Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bvSPYK7boLGFp1GUyZMqZdZW0kk.roa
File:                     bvSPYK7boLGFp1GUyZMqZdZW0kk.roa (raw, json)
Hash identifier:          U05nQcTlJHlP2TqBCgktsZGtIjVffvn6isw4f5rb+ic=
Subject key identifier:   6E:F4:8F:60:AE:DB:A0:B1:85:A7:51:94:C9:93:2A:65:D6:56:D2:49
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018313E486E579E960CC28793BCC3ABF120D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bvSPYK7boLGFp1GUyZMqZdZW0kk.roa
Signing time:             Tue 06 Sep 2022 17:41:27 +0000
ROA not before:           Tue 06 Sep 2022 17:41:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202939
IP address blocks:        2a06:a005:1ba0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:13:e4:86:e5:79:e9:60:cc:28:79:3b:cc:3a:bf:12:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  6 17:41:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ef48f60aedba0b185a75194c9932a65d656d249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:03:1d:63:3b:6d:f4:c1:76:f7:71:73:32:
                    af:29:40:26:a3:b4:64:cb:5a:01:c6:24:da:d7:8b:
                    5c:21:fc:93:bb:f8:32:17:26:c1:91:df:e5:7e:c2:
                    84:fd:32:bc:6d:b0:a9:72:01:63:a0:85:b9:a7:54:
                    53:04:21:0a:a6:55:63:55:d9:d6:a1:6f:65:01:d8:
                    3a:fa:07:bf:0d:a3:54:86:cc:cf:24:70:50:82:9f:
                    c0:d5:1d:31:b4:81:fa:b9:32:ca:0d:2d:f0:98:bb:
                    87:15:01:2b:a8:bc:f1:9e:86:a2:4a:8a:5c:ca:ec:
                    95:ce:9a:01:2c:61:9f:9b:00:a3:92:86:4a:3b:10:
                    83:f8:74:c3:08:ec:dc:d8:26:a6:ef:a7:7b:cb:f7:
                    33:62:87:5a:77:56:ee:7c:6f:c1:78:20:f8:a9:52:
                    32:b7:bc:b0:bc:eb:a9:e0:dc:d7:b2:65:01:ce:65:
                    14:d9:92:3a:54:91:ee:c6:1b:aa:c7:0f:36:35:c2:
                    80:81:9d:c1:71:9a:a7:22:86:98:95:b6:4b:05:0f:
                    0b:79:0d:fc:e4:82:9a:12:3b:45:14:45:de:3d:49:
                    60:18:3d:3f:ee:8b:05:41:19:ad:1c:56:40:30:38:
                    b6:bc:e2:a2:72:da:3b:22:4e:95:f5:1e:76:5b:2e:
                    51:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F4:8F:60:AE:DB:A0:B1:85:A7:51:94:C9:93:2A:65:D6:56:D2:49
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bvSPYK7boLGFp1GUyZMqZdZW0kk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1ba0::/44

    Signature Algorithm: sha256WithRSAEncryption
         90:1b:50:dc:5b:67:74:24:e4:aa:2c:7e:bc:b9:04:69:7e:29:
         7a:0b:e9:ed:1e:e0:c1:56:e2:1f:44:d4:3a:66:a7:a8:5e:03:
         f7:3e:6a:1a:d3:bb:81:64:9d:7c:c3:6c:89:85:26:f6:80:56:
         91:24:5b:9d:9a:0c:0a:23:3b:a6:93:01:38:77:d3:5e:ef:b4:
         14:32:e1:b3:01:f4:28:ba:c7:d9:87:1d:61:76:84:45:67:71:
         2f:ff:48:58:6d:c1:96:50:fc:7d:e7:9b:c0:db:b7:23:c6:61:
         75:e1:26:43:0e:09:38:b6:9d:f3:b6:02:27:69:dc:d3:a7:b3:
         21:2b:fb:5a:1d:b7:e4:5c:6f:d6:22:ff:4b:b3:3b:d3:73:ab:
         c2:fb:98:db:3c:9d:44:da:69:a1:a0:9d:9f:f8:fe:f0:80:13:
         35:ba:63:37:e7:0a:24:bc:da:f5:ed:12:70:5a:1b:70:9d:dd:
         18:ba:bc:5f:a5:20:8c:b1:b4:52:d0:4f:57:e3:87:e4:27:3d:
         6f:67:91:16:05:db:48:57:2b:25:ed:ec:e0:db:63:f4:2d:bc:
         a9:ea:80:9b:9f:7b:50:4b:89:6a:35:36:57:34:db:3e:b8:90:
         bc:75:b6:76:7c:51:18:e6:1d:c8:a2:f8:c0:bb:ef:70:4a:c8:
         00:24:1d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----