Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VBnaKH679cGeyQu1DLO72GK3vTE.roa
File:                     VBnaKH679cGeyQu1DLO72GK3vTE.roa (raw, json)
Hash identifier:          TYdPM6t8Hh6gfhSrix0OB8yLKEpCJEUklWPEHVWcVwU=
Subject key identifier:   54:19:DA:28:7E:BB:F5:C1:9E:C9:0B:B5:0C:B3:BB:D8:62:B7:BD:31
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018398F88D9EEA80D846DE6779196C3E1002
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VBnaKH679cGeyQu1DLO72GK3vTE.roa
Signing time:             Sun 02 Oct 2022 13:52:49 +0000
ROA not before:           Sun 02 Oct 2022 13:52:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     150325
IP address blocks:        2a06:a005:16c0::/44 maxlen: 48
                          2a06:a005:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:98:f8:8d:9e:ea:80:d8:46:de:67:79:19:6c:3e:10:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct  2 13:52:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5419da287ebbf5c19ec90bb50cb3bbd862b7bd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:69:6b:f0:a8:8e:75:20:ae:0c:b8:f5:f7:b8:
                    44:a5:23:03:2c:0c:5b:60:f6:7e:9d:35:e5:f3:4a:
                    48:00:49:7e:a5:90:21:30:fe:03:fd:5d:b2:81:9d:
                    e3:64:1d:30:83:46:7d:34:62:14:19:45:49:c8:57:
                    66:19:37:9a:3b:12:4b:9a:34:24:67:ad:c5:b9:8e:
                    b3:ff:2f:ec:40:bf:79:61:37:f8:8e:91:ca:60:16:
                    83:9d:37:79:bf:b9:6c:e0:db:df:e9:9e:91:53:ce:
                    2f:9b:9e:21:62:9d:54:fb:fe:1b:d7:6c:a3:05:91:
                    c0:17:d5:fc:1a:2c:8d:8e:8f:05:ce:0b:41:b6:b1:
                    bd:bc:11:fd:f8:26:34:85:8f:a0:70:c1:78:6b:b4:
                    9b:5f:75:a7:fb:ca:68:c6:3e:07:94:8c:86:f1:cb:
                    7d:e7:a8:91:a6:34:a5:5f:37:ea:d7:61:eb:92:39:
                    0d:21:71:7a:8e:54:b7:14:44:b8:a3:92:49:04:2e:
                    c4:28:84:6a:0e:fa:27:d0:b5:84:ed:35:30:24:d7:
                    5a:c4:80:42:73:a2:b3:ed:48:2a:f9:15:96:17:bb:
                    ba:ce:16:09:a6:25:81:0a:cb:ba:89:a2:dc:a0:d4:
                    f9:46:b1:d8:99:18:f0:d4:8a:a2:75:59:6c:ad:55:
                    ef:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:19:DA:28:7E:BB:F5:C1:9E:C9:0B:B5:0C:B3:BB:D8:62:B7:BD:31
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VBnaKH679cGeyQu1DLO72GK3vTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:3::/48
                  2a06:a005:16c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         93:b5:79:f0:ff:d3:0b:02:61:47:23:32:0c:4e:01:80:94:18:
         54:80:4d:55:31:be:26:ba:b8:a8:0a:14:3c:bc:c9:b0:f8:32:
         57:bd:8a:ab:98:29:b3:f7:ae:55:ff:b6:6e:f8:33:64:7d:77:
         8c:bd:eb:a6:79:a5:87:d0:0d:d8:cb:61:1f:fe:c7:99:8d:fa:
         0a:c6:c9:23:b8:fa:8d:8b:f8:fb:7a:f7:b0:8b:be:ca:a2:ea:
         6b:fb:35:44:b1:d8:9e:31:12:8d:4a:67:04:5c:1e:65:1a:ff:
         de:cb:36:56:99:93:ef:3e:12:79:79:4f:99:79:06:62:3c:b9:
         e2:53:f4:9a:50:30:46:2b:9d:8f:15:e6:3e:68:5a:c7:88:01:
         86:79:2c:be:f2:2d:3e:c4:52:17:fe:c6:35:0b:d8:3a:37:aa:
         19:40:0b:d6:7f:e2:9f:75:ba:1d:b4:9a:dc:29:1b:44:e3:8f:
         5f:b2:21:a4:cc:4d:3b:7c:15:79:e6:3d:e4:98:a4:c4:5d:b8:
         a8:80:2c:42:91:0b:da:f5:66:26:b9:63:02:76:e0:e9:e0:03:
         ef:b1:85:34:e7:fa:d5:59:25:14:15:4a:9e:a2:16:80:f4:06:
         df:6a:ed:95:be:15:09:c7:c9:a7:a2:b4:ed:cb:86:1d:ea:95:
         eb:40:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----