Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Xa62UITPBJHEsweRj34_dC3Jk7M.roa
File:                     Xa62UITPBJHEsweRj34_dC3Jk7M.roa (raw, json)
Hash identifier:          AH07skbBDw7KuWFuWIKQo3IFm/PjcCNe3t+S2jkv0WQ=
Subject key identifier:   5D:AE:B6:50:84:CF:04:91:C4:B3:07:91:8F:7E:3F:74:2D:C9:93:B3
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       198BCC15
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Xa62UITPBJHEsweRj34_dC3Jk7M.roa
Signing time:             Sun 08 May 2022 06:05:09 +0000
ROA not before:           Sun 08 May 2022 06:05:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213286
IP address blocks:        2a06:a005:852::/48 maxlen: 48
                          2a06:a005:17::/48 maxlen: 48
                          2a06:a005:1e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428592149 (0x198bcc15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  8 06:05:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5daeb65084cf0491c4b307918f7e3f742dc993b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:64:41:4b:fc:46:75:b3:9c:35:df:f0:d2:
                    5e:03:d6:b2:f1:c8:8d:46:b7:43:fb:88:1e:41:16:
                    36:7e:d7:3f:71:48:ad:64:2a:88:30:c1:55:af:60:
                    21:e8:72:45:97:01:ed:15:fd:19:d8:d6:50:dd:05:
                    12:b4:aa:7e:f2:00:98:6b:39:d5:dc:3f:77:3c:df:
                    e9:2d:a4:58:22:9a:13:b4:d5:f3:72:78:b2:d0:76:
                    3e:8a:4b:3b:55:a5:54:80:39:16:47:a6:5e:33:30:
                    bc:9b:0f:51:d2:24:e9:95:20:b5:de:54:e8:b4:6b:
                    8b:57:d4:18:b8:74:f3:eb:ea:17:ce:bc:f5:0a:f5:
                    24:d1:66:b1:90:06:6a:ee:61:f0:98:64:c7:1b:d4:
                    5a:1d:e6:0f:21:ba:b7:1b:96:66:30:46:6e:10:93:
                    28:33:02:18:17:42:17:60:9b:1e:0a:26:ed:da:16:
                    f3:c6:f7:6c:16:3d:c6:26:53:9e:8e:9e:83:ed:0d:
                    6c:ac:4e:68:16:c1:df:ee:18:9e:30:d2:9e:65:21:
                    f1:79:ef:e4:16:ae:3d:99:c3:55:3a:01:a5:cf:b4:
                    cc:82:bb:48:b1:19:d9:1d:98:a7:ae:89:61:61:66:
                    8e:66:55:3c:2e:86:21:25:84:79:79:6b:01:7f:3e:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AE:B6:50:84:CF:04:91:C4:B3:07:91:8F:7E:3F:74:2D:C9:93:B3
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Xa62UITPBJHEsweRj34_dC3Jk7M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:17::/48
                  2a06:a005:1e::/48
                  2a06:a005:852::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:8f:bf:e0:01:13:04:83:51:fb:c0:3b:73:7b:6e:82:9d:29:
         85:c8:01:01:b2:34:4a:17:3a:ce:a7:89:da:61:09:34:71:bc:
         83:e7:1c:9a:92:bd:82:24:80:2f:90:33:94:7e:21:d9:31:34:
         06:50:38:b7:95:50:a4:7f:8a:32:56:10:07:d6:18:c1:9a:9e:
         98:4a:6a:e9:62:b7:63:bf:b3:8b:de:60:46:f6:74:73:b5:d1:
         a2:d8:ef:af:0e:19:1c:80:9c:f3:67:92:91:60:0a:fc:4b:9a:
         22:db:78:03:2d:4c:3a:47:bf:cc:f0:18:95:4b:fe:47:13:56:
         cd:36:20:89:1c:84:30:08:8b:51:7a:d7:f3:52:49:a2:45:93:
         46:5e:13:72:8f:f5:79:2f:17:8d:cf:ba:bd:a4:cc:3f:8f:88:
         fb:65:3c:e6:dd:78:d4:e3:66:61:ed:da:19:7b:56:fc:80:ea:
         2d:e9:0b:b4:b5:62:8b:f4:71:26:76:e2:49:a6:85:16:a6:60:
         92:58:88:68:e1:45:f7:6f:cc:d7:49:e8:b1:f4:55:f7:61:d4:
         55:b9:0d:b3:3c:90:7b:e0:19:ce:c4:8e:40:39:54:23:31:7e:
         e6:1c:86:56:6d:e2:a3:26:75:cb:06:3d:7f:9d:0c:be:93:60:
         07:da:26:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----