Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_Xx9xFz3MjZe89gHy2L4aofhXbY.roa
File:                     _Xx9xFz3MjZe89gHy2L4aofhXbY.roa (raw, json)
Hash identifier:          NzZT+PeuJNTFbm7IHRwry2jFbepoC+wjisNtjwRZiqY=
Subject key identifier:   FD:7C:7D:C4:5C:F7:32:36:5E:F3:D8:07:CB:62:F8:6A:87:E1:5D:B6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1921B8B5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_Xx9xFz3MjZe89gHy2L4aofhXbY.roa
Signing time:             Tue 03 May 2022 19:43:14 +0000
ROA not before:           Tue 03 May 2022 19:43:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212983
IP address blocks:        2a06:a005:43e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421640373 (0x1921b8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  3 19:43:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fd7c7dc45cf732365ef3d807cb62f86a87e15db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ce:b3:11:2f:2c:92:e8:96:ee:8d:3a:da:94:
                    30:ab:bb:c3:04:04:ef:d3:b9:af:02:75:9c:7e:9f:
                    d4:eb:02:9c:24:9c:75:f9:9f:a6:93:97:ac:84:17:
                    e2:cc:98:43:88:a4:5e:e1:a2:a5:a5:19:bc:80:89:
                    3f:3e:a5:0d:e0:81:df:f7:4a:be:9e:88:f4:fc:45:
                    df:c2:09:64:10:73:13:01:06:cd:56:4b:af:d5:09:
                    1c:8e:37:44:f4:2c:86:d7:12:a6:6a:31:5d:59:e3:
                    d3:8b:82:3b:c5:17:7a:e8:06:a1:59:2f:42:01:cb:
                    55:55:27:9f:01:0a:35:96:f7:ad:51:09:29:d6:49:
                    2b:6e:52:c0:44:b3:85:f1:6c:27:4c:65:aa:25:38:
                    ee:e4:e8:e2:10:bb:04:7d:78:49:27:12:06:3c:c2:
                    f7:ce:0e:96:c0:ab:4e:c9:d8:89:7d:a6:a7:5f:85:
                    4e:5d:91:61:c9:d0:27:cc:26:4b:0d:a0:b0:67:87:
                    a9:a5:b9:26:8f:04:6d:2d:98:93:91:f5:ef:75:06:
                    4b:6e:13:78:29:e3:86:58:d1:9d:34:c1:e5:86:11:
                    4e:b5:ca:ea:ce:f0:c9:35:e9:46:ce:f3:67:61:da:
                    68:c1:60:01:8d:ba:16:de:f7:97:06:53:e7:23:7e:
                    0d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7C:7D:C4:5C:F7:32:36:5E:F3:D8:07:CB:62:F8:6A:87:E1:5D:B6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_Xx9xFz3MjZe89gHy2L4aofhXbY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:43e::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:f2:e4:ac:fb:3c:14:6e:3b:11:bd:ed:4d:e7:b4:44:c2:bb:
         9f:ad:df:f3:90:03:31:89:4d:eb:27:64:f8:5e:0d:69:0f:7a:
         b6:6d:96:ab:97:53:a7:cb:e5:25:c1:3c:32:51:0e:25:a6:c9:
         98:b8:23:3c:cb:02:d6:9b:38:17:7f:c9:3d:05:f4:3b:7f:0d:
         c0:54:fb:06:1b:a5:0d:ca:91:f8:22:59:87:ac:bf:52:ae:dd:
         57:c3:06:3b:a1:f3:2b:7d:62:80:5b:24:61:b2:52:fb:03:d4:
         30:10:39:93:3e:99:00:d1:88:dd:04:6c:a4:9d:43:db:20:11:
         b8:2d:d9:45:a8:73:8f:63:5a:1d:2c:bc:c7:6d:55:e2:5d:e9:
         c9:e3:1e:f1:dc:87:f7:1c:b1:ba:30:5f:5d:20:c0:75:b2:5a:
         f8:20:94:0c:30:31:6d:10:fd:71:dc:ff:df:14:13:37:1f:80:
         5a:be:0b:7f:b5:8a:ba:64:d6:92:e0:05:e6:d9:c4:97:3e:52:
         c7:b4:c8:0f:34:85:12:86:5e:a5:98:9e:78:66:81:f6:58:f5:
         65:0c:5a:1c:10:d8:73:0f:4d:e8:0a:c0:bc:f7:01:9f:d3:05:
         80:37:b0:15:72:5d:df:f3:cc:e8:69:36:d2:b6:ec:bb:b1:c4:
         f6:f4:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----