Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZCbSc2-ZvaO6eurilPojFe-Htfk.roa
File:                     ZCbSc2-ZvaO6eurilPojFe-Htfk.roa (raw, json)
Hash identifier:          yJTo0JecKAiVEp97GvW3G05bfq6i1jBWCWl10cWM1Rw=
Subject key identifier:   64:26:D2:73:6F:99:BD:A3:BA:7A:EA:E2:94:FA:23:15:EF:87:B5:F9
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19C6E846
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZCbSc2-ZvaO6eurilPojFe-Htfk.roa
Signing time:             Sat 14 May 2022 21:01:41 +0000
ROA not before:           Sat 14 May 2022 21:01:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210881
IP address blocks:        2a06:a005:920::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432465990 (0x19c6e846)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 14 21:01:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6426d2736f99bda3ba7aeae294fa2315ef87b5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:74:ea:03:7e:35:45:7a:35:ec:5e:86:60:14:
                    3d:ac:5e:93:2a:d2:09:a0:ee:3d:4f:47:24:89:88:
                    bb:6c:04:be:74:1c:55:5e:b0:8b:d5:d9:60:9a:ea:
                    54:3a:f5:12:1b:c9:a1:c4:f0:4a:e8:21:f3:9d:9c:
                    83:31:91:79:b7:d6:23:ca:86:9f:a2:56:2d:5b:36:
                    e4:d6:9d:24:2c:df:b1:c3:ea:21:95:67:99:42:2b:
                    6c:85:36:8a:64:ff:56:0f:94:a4:f0:15:cc:ca:a3:
                    23:cc:b7:e0:d6:7d:4e:03:26:34:67:e1:b6:5e:03:
                    33:10:c8:60:35:e4:0d:84:28:67:65:2a:13:35:a4:
                    83:e6:38:dd:98:52:d1:5f:27:7c:da:e8:d1:d5:0f:
                    b8:3c:d8:0a:35:90:d3:69:90:df:f4:19:41:67:ae:
                    7f:bc:26:ad:ed:76:53:ae:65:8d:eb:7e:43:78:43:
                    01:32:9c:20:0e:3d:68:75:44:12:7c:69:ad:d2:fe:
                    d3:32:07:93:c7:78:73:88:eb:28:63:af:9d:a0:78:
                    dc:aa:56:60:4b:0e:52:14:11:41:06:21:6b:9d:cc:
                    2f:67:0d:07:f2:53:5a:e0:04:12:57:6f:ed:b8:88:
                    84:1e:eb:bd:8f:04:46:2a:9c:d5:27:35:20:d6:95:
                    ad:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:26:D2:73:6F:99:BD:A3:BA:7A:EA:E2:94:FA:23:15:EF:87:B5:F9
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZCbSc2-ZvaO6eurilPojFe-Htfk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:920::/44

    Signature Algorithm: sha256WithRSAEncryption
         3e:3b:82:9c:68:d4:ea:54:69:7f:f2:ab:2d:eb:d4:80:68:c1:
         00:d1:8d:5d:e2:14:44:3e:4b:fe:35:bc:5a:38:62:d0:8f:ba:
         d9:1c:c5:e2:34:b4:51:1b:5e:59:7e:ec:16:42:95:b6:a8:b3:
         85:7c:01:a3:8d:f8:5b:0b:3b:4b:2e:b9:b7:83:5e:f2:dd:c1:
         90:ac:d2:dd:a0:d3:82:2e:f3:c2:c8:81:4c:fe:90:cc:a5:26:
         6d:1e:b8:cb:36:7c:c6:ef:77:a7:52:50:dc:e0:a6:b2:a2:47:
         32:9e:f0:73:86:40:a8:2b:a7:07:e1:36:69:06:ea:8a:1a:07:
         19:b7:8c:c0:74:48:e5:20:ef:af:a4:c4:55:60:0d:26:50:fd:
         b4:bc:2a:bf:5f:ff:c6:3c:d2:32:4e:5a:9e:ed:56:72:ff:ad:
         fa:a7:0e:43:16:aa:02:dc:52:68:0f:a7:27:29:80:06:37:56:
         32:c4:51:cf:5c:40:f2:78:dc:40:95:f2:fd:21:e8:ac:6b:82:
         c9:1e:7c:8f:67:cd:1a:04:ff:8b:7d:8d:7f:33:08:dc:6b:65:
         13:29:f5:87:bf:dc:22:f3:80:30:00:a9:a0:e1:6c:ca:1e:28:
         6c:da:f4:a5:d3:00:bf:50:9c:e8:03:ce:b0:73:76:7f:83:9f:
         ce:01:21:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----