Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Zp5p3-z5f9ONpJtJp3qrJpbWr1o.roa
File:                     Zp5p3-z5f9ONpJtJp3qrJpbWr1o.roa (raw, json)
Hash identifier:          hvn+rtfpgUHrvqx2k5xMft3TFZQA4945OiN9qO+iyH8=
Subject key identifier:   66:9E:69:DF:EC:F9:7F:D3:8D:A4:9B:49:A7:7A:AB:26:96:D6:AF:5A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01845BD968DD8834EC87CA9D872BF1EC2D55
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Zp5p3-z5f9ONpJtJp3qrJpbWr1o.roa
Signing time:             Wed 09 Nov 2022 10:04:45 +0000
ROA not before:           Wed 09 Nov 2022 10:04:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201501
IP address blocks:        2a0a:6040:fa00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5b:d9:68:dd:88:34:ec:87:ca:9d:87:2b:f1:ec:2d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov  9 10:04:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=669e69dfecf97fd38da49b49a77aab2696d6af5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:99:69:0d:10:72:4c:95:c5:c0:4d:60:1b:
                    35:af:74:fd:51:c1:fd:00:29:41:dd:08:a1:86:de:
                    68:f8:f4:8d:dc:f4:3f:38:5a:48:ac:b8:1d:62:aa:
                    55:26:77:a6:8f:84:a1:27:01:44:6e:95:ac:a3:61:
                    62:14:82:41:ee:03:a4:37:32:f0:85:bd:6d:f6:3b:
                    c2:7d:66:13:65:8b:c7:18:bd:9f:95:19:58:48:b4:
                    3c:5a:bb:4e:d5:29:b8:68:67:a3:45:80:63:64:40:
                    d7:75:1b:49:fc:c5:52:55:be:ea:80:a2:fe:4c:aa:
                    d3:eb:1c:89:6c:ee:be:0f:ae:f0:39:b7:81:b6:0f:
                    cb:9e:6e:a2:e7:22:18:bb:ec:e3:b6:1a:33:64:05:
                    72:d4:c2:16:45:f5:59:fd:06:7d:77:de:4d:2c:ea:
                    07:5f:ed:af:b4:8a:e8:90:1f:e1:b2:a2:4b:97:0c:
                    79:e5:0f:d2:55:cb:e4:cd:29:65:dd:3c:58:4d:fc:
                    0b:87:95:75:84:8b:36:a7:c1:87:93:6c:da:5e:7c:
                    1e:cb:1d:78:3e:4c:5b:52:6a:cd:6a:77:3e:74:e4:
                    99:e7:d0:2e:a4:70:8e:42:79:e5:fe:99:55:b1:bc:
                    44:f2:53:79:34:04:b1:36:fa:95:62:a7:66:b9:5c:
                    16:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9E:69:DF:EC:F9:7F:D3:8D:A4:9B:49:A7:7A:AB:26:96:D6:AF:5A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Zp5p3-z5f9ONpJtJp3qrJpbWr1o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:0f:28:ff:b5:05:1b:b6:4c:37:c5:25:64:54:d0:57:17:90:
         39:56:36:bb:7b:f0:14:00:9a:cf:af:fb:81:0e:84:79:4a:7c:
         59:2f:41:79:26:27:ec:cb:87:94:57:73:72:34:c9:d3:80:2f:
         ca:98:03:28:5a:6f:81:ec:c2:a4:c3:0b:95:3d:b6:53:67:bf:
         ae:c8:5f:20:5d:58:9b:92:fa:7e:5e:09:1e:e1:02:29:8a:f5:
         bb:cc:0c:b9:38:96:70:8c:70:6e:1b:b6:d9:9e:40:bb:e3:73:
         d6:b6:66:93:51:ca:b7:88:5d:d2:50:04:76:14:dc:40:1d:11:
         7c:59:fa:d9:38:14:0f:3b:c6:d9:9c:fb:26:f9:66:16:19:f4:
         b9:d5:38:e8:69:97:51:97:b4:06:93:c6:f2:1d:fc:71:75:7d:
         c8:cf:53:bf:e1:1e:f0:5c:53:a6:0b:b2:67:f7:39:67:d2:d0:
         7d:94:e6:78:83:5b:0f:8d:38:87:e6:3b:21:3c:e8:83:47:81:
         53:ac:30:35:f6:e9:63:46:50:36:16:45:b7:fd:69:c3:8a:eb:
         cf:33:5d:3a:df:90:e1:c4:32:09:f7:17:e3:1a:22:b6:a8:96:
         6b:62:54:02:b3:98:27:5a:12:2a:08:25:ab:4b:3f:ad:cf:1e:
         3b:e8:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----