Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YGK43WY2FqT-0IpSd9xZ1qQtObA.roa
File:                     YGK43WY2FqT-0IpSd9xZ1qQtObA.roa (raw, json)
Hash identifier:          3aNBP5wL0hYRPHPGYuwfj9csCTm15eo/2nfDNS2Gmi4=
Subject key identifier:   60:62:B8:DD:66:36:16:A4:FE:D0:8A:52:77:DC:59:D6:A4:2D:39:B0
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19E0B8CB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YGK43WY2FqT-0IpSd9xZ1qQtObA.roa
Signing time:             Mon 16 May 2022 14:04:29 +0000
ROA not before:           Mon 16 May 2022 14:04:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7487
IP address blocks:        2a06:a005:9e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434157771 (0x19e0b8cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 16 14:04:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6062b8dd663616a4fed08a5277dc59d6a42d39b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:01:4e:b7:72:01:1f:07:6b:dd:2c:ef:36:d9:
                    93:7d:fb:fc:23:6f:96:65:03:4d:1c:16:11:68:18:
                    00:9c:4c:e7:b6:86:9f:36:a9:65:ad:ed:cf:d1:7f:
                    a5:05:74:23:65:c6:9a:71:4c:7d:05:89:37:1d:a4:
                    4d:e0:aa:0b:b8:c0:95:f7:bb:55:43:e7:89:cf:4a:
                    e4:20:61:b4:cd:71:d8:fa:6f:ac:ac:64:54:39:d8:
                    8e:98:63:3b:67:36:4e:88:29:54:fa:e7:20:69:29:
                    09:2a:27:44:02:b0:14:27:a5:e8:64:e2:a6:c0:8d:
                    fa:3d:78:d7:db:98:d7:bc:b6:79:04:1e:12:21:ea:
                    01:9a:99:e4:2c:70:fa:3e:b0:39:36:41:ef:15:62:
                    ab:08:2d:65:98:92:83:20:d1:4a:1e:7c:ff:f5:1f:
                    09:9e:f9:86:77:c4:f2:b6:e9:5e:bf:6d:b8:3c:76:
                    aa:c6:78:31:6a:3b:5b:b6:65:ca:dd:05:e9:cc:b5:
                    e4:e3:d5:73:11:77:e7:71:1d:aa:3b:10:3c:40:62:
                    da:fa:a1:59:89:45:77:21:f1:3e:c9:58:aa:0d:ee:
                    77:db:97:f4:83:95:9a:0e:9e:b9:92:b9:28:83:17:
                    43:ae:d9:b9:2e:e2:9a:bf:33:50:68:ac:ea:36:2a:
                    f6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:62:B8:DD:66:36:16:A4:FE:D0:8A:52:77:DC:59:D6:A4:2D:39:B0
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YGK43WY2FqT-0IpSd9xZ1qQtObA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:9e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3e:d7:ef:80:e1:70:a2:b6:46:7b:ec:d5:e4:2b:d8:6c:5e:4a:
         31:57:c7:22:7d:b1:a6:db:8e:57:74:d4:fc:5e:51:9d:40:97:
         bb:c8:81:7f:f0:30:ac:3e:62:73:74:8e:16:d6:f5:bb:9f:33:
         12:bd:e0:9a:17:ea:4d:e4:64:9b:7f:8e:01:9f:bf:f8:e3:46:
         5c:73:1b:3b:2c:ce:0d:28:f7:96:3d:dd:bd:bc:5f:6e:54:ff:
         00:f2:1a:d3:a5:9a:e0:11:8c:3b:78:42:5d:4d:e9:b4:ef:00:
         3d:01:ab:af:9e:1e:74:81:15:0c:67:0a:97:f1:eb:91:95:47:
         56:01:38:f5:08:98:b1:0f:c4:b7:2e:4f:76:0f:71:a8:f2:78:
         bc:18:b2:1d:7c:e4:35:8f:7b:84:d8:24:18:04:3e:30:53:ba:
         02:27:f0:43:e5:ee:e2:44:85:33:69:29:14:60:b4:bb:8b:47:
         8e:69:59:cb:72:e1:f5:75:3a:9b:ec:c8:ae:19:32:aa:74:c9:
         a6:11:3f:e8:5b:51:00:0c:1f:96:32:f5:8e:c5:e8:4b:5e:b7:
         47:42:fe:f7:06:47:95:92:e8:72:6a:44:b9:5c:af:b8:2b:14:
         61:09:c6:8f:a1:8d:b8:3a:17:c2:24:ba:6e:ab:e7:4c:e9:0b:
         02:fb:c2:79
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGeC4yzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUx
NjE0MDQyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjA2MmI4ZGQ2NjM2
MTZhNGZlZDA4YTUyNzdkYzU5ZDZhNDJkMzliMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJEBTrdyAR8Ha90s7zbZk337/CNvlmUDTRwWEWgYAJxM57aG
nzapZa3tz9F/pQV0I2XGmnFMfQWJNx2kTeCqC7jAlfe7VUPnic9K5CBhtM1x2Ppv
rKxkVDnYjphjO2c2TogpVPrnIGkpCSonRAKwFCel6GTipsCN+j1419uY17y2eQQe
EiHqAZqZ5Cxw+j6wOTZB7xViqwgtZZiSgyDRSh58//UfCZ75hnfE8rbpXr9tuDx2
qsZ4MWo7W7Zlyt0F6cy15OPVcxF353EdqjsQPEBi2vqhWYlFdyHxPslYqg3ud9uX
9IOVmg6euZK5KIMXQ67ZuS7imr8zUGis6jYq9kECAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRgYrjdZjYWpP7QilJ33FnWpC05sDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L1lHSzQzV1kyRnFULTBJcFNkOXhaMXFRdE9iQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGoAUJ4DANBgkqhkiG9w0BAQsF
AAOCAQEAPtfvgOFworZGe+zV5CvYbF5KMVfHIn2xptuOV3TU/F5RnUCXu8iBf/Aw
rD5ic3SOFtb1u58zEr3gmhfqTeRkm3+OAZ+/+ONGXHMbOyzODSj3lj3dvbxfblT/
APIa06Wa4BGMO3hCXU3ptO8APQGrr54edIEVDGcKl/HrkZVHVgE49QiYsQ/Ety5P
dg9xqPJ4vBiyHXzkNY97hNgkGAQ+MFO6AifwQ+Xu4kSFM2kpFGC0u4tHjmlZy3Lh
9XU6m+zIrhkyqnTJphE/6FtRAAwfljL1jsXoS163R0L+9wZHlZLocmpEuVyvuCsU
YQnGj6GNuDoXwiS6bqvnTOkLAvvCeQ==
-----END CERTIFICATE-----