Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VwSC5ELQNRKVreiw8iRvkb10XRs.roa
File:                     VwSC5ELQNRKVreiw8iRvkb10XRs.roa (raw, json)
Hash identifier:          NgEAeY01OPl4mDMsNrG3A5cMMsyDsWd/L4vo8Q1b/gY=
Subject key identifier:   57:04:82:E4:42:D0:35:12:95:AD:E8:B0:F2:24:6F:91:BD:74:5D:1B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182D1DDE59AF96885560660FE0127D07AE7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VwSC5ELQNRKVreiw8iRvkb10XRs.roa
Signing time:             Wed 24 Aug 2022 21:59:16 +0000
ROA not before:           Wed 24 Aug 2022 21:59:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212294
IP address blocks:        2a06:a005:1800::/44 maxlen: 48
                          2a06:a005:19e0::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d1:dd:e5:9a:f9:68:85:56:06:60:fe:01:27:d0:7a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 24 21:59:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=570482e442d0351295ade8b0f2246f91bd745d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:31:e8:08:e4:95:85:34:25:0a:e8:33:bf:
                    95:7a:31:af:27:0e:13:da:df:ab:4f:9f:f4:70:55:
                    0f:0e:9f:35:54:4a:d9:a0:79:92:20:8e:c1:a0:9b:
                    60:3c:9f:e4:76:4d:98:66:cb:d3:33:61:63:70:98:
                    f4:3b:60:59:a5:d3:73:4b:14:e0:99:7a:f2:a9:d6:
                    3f:6f:b5:d3:80:06:5d:ea:81:b7:be:df:63:8c:67:
                    d8:a2:61:ed:b0:ec:e1:6c:dd:ad:b6:fe:7d:5b:49:
                    cf:67:cc:33:2d:b6:7d:d6:fb:ba:cf:72:77:77:d0:
                    68:cf:4c:43:8e:6e:67:61:d6:e9:53:b3:70:4e:7c:
                    1c:24:c5:17:48:7c:18:b3:56:73:21:29:2c:a0:b6:
                    cc:22:af:8f:51:d8:09:82:b0:13:08:fc:60:3c:9c:
                    08:ae:48:87:91:fd:8d:13:b5:9c:6d:ee:71:3d:f5:
                    ee:e7:65:ed:19:5f:1f:9d:02:14:07:7e:cb:89:24:
                    d8:d3:9c:77:b8:1e:52:8f:26:de:f7:3d:78:b8:dd:
                    a9:27:d8:fd:88:a3:a1:eb:d7:ea:5e:9a:e6:2b:13:
                    c1:e1:49:54:19:72:83:43:10:de:33:38:98:97:87:
                    d4:3c:c8:d0:a3:bb:27:05:0f:5e:b4:56:ac:74:a2:
                    dd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:04:82:E4:42:D0:35:12:95:AD:E8:B0:F2:24:6F:91:BD:74:5D:1B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VwSC5ELQNRKVreiw8iRvkb10XRs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1800::/44
                  2a06:a005:19e0::/44
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:c4:14:08:01:ed:03:3f:b0:e7:35:2b:e4:89:c8:24:fb:88:
         fa:07:f9:dd:48:49:43:2b:22:27:e4:ee:f9:36:c9:44:88:7e:
         b9:42:59:ea:ef:35:b0:c0:21:0e:f2:df:b4:2e:7e:5d:72:05:
         f3:60:8b:5a:a5:b6:2b:76:1a:3f:42:42:a3:d7:67:89:3f:ca:
         6a:f0:32:b4:d5:b1:03:50:4c:47:16:ea:29:46:e5:4a:4c:41:
         1f:53:82:aa:9d:eb:7a:5e:32:a2:72:f9:fe:36:00:1e:3a:40:
         ea:64:de:52:74:dc:81:fe:0f:4b:9a:5c:21:dc:8c:16:6e:17:
         12:d1:4d:73:23:41:78:38:eb:bd:93:ed:cc:d1:ba:03:5c:67:
         20:bf:52:21:4e:85:ed:f4:9c:f6:d0:3f:ba:30:a6:13:8a:51:
         79:30:bf:5d:29:93:c5:e1:e3:56:ce:65:f0:be:a1:7c:2d:cc:
         34:85:6b:c4:25:43:5c:4c:3a:54:ee:2c:f9:73:27:46:d4:ae:
         ed:14:ca:17:78:62:ed:3c:33:ff:8a:9a:7a:99:25:5a:f2:7e:
         b7:73:15:ca:3c:99:d5:00:1f:1a:f1:9c:6f:d1:13:91:77:19:
         9d:3e:75:be:ab:e7:96:d8:b8:5c:d8:91:de:92:8d:25:a6:c8:
         70:4f:a7:0b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYLR3eWa+WiFVgZg/gEn0HrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODI0MjE1OTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzA0ODJlNDQyZDAzNTEyOTVhZGU4YjBmMjI0NmY5MWJkNzQ1ZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSwx6AjklYU0JQroM7+VejGvJw4T
2t+rT5/0cFUPDp81VErZoHmSII7BoJtgPJ/kdk2YZsvTM2FjcJj0O2BZpdNzSxTg
mXryqdY/b7XTgAZd6oG3vt9jjGfYomHtsOzhbN2ttv59W0nPZ8wzLbZ91vu6z3J3
d9Boz0xDjm5nYdbpU7NwTnwcJMUXSHwYs1ZzISksoLbMIq+PUdgJgrATCPxgPJwI
rkiHkf2NE7Wcbe5xPfXu52XtGV8fnQIUB37LiSTY05x3uB5Sjybe9z14uN2pJ9j9
iKOh69fqXprmKxPB4UlUGXKDQxDeMziYl4fUPMjQo7snBQ9etFasdKLdRQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFcEguRC0DUSla3osPIkb5G9dF0bMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvVndTQzVFTFFOUktWcmVpdzhpUnZrYjEwWFJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKgagBRgA
AwcEKgagBRngAwcAKgdUwrALMA0GCSqGSIb3DQEBCwUAA4IBAQBcxBQIAe0DP7Dn
NSvkicgk+4j6B/ndSElDKyIn5O75NslEiH65Qlnq7zWwwCEO8t+0Ln5dcgXzYIta
pbYrdho/QkKj12eJP8pq8DK01bEDUExHFuopRuVKTEEfU4Kqnet6XjKicvn+NgAe
OkDqZN5SdNyB/g9Lmlwh3IwWbhcS0U1zI0F4OOu9k+3M0boDXGcgv1IhToXt9Jz2
0D+6MKYTilF5ML9dKZPF4eNWzmXwvqF8Lcw0hWvEJUNcTDpU7iz5cydG1K7tFMoX
eGLtPDP/ipp6mSVa8n63cxXKPJnVAB8a8Zxv0RORdxmdPnW+q+eW2Lhc2JHeko0l
pshwT6cL
-----END CERTIFICATE-----