Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/V6HAWyHZWKG_KwcYSwdCMFQXSTk.roa
File:                     V6HAWyHZWKG_KwcYSwdCMFQXSTk.roa (raw, json)
Hash identifier:          UgiI6bMX+BNEhBv/XAc627HbON2Hfa6SLmT/txX7zmY=
Subject key identifier:   57:A1:C0:5B:21:D9:58:A1:BF:2B:07:18:4B:07:42:30:54:17:49:39
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01841AAFAEE69FE0D56DEFCD307511360E21
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/V6HAWyHZWKG_KwcYSwdCMFQXSTk.roa
Signing time:             Thu 27 Oct 2022 18:23:51 +0000
ROA not before:           Thu 27 Oct 2022 18:23:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212294
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a06:a005:1c40::/44 maxlen: 48
                          2a06:a005:1f60::/44 maxlen: 48
                          2a06:a005:1800::/44 maxlen: 48
                          2a06:a005:19e0::/44 maxlen: 48
                          2a06:a005:1f80::/44 maxlen: 48
                          2a06:a005:1f40::/44 maxlen: 48
                          2a06:a005:1d90::/44 maxlen: 48
                          2a06:a005:1f70::/44 maxlen: 48
                          2a06:a005:1c30::/44 maxlen: 48
                          2a06:a005:18d0::/44 maxlen: 48
                          2a06:a005:1f50::/44 maxlen: 48
                          2a05:dfc7:8100::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1a:af:ae:e6:9f:e0:d5:6d:ef:cd:30:75:11:36:0e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 27 18:23:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57a1c05b21d958a1bf2b07184b07423054174939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:40:c0:8f:72:49:ee:2a:29:4f:c8:a0:81:
                    c6:61:52:d9:26:da:65:16:d1:6d:2d:ea:8c:55:5a:
                    d3:af:71:1e:cd:18:3e:2b:f5:b7:78:c5:f0:6a:38:
                    e6:10:25:7d:a4:70:62:c5:f8:b7:25:44:06:e9:eb:
                    33:95:ca:ea:bb:c0:11:ac:79:11:0b:cc:a0:d8:ce:
                    c6:7b:83:e6:cd:e1:4d:67:b8:74:fa:03:26:cb:a9:
                    4c:3d:f2:ec:6f:5d:3b:6c:fe:a6:96:6c:97:79:c5:
                    9c:ed:84:fd:37:b4:8c:c9:01:16:eb:c8:3a:17:37:
                    12:b7:26:92:39:7a:be:02:c1:03:ea:ad:7d:22:b5:
                    80:9f:89:ac:fb:81:49:6d:3a:de:e4:0a:cc:86:eb:
                    53:86:a9:03:3e:18:04:a7:dc:ad:52:99:54:b7:fc:
                    3a:04:f9:00:b0:2c:8f:48:3b:e2:52:a7:04:a9:fa:
                    67:62:73:30:ea:5f:07:d6:00:28:dc:74:0f:32:07:
                    65:d1:82:1c:ca:2d:30:e5:38:e4:48:7c:75:41:e8:
                    a0:16:9b:69:73:56:fc:55:93:1f:91:4b:aa:f5:95:
                    53:ff:54:58:eb:6e:78:ff:08:52:aa:16:18:19:43:
                    ba:d5:0b:a4:75:5d:fe:a3:cd:45:df:a9:77:c2:41:
                    59:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A1:C0:5B:21:D9:58:A1:BF:2B:07:18:4B:07:42:30:54:17:49:39
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/V6HAWyHZWKG_KwcYSwdCMFQXSTk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8100::/40
                  2a06:a005:1800::/44
                  2a06:a005:18d0::/44
                  2a06:a005:19e0::/44
                  2a06:a005:1c30::-2a06:a005:1c4f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1d90::/44
                  2a06:a005:1f40::-2a06:a005:1f8f:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:6b:d9:03:d0:a5:2f:d7:78:c2:10:c4:c2:64:a9:19:42:0a:
         87:2c:3b:61:7b:db:ea:ee:f6:af:67:16:b4:2d:18:e1:5f:a4:
         70:f3:a5:f2:0e:80:5b:e4:eb:59:03:11:28:a6:f2:de:ed:d6:
         98:33:56:cb:21:d3:8e:28:1f:5e:b2:40:29:e1:5b:fc:cc:5c:
         81:2b:7e:17:b1:3f:55:de:5f:fc:c2:72:01:3b:fe:20:95:ca:
         69:fa:49:86:45:05:a9:5c:4f:4e:2c:e4:40:89:e1:c4:c2:96:
         7f:ad:a3:3a:14:e6:f9:2e:46:ab:61:0f:15:24:c9:6b:23:f8:
         66:76:c5:61:b4:b1:4b:58:04:5c:d6:1b:19:82:5b:97:ad:50:
         36:7b:a5:4b:38:04:23:f7:6f:de:39:1f:b7:1c:bd:61:34:78:
         ba:38:2a:31:01:52:50:46:35:61:c9:5c:c2:a0:d1:7f:a7:06:
         d5:3c:12:3e:1e:72:0b:52:90:82:4a:d8:0e:c3:6b:ad:d7:18:
         2f:09:3b:f5:9b:b2:ee:39:71:6d:80:ae:42:2f:f5:2f:c3:4c:
         d5:54:53:d0:3b:ca:28:c9:7f:3f:e7:b5:13:99:29:4a:7e:3a:
         00:87:29:e3:b2:62:b4:1c:23:64:57:f6:ff:15:ce:2e:66:37:
         20:ae:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----