Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Wi7OmNe896TI6z-G2IerOmsVu60.roa
File:                     Wi7OmNe896TI6z-G2IerOmsVu60.roa (raw, json)
Hash identifier:          c9dcOQ2I7ocEvSaaKsNmVS7AI/k2E13Nmid8FeUE24o=
Subject key identifier:   5A:2E:CE:98:D7:BC:F7:A4:C8:EB:3F:86:D8:87:AB:3A:6B:15:BB:AD
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01826B9418C486D0D6E928637D6FE465E027
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Wi7OmNe896TI6z-G2IerOmsVu60.roa
Signing time:             Fri 05 Aug 2022 01:17:23 +0000
ROA not before:           Fri 05 Aug 2022 01:17:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203453
IP address blocks:        2a06:a005:5a2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:6b:94:18:c4:86:d0:d6:e9:28:63:7d:6f:e4:65:e0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  5 01:17:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5a2ece98d7bcf7a4c8eb3f86d887ab3a6b15bbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:64:77:41:73:d1:65:ed:65:24:16:1f:88:
                    73:ce:84:d5:65:65:e7:88:3a:fb:de:72:ce:92:d4:
                    48:89:d6:00:f4:27:fc:b7:c0:f6:2f:e0:4d:b2:5c:
                    99:db:a4:a9:e6:48:79:72:88:e3:b9:00:0c:b8:1b:
                    0b:b5:91:ef:7d:cb:d5:6c:04:40:04:67:15:64:00:
                    07:31:d7:98:20:85:aa:55:41:86:aa:9c:3b:84:10:
                    8a:99:00:eb:53:75:dd:b0:b2:ab:8f:98:06:4e:38:
                    47:8c:16:7c:f9:1a:52:e0:7b:88:19:5f:72:73:02:
                    f6:ee:d7:2f:08:7c:ad:1f:34:3f:28:06:c0:7a:6c:
                    36:b0:40:28:4a:de:9d:0a:7f:74:de:96:19:0e:6d:
                    d2:8f:1b:13:d1:75:52:ae:05:29:e2:f3:7f:59:b0:
                    cf:e4:09:da:5e:c3:e7:cc:5d:ab:37:fc:6c:94:da:
                    5d:b7:fe:3d:cf:1e:d4:6b:09:c1:c3:b7:3c:c8:0a:
                    3f:39:7d:bf:83:82:67:82:45:8e:d1:d3:f9:57:93:
                    57:48:03:e4:4a:21:5c:f3:41:f6:a6:9f:76:cd:51:
                    ee:1b:18:85:a3:84:be:2d:65:af:6d:0d:1f:28:d2:
                    f8:31:58:48:20:30:61:0c:06:77:8c:a5:02:72:50:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2E:CE:98:D7:BC:F7:A4:C8:EB:3F:86:D8:87:AB:3A:6B:15:BB:AD
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Wi7OmNe896TI6z-G2IerOmsVu60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5a2::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:88:18:55:8d:f8:39:f5:a6:13:9f:8e:c4:cd:f9:3a:54:8c:
         0b:5c:34:02:19:03:3b:48:43:1e:5e:6a:e5:23:2d:40:f6:30:
         98:c2:04:26:4e:2a:65:bc:8f:9e:24:47:1e:c8:2b:ea:a7:c1:
         d5:25:ee:8c:57:c5:3a:c9:d8:7c:83:53:0b:99:5a:e0:bc:b8:
         09:3e:23:57:7b:15:98:3a:50:8f:06:65:08:eb:ec:69:38:bd:
         5c:bd:03:b4:12:7f:ef:81:a5:bf:80:c4:0f:26:40:96:51:68:
         00:77:b3:c1:8c:32:b5:3c:4d:2e:b1:fd:92:f2:f3:b1:f2:c7:
         c9:22:b8:2d:20:bb:2d:ae:db:a6:85:a6:15:10:b8:dd:bd:91:
         21:7e:9d:4e:c5:6a:17:25:08:50:5a:27:86:79:32:a6:8b:71:
         c7:13:85:40:57:13:69:35:6c:ea:69:fc:b6:72:d0:40:cf:cd:
         42:73:d0:30:70:c5:b1:5d:a1:2f:60:ef:65:60:42:2c:7c:0a:
         b9:e7:4d:10:63:50:2b:9f:67:3f:8f:27:2a:11:b0:ec:71:b9:
         97:6d:35:57:48:c3:38:2a:a2:f6:7f:d7:f6:76:b7:8b:6a:32:
         9e:08:b9:17:64:25:ff:21:22:e4:70:27:ba:b1:14:f6:47:8c:
         f6:06:3d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----