Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YyvoLT1jXBgWa-4pUEGP4ICjDuU.roa
File:                     YyvoLT1jXBgWa-4pUEGP4ICjDuU.roa (raw, json)
Hash identifier:          IVEkarCPtiaA1vw00syxsE7DnqJDfL6KafueYN6KmAQ=
Subject key identifier:   63:2B:E8:2D:3D:63:5C:18:16:6B:EE:29:50:41:8F:E0:80:A3:0E:E5
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183D48DF7D0C2CB1BC33A95ADF9C9411EA0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YyvoLT1jXBgWa-4pUEGP4ICjDuU.roa
Signing time:             Fri 14 Oct 2022 03:33:37 +0000
ROA not before:           Fri 14 Oct 2022 03:33:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     267776
IP address blocks:        2a06:a005:bad::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d4:8d:f7:d0:c2:cb:1b:c3:3a:95:ad:f9:c9:41:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 14 03:33:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=632be82d3d635c18166bee2950418fe080a30ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6f:e6:07:03:2b:9e:ae:39:f0:4c:7f:71:cf:
                    28:33:99:43:2b:13:74:82:60:aa:f1:7e:ff:f8:a5:
                    84:a8:0c:1d:f4:44:df:eb:34:82:15:40:e1:6e:fc:
                    86:d3:31:8c:77:5b:ae:5a:ce:d5:d7:5f:39:73:86:
                    f5:66:b2:f2:65:e3:fd:07:62:5e:46:73:e7:30:ff:
                    6d:57:94:73:60:a2:99:3a:a8:e0:23:b8:ae:7d:de:
                    f8:61:f9:4a:4f:e3:e1:c8:e7:c9:aa:db:06:6e:ae:
                    c6:ad:d9:e3:b6:23:bb:fd:64:29:fb:bb:2a:c9:7e:
                    e7:27:5c:49:56:9d:99:db:24:20:d3:48:87:6a:8a:
                    8d:72:f4:41:19:2d:fa:3e:b6:1f:25:d4:1f:71:11:
                    16:07:bf:6d:58:dc:46:d8:15:d8:51:1c:e0:5a:ee:
                    cd:06:b0:84:db:86:c1:7b:e8:c4:6a:2e:3b:d6:1b:
                    14:32:86:5f:3a:81:87:57:d5:3c:37:66:10:70:dd:
                    89:76:2a:28:34:0e:ce:af:7a:4c:02:25:28:b8:cc:
                    39:8c:fd:e8:61:18:b2:8b:e8:28:37:66:94:24:c9:
                    79:c5:04:3f:d8:04:b0:6a:e6:e9:5f:ec:1a:92:1f:
                    bb:4b:a7:d5:41:fc:60:32:96:7b:a3:05:5d:ad:6f:
                    cb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2B:E8:2D:3D:63:5C:18:16:6B:EE:29:50:41:8F:E0:80:A3:0E:E5
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YyvoLT1jXBgWa-4pUEGP4ICjDuU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:bad::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:5a:75:63:60:82:19:63:f6:c2:25:ca:2e:5b:43:5c:69:84:
         34:85:73:ab:90:03:3b:ae:59:20:6e:09:f6:34:b8:c2:44:15:
         6b:4f:2d:64:4c:ca:5d:70:96:ad:c6:9a:00:0e:4a:33:e8:07:
         3d:88:7f:fb:9e:e7:55:31:33:31:a6:31:99:1a:7c:e6:51:58:
         69:ea:dd:75:cc:95:67:f0:7f:d6:a3:fe:ac:a0:80:d5:75:d6:
         c9:50:64:e1:36:15:14:50:9c:33:7b:0c:68:c1:1e:fe:fd:78:
         0d:2e:b8:73:4a:1a:52:78:b2:29:c9:c6:80:5d:6f:b0:d7:2d:
         be:ce:09:5e:f6:65:62:d6:64:87:61:c7:18:39:7c:d1:91:18:
         46:f1:37:99:c4:5a:e2:10:34:81:a0:44:68:84:2d:84:73:ff:
         e3:52:20:2b:a0:56:b1:74:b0:78:c9:d1:95:34:8f:a7:35:cb:
         8f:84:27:7c:a5:57:b8:63:1a:74:64:98:85:22:db:d8:f0:08:
         42:15:0c:7c:18:1d:f8:3b:11:b3:a6:ff:55:91:a9:1d:63:df:
         39:ad:5a:de:41:bb:44:1a:77:9f:72:f2:eb:e2:5a:b5:99:f9:
         e8:15:45:fa:31:5c:1d:71:cb:59:3b:8a:f8:36:73:f1:f2:f5:
         ec:29:15:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----