Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yig2VjiTb79PsmnmRQitbbU4CPM.roa
File:                     Yig2VjiTb79PsmnmRQitbbU4CPM.roa (raw, json)
Hash identifier:          Fjbr76yDElGjLo1zdtI8npkuWDI72+JM+X+Y5/0567g=
Subject key identifier:   62:28:36:56:38:93:6F:BF:4F:B2:69:E6:45:08:AD:6D:B5:38:08:F3
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A8C5BEB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yig2VjiTb79PsmnmRQitbbU4CPM.roa
Signing time:             Fri 03 Jun 2022 11:18:38 +0000
ROA not before:           Fri 03 Jun 2022 11:18:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50833
IP address blocks:        2a06:a005:a09::/48 maxlen: 48
                          2a06:a005:2d2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445406187 (0x1a8c5beb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun  3 11:18:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6228365638936fbf4fb269e64508ad6db53808f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:39:65:d6:f4:a7:fe:f2:41:b7:5c:3d:26:
                    d8:71:80:1b:c0:7c:b1:03:7e:20:c8:8f:4d:6e:05:
                    9c:4b:81:30:7e:79:bc:2c:77:9f:10:6e:1c:11:46:
                    8a:d8:1a:7a:d4:79:4f:41:cf:0d:be:0a:1b:8d:33:
                    ab:68:ef:52:a8:ad:c3:8a:9c:a4:54:2e:00:cc:11:
                    c4:f3:1b:94:5b:f2:d8:c7:71:dc:6d:12:2b:26:93:
                    14:f9:cf:4d:a4:94:15:d1:54:ac:08:8e:ba:12:2b:
                    e4:79:79:c8:fd:d8:f4:e0:1d:2a:da:79:ac:96:97:
                    2f:fa:2f:12:86:00:61:cb:3f:cd:c9:d2:e4:af:0e:
                    9b:f6:e7:c6:28:41:56:81:c9:90:43:cf:22:d2:cb:
                    94:e2:63:04:2f:2c:d3:89:92:00:ca:f7:d7:4a:cc:
                    a6:e4:45:54:60:1a:e4:9a:b7:34:08:2f:40:1f:a9:
                    84:ec:b3:e8:20:48:75:cf:17:02:82:12:92:f5:f0:
                    9f:37:7e:f7:73:9b:33:ff:c0:5d:45:34:b7:3b:73:
                    61:09:49:d2:85:9f:1a:c7:a3:e6:2a:36:6d:c5:a7:
                    03:4a:d9:91:29:68:02:23:7f:db:51:62:2e:83:ff:
                    34:23:8b:06:30:a2:50:47:2d:3b:fe:bd:09:fc:e6:
                    eb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:28:36:56:38:93:6F:BF:4F:B2:69:E6:45:08:AD:6D:B5:38:08:F3
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yig2VjiTb79PsmnmRQitbbU4CPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2d2::/48
                  2a06:a005:a09::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:e1:3e:64:04:27:ba:a8:a9:83:49:0f:7b:ae:5d:36:ce:a6:
         6f:08:e6:a0:da:62:29:e9:d2:77:6e:72:9f:08:c9:69:28:d4:
         35:b6:42:98:95:eb:0e:3c:19:0a:df:c6:a8:9e:85:5a:46:ce:
         0b:29:13:b8:6e:93:f1:87:a3:28:77:56:cb:f1:1c:80:9e:41:
         8f:32:d5:c5:db:2a:be:3c:6b:dd:09:3f:f8:52:8b:92:bc:e9:
         23:00:26:59:51:83:9a:85:37:fe:f8:05:21:55:df:f5:55:3d:
         38:5b:00:ac:4e:bc:74:37:77:44:b6:33:43:8a:23:13:d8:4b:
         1b:cd:71:17:4d:2c:39:86:b9:bc:2d:32:91:ec:31:2a:5e:37:
         d8:e3:ae:85:ad:e3:ba:20:7f:bb:81:13:0c:79:dd:92:82:21:
         5b:ec:a9:7a:ef:db:d1:13:0c:7a:40:3e:28:56:90:19:58:5c:
         01:76:36:0c:d0:64:29:26:84:58:24:80:1b:cf:08:1a:22:5c:
         aa:59:b5:0c:96:79:f7:a7:fe:22:13:b2:db:01:e2:dd:d9:fd:
         fb:a2:da:b0:65:b1:a3:75:ef:7c:f3:74:d0:46:9b:e1:89:0f:
         8b:e2:58:22:a0:9e:59:f7:98:fc:ce:73:07:93:98:cb:09:54:
         c0:2a:af:3a
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEGoxb6zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYw
MzExMTgzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjIyODM2NTYzODkz
NmZiZjRmYjI2OWU2NDUwOGFkNmRiNTM4MDhmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK/gOWXW9Kf+8kG3XD0m2HGAG8B8sQN+IMiPTW4FnEuBMH55
vCx3nxBuHBFGitgaetR5T0HPDb4KG40zq2jvUqitw4qcpFQuAMwRxPMblFvy2Mdx
3G0SKyaTFPnPTaSUFdFUrAiOuhIr5Hl5yP3Y9OAdKtp5rJaXL/ovEoYAYcs/zcnS
5K8Om/bnxihBVoHJkEPPItLLlOJjBC8s04mSAMr310rMpuRFVGAa5Jq3NAgvQB+p
hOyz6CBIdc8XAoISkvXwnzd+93ObM//AXUU0tztzYQlJ0oWfGsej5io2bcWnA0rZ
kSloAiN/21FiLoP/NCOLBjCiUEctO/69Cfzm66cCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBRiKDZWOJNvv0+yaeZFCK1ttTgI8zAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L1lpZzJWamlUYjc5UHNtbm1SUWl0YmJVNENQTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoGoAUC0gMHACoGoAUKCTANBgkq
hkiG9w0BAQsFAAOCAQEAXOE+ZAQnuqipg0kPe65dNs6mbwjmoNpiKenSd25ynwjJ
aSjUNbZCmJXrDjwZCt/GqJ6FWkbOCykTuG6T8YejKHdWy/EcgJ5BjzLVxdsqvjxr
3Qk/+FKLkrzpIwAmWVGDmoU3/vgFIVXf9VU9OFsArE68dDd3RLYzQ4ojE9hLG81x
F00sOYa5vC0ykewxKl432OOuha3juiB/u4ETDHndkoIhW+ypeu/b0RMMekA+KFaQ
GVhcAXY2DNBkKSaEWCSAG88IGiJcqlm1DJZ596f+IhOy2wHi3dn9+6LasGWxo3Xv
fPN00Eab4YkPi+JYIqCeWfeY/M5zB5OYywlUwCqvOg==
-----END CERTIFICATE-----