Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yb-sctd5sBeE1SZhYnKjI1oFwVw.roa
File:                     Yb-sctd5sBeE1SZhYnKjI1oFwVw.roa (raw, json)
Hash identifier:          eflusCUBDT08a2cTgtpTdZLTKZxCQ/H5zqCW8hGNWs4=
Subject key identifier:   61:BF:AC:72:D7:79:B0:17:84:D5:26:61:62:72:A3:23:5A:05:C1:5C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B55DD62
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yb-sctd5sBeE1SZhYnKjI1oFwVw.roa
Signing time:             Sat 25 Jun 2022 08:42:39 +0000
ROA not before:           Sat 25 Jun 2022 08:42:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50546
IP address blocks:        2a06:a005:e30::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458612066 (0x1b55dd62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 25 08:42:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=61bfac72d779b01784d526616272a3235a05c15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:de:60:d7:39:9a:49:30:b4:48:dc:76:8d:
                    40:a6:2d:7a:8f:0d:fe:7a:69:17:1b:a0:a5:36:72:
                    5c:04:02:a5:c2:b6:ce:b9:4e:f3:de:a8:73:5b:23:
                    19:de:ae:49:99:f8:12:32:e0:c1:13:db:a0:a4:d0:
                    9f:e3:56:1e:06:62:de:43:fa:3b:3d:58:7d:87:83:
                    43:69:43:1e:37:ac:3e:3e:7e:21:72:15:d2:81:9c:
                    58:20:23:49:8b:50:ea:a9:92:a5:24:06:53:93:08:
                    08:8c:25:1f:2a:2d:f3:c2:40:77:68:80:21:e5:31:
                    9e:ca:52:03:1f:32:b0:28:a3:05:62:af:80:51:0a:
                    91:b5:a9:0a:d6:c7:f7:bc:12:d4:a4:32:b9:2a:dd:
                    22:7d:16:dc:53:7e:c3:6b:28:f1:da:87:18:01:a6:
                    65:67:4e:45:e6:7b:a2:95:8e:b9:84:d6:d0:98:bd:
                    a8:1f:de:90:79:b6:54:5a:42:d0:32:35:67:23:98:
                    2a:54:e0:93:91:5d:1a:aa:4e:c4:82:34:54:87:71:
                    75:d7:55:21:49:fb:06:a8:e8:7e:5c:f3:f6:6a:b8:
                    e5:17:43:94:a3:05:a1:96:80:35:df:89:1b:2d:eb:
                    d4:9d:2f:c2:6c:12:43:ec:99:94:1b:c3:03:a2:cc:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BF:AC:72:D7:79:B0:17:84:D5:26:61:62:72:A3:23:5A:05:C1:5C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yb-sctd5sBeE1SZhYnKjI1oFwVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:e30::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:6b:be:e3:15:47:a6:96:12:3e:4e:11:ea:5a:a2:9b:0b:2c:
         9f:93:ee:65:60:8c:4a:01:0b:df:a7:16:aa:ca:84:75:3b:16:
         05:86:b8:de:9a:26:9c:58:db:3d:38:68:06:a2:e8:2b:23:aa:
         b2:51:b3:76:17:cb:1b:0a:01:aa:1d:e9:ab:ad:86:15:a2:56:
         53:9c:33:0d:5a:39:aa:b8:ff:5c:72:29:e0:00:07:c7:5d:fe:
         b3:b8:de:cf:de:56:36:30:3f:99:70:5b:c3:92:ea:10:66:4e:
         13:9a:f1:4e:a6:e3:80:57:3d:68:cb:cc:1a:42:e8:73:dc:0d:
         08:a7:dc:5d:41:b1:32:af:ed:85:60:49:6f:c1:69:dc:83:1c:
         65:ce:92:f0:27:61:f5:d3:f2:e9:e8:58:8e:9c:8c:16:c7:4f:
         9c:38:85:dc:63:6e:b5:49:aa:a0:80:1b:79:12:38:4c:b4:a0:
         ba:bc:0a:1b:91:f1:0b:98:8b:c3:a7:7a:ef:ef:19:7a:c3:23:
         69:88:85:20:e0:ff:98:f1:b5:b2:6c:ed:89:6f:f6:7d:8a:08:
         cb:73:4b:72:67:f0:c6:a1:00:d5:47:93:cd:d8:1e:eb:b2:ba:
         5b:5c:54:fc:6f:95:f7:31:c6:21:81:37:c2:c1:29:6b:68:21:
         1a:7b:e5:c0
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEG1XdYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYy
NTA4NDIzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjFiZmFjNzJkNzc5
YjAxNzg0ZDUyNjYxNjI3MmEzMjM1YTA1YzE1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALCw3mDXOZpJMLRI3HaNQKYteo8N/nppFxugpTZyXAQCpcK2
zrlO896oc1sjGd6uSZn4EjLgwRPboKTQn+NWHgZi3kP6Oz1YfYeDQ2lDHjesPj5+
IXIV0oGcWCAjSYtQ6qmSpSQGU5MICIwlHyot88JAd2iAIeUxnspSAx8ysCijBWKv
gFEKkbWpCtbH97wS1KQyuSrdIn0W3FN+w2so8dqHGAGmZWdOReZ7opWOuYTW0Ji9
qB/ekHm2VFpC0DI1ZyOYKlTgk5FdGqpOxII0VIdxdddVIUn7Bqjoflzz9mq45RdD
lKMFoZaANd+JGy3r1J0vwmwSQ+yZlBvDA6LMbkUCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRhv6xy13mwF4TVJmFicqMjWgXBXDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L1liLXNjdGQ1c0JlRTFTWmhZbktqSTFvRndWdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGoAUOMDANBgkqhkiG9w0BAQsF
AAOCAQEAT2u+4xVHppYSPk4R6lqimwssn5PuZWCMSgEL36cWqsqEdTsWBYa43pom
nFjbPThoBqLoKyOqslGzdhfLGwoBqh3pq62GFaJWU5wzDVo5qrj/XHIp4AAHx13+
s7jez95WNjA/mXBbw5LqEGZOE5rxTqbjgFc9aMvMGkLoc9wNCKfcXUGxMq/thWBJ
b8Fp3IMcZc6S8Cdh9dPy6ehYjpyMFsdPnDiF3GNutUmqoIAbeRI4TLSgurwKG5Hx
C5iLw6d67+8ZesMjaYiFIOD/mPG1smztiW/2fYoIy3NLcmfwxqEA1UeTzdge67K6
W1xU/G+V9zHGIYE3wsEpa2ghGnvlwA==
-----END CERTIFICATE-----