Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/V532IJLTS27bdHg2mf8gJgrgXFo.roa
File:                     V532IJLTS27bdHg2mf8gJgrgXFo.roa (raw, json)
Hash identifier:          mv2h/SNTsr+xZ3QjeAROvImHiJMsQOCnxHYWm5RFGTg=
Subject key identifier:   57:9D:F6:20:92:D3:4B:6E:DB:74:78:36:99:FF:20:26:0A:E0:5C:5A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01840F58770071DFD00DE727832B810A3B32
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/V532IJLTS27bdHg2mf8gJgrgXFo.roa
Signing time:             Tue 25 Oct 2022 13:32:46 +0000
ROA not before:           Tue 25 Oct 2022 13:32:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201938
IP address blocks:        2a06:a005:5a2::/48 maxlen: 48
                          2a06:a005:5a6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0f:58:77:00:71:df:d0:0d:e7:27:83:2b:81:0a:3b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 25 13:32:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=579df62092d34b6edb74783699ff20260ae05c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:b7:87:c3:58:9b:70:64:d3:07:06:70:45:
                    60:c7:6f:12:9d:35:2a:f9:82:6f:fc:09:d2:2d:55:
                    6f:fd:0a:9d:73:55:94:0b:45:42:0c:e1:d1:e7:34:
                    22:65:3c:ab:f6:ee:b4:06:2e:5a:07:a6:9c:cd:d8:
                    57:ab:78:a7:6d:f3:20:86:eb:cc:4c:8f:c5:d4:26:
                    e3:10:d0:40:88:ed:a2:09:d4:07:f1:f8:7e:ac:34:
                    79:2b:24:8c:c5:a1:90:4e:1f:51:d6:f4:61:10:63:
                    3e:bf:31:ad:07:14:cb:23:ed:3d:63:24:23:c2:f2:
                    2b:81:d8:93:96:cf:1b:28:66:5d:f7:01:bc:ac:bc:
                    47:a3:88:53:71:3e:4c:55:85:74:c4:7f:eb:20:eb:
                    64:27:8d:4d:43:74:da:15:5b:f6:8c:48:61:e8:46:
                    d8:51:d7:e1:76:e3:0a:a4:b4:63:0b:2c:63:5f:7c:
                    53:68:a8:80:40:da:e0:6c:35:89:86:10:0c:5f:9b:
                    85:e7:f4:c3:bd:f6:fb:83:c0:81:22:f1:59:3f:42:
                    b9:e1:ad:69:2f:38:64:9b:1a:d9:2c:80:39:11:3a:
                    cd:74:68:01:98:0b:fb:06:0f:7b:ea:b1:0e:5d:12:
                    82:89:e5:1c:18:f6:b6:69:3c:32:e0:d8:3b:99:93:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9D:F6:20:92:D3:4B:6E:DB:74:78:36:99:FF:20:26:0A:E0:5C:5A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/V532IJLTS27bdHg2mf8gJgrgXFo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5a2::/48
                  2a06:a005:5a6::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:5f:95:a4:eb:e6:99:7c:67:97:9e:0a:76:f2:86:94:98:70:
         b3:62:e2:ee:72:e4:cf:04:22:89:2d:9f:5b:5e:a6:6a:c7:8b:
         ce:b1:87:c2:93:e0:5b:49:71:ee:23:ab:71:24:a2:d7:2d:55:
         63:07:17:d1:ea:15:c6:29:33:a7:2a:8f:a1:f1:53:80:8e:78:
         d3:19:44:dc:0b:2c:43:34:ab:df:dd:60:5f:1e:09:65:97:50:
         49:84:71:ed:c3:84:36:a2:4d:e4:60:13:6f:a4:91:4e:09:9c:
         9f:31:75:9f:6e:3e:80:43:17:33:a8:ba:56:aa:93:3e:bc:9a:
         ab:8e:54:c0:7f:56:df:27:71:37:19:d3:3c:11:4f:d4:04:78:
         d3:cf:80:86:80:c5:cf:ca:cb:04:2e:cb:d9:ca:6a:50:cd:2e:
         8c:a6:7d:25:39:2f:0e:c6:89:81:d6:7b:23:aa:01:ab:33:5a:
         52:cf:0c:fa:65:f1:8c:77:a9:c5:55:17:98:89:cd:f3:c6:f2:
         da:18:57:f4:1a:f0:54:cf:82:f7:4e:46:72:66:7a:07:d0:5b:
         b0:ff:ed:c8:82:66:b3:7e:30:5d:04:31:bd:1d:b1:59:14:96:
         1b:8c:25:74:6f:f0:3a:46:f2:05:13:0a:0d:6d:32:42:21:d8:
         93:35:94:b7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYQPWHcAcd/QDecngyuBCjsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDI1MTMzMjQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzlkZjYyMDkyZDM0YjZlZGI3NDc4MzY5OWZmMjAyNjBhZTA1YzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5S3h8NYm3Bk0wcGcEVgx28SnTUq
+YJv/AnSLVVv/Qqdc1WUC0VCDOHR5zQiZTyr9u60Bi5aB6aczdhXq3inbfMghuvM
TI/F1CbjENBAiO2iCdQH8fh+rDR5KySMxaGQTh9R1vRhEGM+vzGtBxTLI+09YyQj
wvIrgdiTls8bKGZd9wG8rLxHo4hTcT5MVYV0xH/rIOtkJ41NQ3TaFVv2jEhh6EbY
UdfhduMKpLRjCyxjX3xTaKiAQNrgbDWJhhAMX5uF5/TDvfb7g8CBIvFZP0K54a1p
LzhkmxrZLIA5ETrNdGgBmAv7Bg976rEOXRKCieUcGPa2aTwy4Ng7mZOMTQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFed9iCS00tu23R4Npn/ICYK4FxaMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvVjUzMklKTFRTMjdiZEhnMm1mOGdKZ3JnWEZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgagBQWi
AwcAKgagBQWmMA0GCSqGSIb3DQEBCwUAA4IBAQABX5Wk6+aZfGeXngp28oaUmHCz
YuLucuTPBCKJLZ9bXqZqx4vOsYfCk+BbSXHuI6txJKLXLVVjBxfR6hXGKTOnKo+h
8VOAjnjTGUTcCyxDNKvf3WBfHglll1BJhHHtw4Q2ok3kYBNvpJFOCZyfMXWfbj6A
QxczqLpWqpM+vJqrjlTAf1bfJ3E3GdM8EU/UBHjTz4CGgMXPyssELsvZympQzS6M
pn0lOS8OxomB1nsjqgGrM1pSzwz6ZfGMd6nFVReYic3zxvLaGFf0GvBUz4L3TkZy
ZnoH0Fuw/+3IgmazfjBdBDG9HbFZFJYbjCV0b/A6RvIFEwoNbTJCIdiTNZS3
-----END CERTIFICATE-----