Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZDa7-zgwaHR9K7pmq5RZck0taFc.roa
File:                     ZDa7-zgwaHR9K7pmq5RZck0taFc.roa (raw, json)
Hash identifier:          eVj8FB2LzAoY15c65qne+0OcTx+Xgv0XlXXNIfEwNfE=
Subject key identifier:   64:36:BB:FB:38:30:68:74:7D:2B:BA:66:AB:94:59:72:4D:2D:68:57
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184CAF321F884CE372F509FC3A17371B8AA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZDa7-zgwaHR9K7pmq5RZck0taFc.roa
Signing time:             Wed 30 Nov 2022 23:50:42 +0000
ROA not before:           Wed 30 Nov 2022 23:50:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202199
IP address blocks:        2a06:a005:1c7f::/48 maxlen: 48
                          2a06:a005:1640::/44 maxlen: 48
                          2a06:a005:1505::/48 maxlen: 48
                          2a05:dfc7:5400::/39 maxlen: 48
                          2a05:dfc7:1700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ca:f3:21:f8:84:ce:37:2f:50:9f:c3:a1:73:71:b8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 30 23:50:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6436bbfb383068747d2bba66ab9459724d2d6857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:37:dd:54:1c:d3:d7:8d:09:b2:15:7c:07:16:
                    ab:3a:bb:0d:f9:ab:4f:46:46:88:6f:8e:de:29:12:
                    3d:f3:15:f8:ca:25:aa:b2:43:58:1d:b4:6e:70:09:
                    ee:42:8d:c8:18:77:e8:9f:ad:0c:fe:ab:1e:96:4d:
                    7a:cd:ba:58:b9:8a:27:77:32:72:6f:e5:71:6b:a3:
                    d6:f0:15:92:4b:75:14:b5:cc:41:26:47:a9:9f:07:
                    3e:f9:c4:27:a6:fa:65:4d:db:47:e4:f1:60:a7:d7:
                    6d:b8:17:a6:bc:86:63:ed:96:7f:8d:ee:0d:b0:b6:
                    e3:81:5b:89:1f:f1:c8:be:11:04:73:60:e4:8e:6a:
                    c5:c9:61:71:ad:17:c8:25:03:f2:c3:66:c1:16:b5:
                    27:60:c7:cf:f3:6c:15:ce:2c:6d:b6:75:27:99:e3:
                    e6:79:5f:3b:d3:c1:75:a5:2b:da:de:db:3d:78:70:
                    21:0f:2d:75:ef:da:c7:88:57:ad:ab:dc:6f:00:f5:
                    82:b6:f3:2b:50:fe:b9:7d:96:5c:ec:e6:9a:75:70:
                    19:13:4a:ff:27:50:21:1a:5d:15:61:c3:02:56:94:
                    f5:25:e3:df:42:78:e4:d8:b7:e9:6e:54:52:bd:78:
                    75:84:a5:01:56:1b:9b:b0:8b:b6:5a:b2:ee:58:c3:
                    a3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:36:BB:FB:38:30:68:74:7D:2B:BA:66:AB:94:59:72:4D:2D:68:57
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZDa7-zgwaHR9K7pmq5RZck0taFc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1700::/40
                  2a05:dfc7:5400::/39
                  2a06:a005:1505::/48
                  2a06:a005:1640::/44
                  2a06:a005:1c7f::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:7c:8c:74:3b:72:71:f2:a1:cc:86:eb:30:7b:e0:72:31:51:
         b6:9b:47:d5:d0:e8:51:89:19:d2:6e:56:1d:5e:a2:2b:79:d7:
         44:2a:b7:7b:a2:47:3e:2d:ff:a4:12:65:f8:e9:94:37:0a:71:
         20:c3:c9:52:3d:35:cf:b5:d9:e2:08:0d:01:77:48:a1:78:ca:
         b2:c9:e0:4d:c4:38:84:b6:5c:33:18:ce:e0:48:15:e5:e8:9a:
         56:80:2c:eb:f7:60:e0:e7:cc:84:4c:07:58:b8:a2:c7:e2:58:
         0c:26:88:44:94:14:29:4f:a3:87:3b:cf:08:9a:06:7d:49:17:
         87:05:f3:f4:7f:9c:03:77:f7:e8:3c:af:dd:c6:54:56:60:34:
         b7:aa:3e:02:c1:42:83:ff:14:93:35:d7:f2:2a:d1:84:66:ff:
         e6:db:32:22:73:e4:94:68:38:12:45:0b:cc:5e:ec:dd:f5:ae:
         ef:9d:49:3d:83:50:06:e2:20:7d:8d:bb:fc:e5:7a:d3:7b:06:
         73:d8:c7:96:c6:a7:92:7b:25:37:14:29:3d:ed:8c:5b:db:90:
         d2:d4:44:6e:e9:79:e3:66:56:26:47:2a:8f:d3:a9:b4:9c:30:
         9d:2b:9f:06:fb:3f:4a:af:9a:46:7f:60:42:5f:1d:49:5e:b3:
         eb:f9:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----