Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_X6w_7O0jqhrEYDN-syZnsKqhBM.roa
File:                     _X6w_7O0jqhrEYDN-syZnsKqhBM.roa (raw, json)
Hash identifier:          dgCVfiZdd3ZbY8omuJj30e3/zaU+nqsBremmPby4uOw=
Subject key identifier:   FD:7E:B0:FF:B3:B4:8E:A8:6B:11:80:CD:FA:CC:99:9E:C2:AA:84:13
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01830F7B8241D97881B2DDD930BEB00153B3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_X6w_7O0jqhrEYDN-syZnsKqhBM.roa
Signing time:             Mon 05 Sep 2022 21:08:15 +0000
ROA not before:           Mon 05 Sep 2022 21:08:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202996
IP address blocks:        2a06:a005:d2b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:0f:7b:82:41:d9:78:81:b2:dd:d9:30:be:b0:01:53:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  5 21:08:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fd7eb0ffb3b48ea86b1180cdfacc999ec2aa8413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f0:5a:7e:c4:3e:ad:ed:71:b7:53:32:97:9d:
                    1f:75:c8:88:16:8d:21:d8:a0:ec:85:d5:ac:cf:8f:
                    c6:6e:9e:00:c7:4e:65:ad:be:f5:ee:4d:73:92:67:
                    a1:7a:d7:c0:38:a3:a6:de:55:ca:e8:73:58:0f:36:
                    e1:5a:3c:da:fa:0c:cd:fd:6b:46:46:12:ee:41:89:
                    22:26:05:61:ba:84:15:92:58:ef:f8:e4:d9:8e:15:
                    8f:e3:a9:4a:f8:d2:9f:65:b5:e0:a2:85:ff:20:59:
                    36:fb:68:28:3a:b0:3e:ea:a5:19:b7:4c:11:03:f2:
                    e7:6b:18:5e:ee:b1:cc:f3:36:df:7a:1c:91:79:38:
                    7f:a5:b2:ee:e1:85:6d:8d:9c:74:c4:2f:ad:a8:6d:
                    e7:4c:12:a8:04:28:01:d0:27:44:f6:b4:69:d4:5e:
                    1d:5c:d9:f2:de:6a:b3:2f:6b:fb:34:15:f9:51:e0:
                    45:7b:4d:34:2c:7f:a4:93:75:13:3e:11:c3:b4:e8:
                    f8:37:b5:33:d1:a5:0d:0b:8b:02:2d:96:de:18:a5:
                    24:96:ff:2a:65:ef:26:ff:d7:6d:7a:4a:34:ec:33:
                    c0:4a:11:cf:de:ff:21:d7:96:25:05:f6:e7:4c:26:
                    d1:91:5b:49:d6:ff:d1:d3:06:1e:82:91:4c:cc:83:
                    7f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7E:B0:FF:B3:B4:8E:A8:6B:11:80:CD:FA:CC:99:9E:C2:AA:84:13
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_X6w_7O0jqhrEYDN-syZnsKqhBM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2b::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:75:62:57:d6:87:f0:20:f8:16:f2:31:96:9f:3c:ec:0c:5a:
         f2:d9:e4:86:53:12:9e:07:3a:b6:9e:e0:3d:cb:bd:0e:80:17:
         e5:80:d0:ee:1e:6f:f5:54:53:d2:d4:9d:e2:59:b9:bd:66:65:
         01:5d:71:a5:42:6c:34:01:68:77:8f:20:d4:ad:3d:8a:da:bb:
         dc:80:f3:52:4e:e9:51:c5:8e:10:b6:e1:c1:bc:29:5b:1a:f1:
         da:0e:a2:c0:bc:b2:95:94:89:14:3e:62:1c:b8:21:7c:23:ef:
         ac:d9:a5:ef:66:ec:bd:a1:40:26:6e:1e:55:cc:96:87:b6:ba:
         45:01:42:e7:b5:a2:5e:b4:51:ad:c0:b0:50:ab:02:0c:84:9d:
         3e:84:45:5b:d2:91:8e:c5:88:47:21:af:10:40:5f:ed:89:dd:
         a5:9d:63:1e:b6:2c:d4:ff:1b:8f:0f:24:1e:9f:5d:0b:23:87:
         86:6a:12:f4:f8:ae:be:b2:40:93:94:28:61:37:04:a0:06:cb:
         0e:2d:a8:b1:a6:5f:5d:9a:c2:74:22:b3:6f:ee:2c:29:3a:60:
         93:39:00:5a:b3:dd:42:2e:20:a2:db:0b:ee:60:a0:eb:e3:48:
         6d:be:d9:5b:9b:c2:29:69:5a:62:e8:ca:30:78:12:bf:1d:3b:
         21:22:42:f5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYMPe4JB2XiBst3ZML6wAVOzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTA1MjEwODE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDdlYjBmZmIzYjQ4ZWE4NmIxMTgwY2RmYWNjOTk5ZWMyYWE4NDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfBafsQ+re1xt1Myl50fdciIFo0h
2KDshdWsz4/Gbp4Ax05lrb717k1zkmehetfAOKOm3lXK6HNYDzbhWjza+gzN/WtG
RhLuQYkiJgVhuoQVkljv+OTZjhWP46lK+NKfZbXgooX/IFk2+2goOrA+6qUZt0wR
A/Lnaxhe7rHM8zbfehyReTh/pbLu4YVtjZx0xC+tqG3nTBKoBCgB0CdE9rRp1F4d
XNny3mqzL2v7NBX5UeBFe000LH+kk3UTPhHDtOj4N7Uz0aUNC4sCLZbeGKUklv8q
Ze8m/9dteko07DPAShHP3v8h15YlBfbnTCbRkVtJ1v/R0wYegpFMzIN/AQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP1+sP+ztI6oaxGAzfrMmZ7CqoQTMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvX1g2d183TzBqcWhyRVlETi1zeVpuc0txaEJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQ0r
MA0GCSqGSIb3DQEBCwUAA4IBAQAzdWJX1ofwIPgW8jGWnzzsDFry2eSGUxKeBzq2
nuA9y70OgBflgNDuHm/1VFPS1J3iWbm9ZmUBXXGlQmw0AWh3jyDUrT2K2rvcgPNS
TulRxY4QtuHBvClbGvHaDqLAvLKVlIkUPmIcuCF8I++s2aXvZuy9oUAmbh5VzJaH
trpFAULntaJetFGtwLBQqwIMhJ0+hEVb0pGOxYhHIa8QQF/tid2lnWMetizU/xuP
DyQen10LI4eGahL0+K6+skCTlChhNwSgBssOLaixpl9dmsJ0IrNv7iwpOmCTOQBa
s91CLiCi2wvuYKDr40htvtlbm8IpaVpi6MoweBK/HTshIkL1
-----END CERTIFICATE-----