Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YcZLK3NSvJJNn0XgOv-6wRaRE6w.roa
File:                     YcZLK3NSvJJNn0XgOv-6wRaRE6w.roa (raw, json)
Hash identifier:          BZrYKe7VXKMHrk8xlKKyg2fUxFWgmPMr04yTidGaZ8U=
Subject key identifier:   61:C6:4B:2B:73:52:BC:92:4D:9F:45:E0:3A:FF:BA:C1:16:91:13:AC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184CB35F9D98C9CEA39B9F31DD04046B6C9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YcZLK3NSvJJNn0XgOv-6wRaRE6w.roa
Signing time:             Thu 01 Dec 2022 01:03:43 +0000
ROA not before:           Thu 01 Dec 2022 01:03:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211390
IP address blocks:        2a06:a005:2370::/44 maxlen: 48
                          2a06:a005:2480::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:cb:35:f9:d9:8c:9c:ea:39:b9:f3:1d:d0:40:46:b6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  1 01:03:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=61c64b2b7352bc924d9f45e03affbac1169113ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:04:c9:d3:6b:73:0d:a8:39:d8:06:e0:f0:82:
                    40:c8:12:b3:be:8e:83:66:e3:b2:04:ca:3c:64:5a:
                    eb:4d:c6:14:1e:1e:c8:6c:59:9d:e8:bc:ec:83:81:
                    32:6d:ec:4b:86:51:3d:ef:1d:af:e4:19:7e:6a:20:
                    bb:c1:ce:52:1c:1a:30:4e:5a:28:73:d3:fe:dd:ea:
                    9a:10:56:db:2b:db:1f:b9:be:38:90:bb:9d:b2:0f:
                    0a:5b:c5:9b:57:1d:b9:1a:00:b4:6c:b0:c9:5d:38:
                    2e:07:ee:64:b8:57:28:1c:ff:aa:4f:4c:26:0b:c8:
                    91:54:08:87:2f:95:98:87:0b:3f:1a:67:f7:a3:da:
                    06:80:c6:f1:a4:41:eb:1d:23:83:0b:dc:b8:0c:5c:
                    6d:6b:65:d9:59:30:f4:b6:6a:94:90:dc:b8:42:c6:
                    5d:e1:d0:6d:4a:bb:a8:35:d7:b4:07:f8:e8:f1:88:
                    d8:7a:7a:e9:fc:f1:97:b4:c6:de:ea:ec:78:e7:3c:
                    4d:55:e9:15:a4:84:29:03:58:9f:36:ae:f7:01:d2:
                    93:21:bb:5d:9e:ee:af:44:b5:17:2e:e5:e2:e2:13:
                    06:a4:cb:42:6e:ea:64:ad:cc:79:be:1e:5d:a5:13:
                    04:f1:ca:8d:ed:f2:c7:83:1b:15:e5:0c:a5:62:a3:
                    65:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C6:4B:2B:73:52:BC:92:4D:9F:45:E0:3A:FF:BA:C1:16:91:13:AC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YcZLK3NSvJJNn0XgOv-6wRaRE6w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2370::/44
                  2a06:a005:2480::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:fe:18:d3:00:ab:aa:62:5c:1d:94:b5:8b:03:9c:c3:f5:ca:
         ed:69:78:02:d0:00:ec:ec:18:17:39:55:e0:c8:e2:a9:3e:23:
         1d:41:53:7f:b5:31:92:a4:1d:00:24:f0:53:d4:c1:d7:80:fa:
         86:27:b6:03:39:c6:2c:29:44:98:23:cb:91:dd:fa:cb:21:2a:
         1d:ea:f6:1a:2e:7a:fe:9e:b7:85:eb:b5:a8:78:dc:77:7d:f1:
         cd:93:1f:16:ca:86:ce:a6:ed:14:50:04:d5:7d:15:1d:bc:a5:
         fb:1b:63:4b:b4:3b:a4:e4:f9:73:9d:36:f9:f2:c9:15:8d:34:
         94:a7:83:5c:28:ac:c1:78:de:3a:d3:0f:6d:89:5b:27:29:f1:
         3e:13:c9:99:bf:e5:07:cc:fb:9b:5a:48:27:44:c6:12:0a:aa:
         77:56:67:47:af:21:0e:b3:38:85:d1:08:9c:db:c4:ab:90:e8:
         57:c9:f5:4a:53:70:4f:15:5b:24:53:c6:f6:a0:bd:bc:4b:03:
         57:f1:96:a7:c0:e8:b7:1b:aa:40:ad:b6:6b:34:79:05:ad:1b:
         fc:a7:bd:0d:de:42:88:c7:2e:90:11:bf:e7:90:8d:a3:f0:f6:
         5a:3f:84:c1:dc:7d:94:f7:ce:ee:48:e7:57:93:c9:25:16:8b:
         e3:d8:85:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----