Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Tz8G3p6l-1NqEoOva4Zl_TJ6RWI.roa
File:                     Tz8G3p6l-1NqEoOva4Zl_TJ6RWI.roa (raw, json)
Hash identifier:          peKMiW+qJyNRt4VjSw7ePV8btn1DrcUPvqPOEVJc+KQ=
Subject key identifier:   4F:3F:06:DE:9E:A5:FB:53:6A:12:83:AF:6B:86:65:FD:32:7A:45:62
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181FC27B92A4813DB9EF1BECE913FBF2BD8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Tz8G3p6l-1NqEoOva4Zl_TJ6RWI.roa
Signing time:             Thu 14 Jul 2022 10:01:10 +0000
ROA not before:           Thu 14 Jul 2022 10:01:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203919
IP address blocks:        2a06:a005:11f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:fc:27:b9:2a:48:13:db:9e:f1:be:ce:91:3f:bf:2b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 14 10:01:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f3f06de9ea5fb536a1283af6b8665fd327a4562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:53:bf:fa:6e:af:3b:82:83:a9:c0:e0:74:
                    f3:6c:dc:a0:db:34:5a:fd:2f:ca:4d:52:f1:f1:07:
                    80:37:f2:c2:90:4c:aa:06:5b:e3:9f:11:0f:e6:ab:
                    0e:04:cd:bf:a3:a5:e8:aa:35:81:4d:62:e6:07:f2:
                    82:86:25:c0:d0:37:36:42:cf:70:68:10:d3:63:95:
                    33:d0:9b:28:94:8b:ca:9c:5e:75:76:6e:a1:45:fe:
                    9a:2e:1b:e8:52:43:70:aa:fd:7b:d5:1b:a3:05:c6:
                    45:df:5f:06:50:ad:4b:45:9f:f4:48:90:15:fb:4d:
                    01:01:b9:36:5f:64:e5:6a:3b:83:83:49:57:84:8d:
                    8c:f9:b2:8c:76:87:40:3b:86:01:fb:57:39:62:9d:
                    f1:08:cc:3c:1b:84:17:91:db:51:1e:7a:5e:27:63:
                    9f:74:4f:75:ca:56:45:85:36:a7:c6:77:3f:ef:0d:
                    7a:39:a1:48:bd:36:2b:24:e7:b7:31:8a:08:40:0d:
                    71:ee:39:4c:36:bc:fe:20:00:4f:8b:c4:73:59:47:
                    b5:b5:36:94:32:ce:dc:11:70:35:1f:90:28:33:f6:
                    fe:1c:06:43:e1:6a:f3:75:a8:63:4a:c1:c6:84:fe:
                    15:29:ec:a6:db:8c:4c:10:98:bd:9e:c3:00:7e:2e:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3F:06:DE:9E:A5:FB:53:6A:12:83:AF:6B:86:65:FD:32:7A:45:62
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Tz8G3p6l-1NqEoOva4Zl_TJ6RWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:11f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         70:17:a4:72:e0:ad:7a:e9:45:e5:49:ef:04:63:7d:3c:62:67:
         b2:8b:e1:c9:66:2e:5a:3b:8a:06:5c:2a:d7:17:a1:47:5c:27:
         78:c7:74:89:d0:52:a2:d6:d4:7d:ab:80:96:de:ad:7e:e0:6c:
         37:f2:6b:5f:0c:d1:9d:29:02:8b:11:b7:89:36:4f:41:0e:f4:
         fa:25:7b:65:61:76:c4:d3:97:ae:5b:8e:e7:e1:00:dd:ea:6c:
         0a:64:95:8a:1c:c1:e1:1a:7a:db:1d:13:de:e1:ca:3c:5d:e3:
         1b:da:91:e9:2d:85:65:e6:da:f7:a4:c8:fb:95:9c:94:b9:d9:
         5f:f2:fa:f0:42:35:89:c2:dd:4e:a6:54:f3:c8:a5:57:6c:df:
         3d:8a:b4:ae:92:72:bd:31:be:df:8f:df:e5:b9:4a:87:45:84:
         54:cd:bf:d2:4e:a6:c0:c8:9a:7a:a2:ba:48:b7:2f:7c:f9:14:
         c2:79:a7:7c:a7:e6:87:24:69:4c:e3:b4:a6:d5:af:d9:5b:ed:
         57:e6:21:b6:0e:9f:55:7b:3f:6b:de:de:bb:2d:a4:cf:87:75:
         7d:4c:2a:81:aa:ee:41:40:51:ab:ac:99:c7:01:46:44:ae:2b:
         06:32:6a:f5:d1:96:7c:47:82:83:b6:43:94:14:85:35:45:b5:
         1e:c5:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----