6d:78:51:4b:70:c1:
         30:aa:99:0b:cb:35:fe:cf:02:99:a1:48:4b:f6:53:4e:e1:57:
         3b:ea:dc:8c:78:d2:05:da:ff:c8:fe:26:ae:f7:b5:57:c5:c2:
         68:ea:54:f4:52:61:74:b1:f7:d7:c1:e5:10:98:ae:07:08:60:
         00:72:01:a5:e4:0c:d2:4f:ee:87:2b:bc:b9:6c:86:ba:5f:19:
         67:70:b2:c1:03:10:89:94:70:f3:dd:87:3d:ed:fd:e2:94:ef:
         57:26:b2:91:a6:19:cf:2d:29:16:88:c1:fa:e2:39:f5:dd:61:
         76:35:a7:34:e6:ed:b4:97:22:23:c3:85:fc:bb:f0:43:55:fd:
         f8:a4:5a:11:cc:2b:6b:c6:62:b1:72:29:0e:06:6a:73:2e:5b:
         db:bc:3b:4e:26:55:80:4c:ea:cf:d6:2e:f9:26:ba:0d:9a:c1:
         91:d4:67:dc:00:f0:eb:8a:ed:d4:a8:77:24:90:ba:70:7e:23:
         c9:93:9b:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----