Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_SIX6Dgd1E0FZfkTIxM6gPcyU4Q.roa
File:                     _SIX6Dgd1E0FZfkTIxM6gPcyU4Q.roa (raw, json)
Hash identifier:          mj+T3XCwb1sPv4Ge3qDe6AtDMZowzHIJuVn1VIqg+FM=
Subject key identifier:   FD:22:17:E8:38:1D:D4:4D:05:65:F9:13:23:13:3A:80:F7:32:53:84
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182157A922146DBD45641D7D52936ABAD20
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_SIX6Dgd1E0FZfkTIxM6gPcyU4Q.roa
Signing time:             Tue 19 Jul 2022 08:02:10 +0000
ROA not before:           Tue 19 Jul 2022 08:02:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212888
IP address blocks:        2a06:a005:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:15:7a:92:21:46:db:d4:56:41:d7:d5:29:36:ab:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 19 08:02:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fd2217e8381dd44d0565f91323133a80f7325384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:89:71:f9:d2:98:08:30:19:05:ca:9b:9f:af:
                    15:d9:c0:4e:b2:93:b3:96:a4:25:90:1d:d3:1f:dd:
                    b6:2a:2f:b9:ed:9b:cc:68:32:fb:d3:43:90:5d:84:
                    db:3d:ca:92:9e:52:e9:b7:dd:3f:2d:46:65:83:f0:
                    ae:53:c6:ad:4f:3f:9e:b8:f9:0f:38:0d:f3:14:20:
                    88:e5:28:6e:56:a3:a4:38:76:31:db:85:63:f2:dc:
                    6e:13:bb:94:d5:a5:b3:0e:82:34:35:38:81:ce:ae:
                    34:8d:1e:b5:b4:bb:13:32:64:31:ec:8a:eb:14:e8:
                    17:79:67:1b:dc:1b:f0:ea:56:3f:51:9e:a4:0f:94:
                    6e:93:1e:1d:aa:64:7e:20:3d:bb:3e:e8:f7:2b:0c:
                    3f:6f:71:fd:6b:d2:85:23:72:d0:bc:27:29:a1:d2:
                    16:9d:3f:a6:7c:d6:c8:e4:a9:b5:b8:7f:07:d5:51:
                    a3:6d:8f:1f:b9:a7:b5:f2:e1:86:35:fd:0e:e9:b7:
                    2b:8a:db:d2:97:0a:63:63:43:eb:a7:12:cf:62:bb:
                    92:f1:a1:75:5d:30:75:d8:2d:03:3a:b1:ad:31:de:
                    18:bb:6a:fe:4e:6d:ba:de:57:0a:0a:75:49:8a:01:
                    94:ce:2b:8c:df:bf:ae:a6:1a:f8:f8:1d:96:d9:00:
                    6d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:22:17:E8:38:1D:D4:4D:05:65:F9:13:23:13:3A:80:F7:32:53:84
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_SIX6Dgd1E0FZfkTIxM6gPcyU4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:3b:60:95:4c:44:24:de:26:e3:43:aa:55:69:95:84:f5:eb:
         2d:a2:2d:f7:1c:7f:90:57:b7:27:5b:52:7f:c1:c0:43:d6:56:
         fa:4a:c5:ef:cb:e0:4b:04:5f:e4:f3:36:a5:8a:4c:c9:ea:a7:
         f7:5f:13:1b:aa:90:f8:0c:d1:0e:f0:62:ab:6c:7f:7e:c4:9e:
         4e:d1:c8:7e:88:ad:98:6a:65:a1:cc:de:55:df:d2:bb:48:24:
         fa:b3:7d:c1:38:5a:b5:1d:b2:36:bb:0d:3a:05:38:1c:ca:eb:
         ab:a3:1e:36:a7:d6:7f:ee:e2:96:9d:68:56:7a:19:54:cb:f0:
         a6:38:4f:a1:4e:56:0f:c9:c0:f6:a7:2a:27:62:4a:6e:34:a4:
         96:c6:7b:24:87:29:e3:ba:3f:ac:d9:57:8b:49:e7:41:aa:49:
         a8:c9:27:76:3f:2d:af:86:62:4f:88:65:9c:87:87:ff:8f:55:
         a4:bd:4c:dd:b8:31:4e:e3:49:06:14:68:50:d4:fc:0f:f8:b5:
         07:42:8c:63:39:26:b2:d1:86:70:6d:62:15:87:91:df:53:95:
         56:c5:a5:91:44:31:4c:5b:ec:17:bd:1a:c7:63:fd:90:6c:1b:
         73:c4:fa:1c:f6:fe:20:20:c9:bc:f8:59:0e:61:f8:b4:61:77:
         0f:c5:8d:00
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYIVepIhRtvUVkHX1Sk2q60gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzE5MDgwMjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDIyMTdlODM4MWRkNDRkMDU2NWY5MTMyMzEzM2E4MGY3MzI1Mzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIlx+dKYCDAZBcqbn68V2cBOspOz
lqQlkB3TH922Ki+57ZvMaDL700OQXYTbPcqSnlLpt90/LUZlg/CuU8atTz+euPkP
OA3zFCCI5ShuVqOkOHYx24Vj8txuE7uU1aWzDoI0NTiBzq40jR61tLsTMmQx7Irr
FOgXeWcb3Bvw6lY/UZ6kD5Rukx4dqmR+ID27Puj3Kww/b3H9a9KFI3LQvCcpodIW
nT+mfNbI5Km1uH8H1VGjbY8fuae18uGGNf0O6bcritvSlwpjY0PrpxLPYruS8aF1
XTB12C0DOrGtMd4Yu2r+Tm263lcKCnVJigGUziuM37+uphr4+B2W2QBtVwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP0iF+g4HdRNBWX5EyMTOoD3MlOEMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvX1NJWDZEZ2QxRTBGWmZrVEl4TTZnUGN5VTRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQAB
MA0GCSqGSIb3DQEBCwUAA4IBAQBvO2CVTEQk3ibjQ6pVaZWE9estoi33HH+QV7cn
W1J/wcBD1lb6SsXvy+BLBF/k8zalikzJ6qf3XxMbqpD4DNEO8GKrbH9+xJ5O0ch+
iK2YamWhzN5V39K7SCT6s33BOFq1HbI2uw06BTgcyuurox42p9Z/7uKWnWhWehlU
y/CmOE+hTlYPycD2pyonYkpuNKSWxnskhynjuj+s2VeLSedBqkmoySd2Py2vhmJP
iGWch4f/j1WkvUzduDFO40kGFGhQ1PwP+LUHQoxjOSay0YZwbWIVh5HfU5VWxaWR
RDFMW+wXvRrHY/2QbBtzxPoc9v4gIMm8+FkOYfi0YXcPxY0A
-----END CERTIFICATE-----