Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Uko3BGYAh9-cSDN9SrVFl4Sl0Fk.roa
File:                     Uko3BGYAh9-cSDN9SrVFl4Sl0Fk.roa (raw, json)
Hash identifier:          H6mUu5/WyCRLqEW/BxxppdjcnUZj5rcevzAySC/wKkk=
Subject key identifier:   52:4A:37:04:66:00:87:DF:9C:48:33:7D:4A:B5:45:97:84:A5:D0:59
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182DBE0AA3A2A9C8D221D8CF83B440656AE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Uko3BGYAh9-cSDN9SrVFl4Sl0Fk.roa
Signing time:             Fri 26 Aug 2022 20:38:30 +0000
ROA not before:           Fri 26 Aug 2022 20:38:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212237
IP address blocks:        2a06:a005:18d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:db:e0:aa:3a:2a:9c:8d:22:1d:8c:f8:3b:44:06:56:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 26 20:38:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=524a3704660087df9c48337d4ab5459784a5d059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:06:4a:ed:a3:be:65:b9:a2:56:6d:6e:20:50:
                    68:71:e3:cd:c1:e3:ef:a9:bb:23:98:72:03:52:74:
                    a1:b7:b5:3f:f5:f7:2e:87:81:a7:67:4f:cd:13:e2:
                    46:47:b9:df:fd:63:98:3e:a0:c0:e0:e9:8a:95:52:
                    57:05:60:a3:f7:69:f4:c7:85:17:41:b1:35:9c:fc:
                    00:7b:f0:17:c5:bb:5c:2a:fa:96:b8:3e:f0:50:6b:
                    a3:fe:e7:1f:86:3d:d9:fc:25:8b:30:e3:a6:92:6d:
                    ce:35:3f:38:6a:c6:57:57:e7:76:ca:38:36:c6:1c:
                    74:a3:ef:bc:d9:08:ab:42:0e:ef:0a:d5:cb:4f:b6:
                    18:db:13:9e:0b:a9:92:aa:41:16:50:cf:2b:b2:e3:
                    f8:d3:12:d8:a4:82:3f:7d:5e:23:65:ad:96:52:c3:
                    fc:da:cd:c3:25:9e:2e:f3:40:86:cf:ab:2f:4a:34:
                    18:4b:96:f6:23:65:97:19:56:1b:2f:30:cf:0e:11:
                    86:87:86:52:c4:dd:4a:b5:8d:97:11:e6:3a:7b:56:
                    df:92:a0:29:a2:37:ef:29:50:a4:78:f2:71:90:96:
                    de:3b:8b:59:28:86:4c:ef:60:d5:47:35:d4:6c:88:
                    a0:9b:78:6a:8e:f0:77:16:83:25:69:b0:38:23:31:
                    b5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4A:37:04:66:00:87:DF:9C:48:33:7D:4A:B5:45:97:84:A5:D0:59
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Uko3BGYAh9-cSDN9SrVFl4Sl0Fk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:ed:d0:cf:a8:2f:3a:92:25:cc:5f:b0:9a:50:33:8c:27:b0:
         6e:32:b5:4e:cd:fb:5c:2a:c8:af:47:60:27:78:a8:8d:4e:91:
         2b:75:02:fa:e2:a9:f6:33:b5:2b:7c:27:bb:54:f5:f5:97:87:
         f9:3d:3f:1e:4d:8b:af:d8:c2:22:7c:ea:1b:87:16:9a:7f:1e:
         7d:fb:ae:01:45:17:af:c3:33:b8:2e:74:3b:34:22:76:30:c3:
         0c:a1:19:28:66:08:68:5b:27:0e:4c:8b:71:87:81:3f:ad:2a:
         e6:f3:de:16:4b:63:b7:8f:c0:bd:dc:48:85:57:6f:fc:9f:18:
         5d:ab:60:23:d5:c1:f9:4a:e5:2d:a1:12:fb:64:ed:88:b7:ee:
         99:35:84:17:62:a9:a8:a5:a2:6d:8e:2d:d0:2e:da:d3:1c:a5:
         6f:81:5e:47:c8:74:58:35:8d:85:59:09:09:7f:9b:ad:71:48:
         4b:4c:b4:de:f2:54:43:db:f3:0a:32:5a:79:34:f3:90:e1:30:
         4f:47:63:08:4a:c5:04:14:63:4f:d6:f7:08:95:64:de:68:a0:
         2f:4a:a4:1f:51:33:89:09:95:2f:3d:c0:18:8e:31:49:98:1c:
         86:22:a0:39:03:23:af:c1:60:de:70:ed:0a:31:d0:76:01:bd:
         8f:6f:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----