Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_XfRdi6GdfcO-IganYYui43BhUg.roa
File:                     _XfRdi6GdfcO-IganYYui43BhUg.roa (raw, json)
Hash identifier:          9ZSRcRaPvjWBGdAtWgVBa1iajj3DqyDnmmmLCSCYJi0=
Subject key identifier:   FD:77:D1:76:2E:86:75:F7:0E:F8:88:1A:9D:86:2E:8B:8D:C1:85:48
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183FAE2D7743854EE0FBCB63395D8224AC1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_XfRdi6GdfcO-IganYYui43BhUg.roa
Signing time:             Fri 21 Oct 2022 14:11:53 +0000
ROA not before:           Fri 21 Oct 2022 14:11:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398057
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:fa:e2:d7:74:38:54:ee:0f:bc:b6:33:95:d8:22:4a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 21 14:11:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fd77d1762e8675f70ef8881a9d862e8b8dc18548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:36:f9:d3:76:8b:8e:dc:96:44:0b:92:53:
                    d8:f8:07:7c:20:38:ab:6b:55:e7:e6:ce:18:b5:c6:
                    d4:d3:aa:ba:9b:bd:3e:2b:0f:90:df:c0:03:34:90:
                    42:e7:d3:56:73:4a:69:2d:cc:02:2e:8b:cb:2f:a4:
                    0d:f8:ca:c5:99:bf:8e:51:ad:02:9c:90:41:9a:49:
                    b1:e4:d8:ad:30:b4:fb:0b:77:83:e8:29:ba:75:71:
                    28:4c:11:2f:d3:58:6c:f1:d5:2e:ba:c2:71:70:e4:
                    b3:c8:52:13:2e:f5:0e:b6:cd:f1:7d:46:02:14:d0:
                    6e:97:26:79:9d:f2:70:93:af:5b:74:27:65:11:09:
                    4a:f6:a9:42:a4:2c:ba:7c:56:18:ee:55:46:b5:a6:
                    68:da:95:27:0a:7d:26:bd:6c:fb:9c:e6:2d:ec:fa:
                    9c:70:66:63:65:e4:47:4c:04:3d:c9:fd:0b:18:78:
                    21:d4:2d:1f:d1:72:48:3b:54:39:10:f9:91:33:f7:
                    b2:5a:64:03:83:cf:f2:7a:56:1b:5f:28:a7:c6:fb:
                    c8:4a:4f:a8:fc:7f:e1:7b:21:19:b2:93:2e:fb:29:
                    4a:c9:c2:71:e4:2f:9f:8b:ef:a6:28:6f:16:41:22:
                    df:cc:8a:da:d7:88:49:d1:16:a1:8e:6b:20:cf:44:
                    bf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:77:D1:76:2E:86:75:F7:0E:F8:88:1A:9D:86:2E:8B:8D:C1:85:48
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_XfRdi6GdfcO-IganYYui43BhUg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:11:cd:24:70:ac:ae:ac:56:69:20:1a:d4:6b:4e:31:34:79:
         ed:eb:af:de:58:d8:94:34:85:0b:92:11:49:8a:5a:c9:1e:c1:
         61:48:1a:10:d7:b2:3d:6c:4f:2c:8d:b9:f6:a7:3b:52:e0:19:
         6b:67:8d:6f:ac:b3:45:84:63:62:c4:ba:a1:13:d2:fd:13:ff:
         81:fb:b9:09:fb:95:0a:cd:dc:09:e5:e2:d2:2b:29:8e:88:a7:
         e2:3e:57:38:9b:05:ea:32:23:ed:6b:a3:dd:5e:25:bf:d7:b1:
         03:66:af:f4:5b:52:6a:10:f5:c1:79:55:38:ac:3f:54:26:61:
         b8:13:e2:66:f9:e1:b4:b6:9a:5b:ae:34:51:6b:6e:69:35:dd:
         f0:77:20:7a:6e:65:41:17:ff:9e:95:11:27:c0:5d:20:5b:60:
         dd:63:a9:5a:38:a3:f6:e1:9c:de:29:3f:b1:44:50:c7:71:79:
         01:ce:b9:ec:32:b1:dc:54:0f:c6:70:23:b6:95:8e:1c:dc:c9:
         03:18:03:fe:60:bd:06:f4:09:d6:f1:d1:d7:88:57:d6:7f:7d:
         52:0e:76:9f:40:a6:17:00:2f:39:d1:44:f6:a5:03:ad:d9:5c:
         f7:d1:9c:ef:b5:2c:c5:f7:5d:5f:5b:bb:63:37:3f:e2:90:91:
         23:99:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----