Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c6U9DPuB6wvj11LJTiKlKTibN_I.roa
File:                     c6U9DPuB6wvj11LJTiKlKTibN_I.roa (raw, json)
Hash identifier:          9ZLiPVbdtD5rsNB8eTuDGwodGQuQ4nZgPJKpaHHBwsw=
Subject key identifier:   73:A5:3D:0C:FB:81:EB:0B:E3:D7:52:C9:4E:22:A5:29:38:9B:37:F2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       189AE539
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c6U9DPuB6wvj11LJTiKlKTibN_I.roa
Signing time:             Fri 22 Apr 2022 21:40:20 +0000
ROA not before:           Fri 22 Apr 2022 21:40:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     18526
IP address blocks:        2a06:a005:5b6::/47 maxlen: 48
                          2a06:a005:5b1::/48 maxlen: 48
                          2a06:a005:5b2::/48 maxlen: 48
                          2a06:a005:5b0::/48 maxlen: 48
                          2a06:a005:5b3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412804409 (0x189ae539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 22 21:40:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=73a53d0cfb81eb0be3d752c94e22a529389b37f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:ca:7a:f2:85:5b:56:c7:3e:65:ca:bd:1f:
                    e2:1c:64:cf:f3:d6:cf:9f:4c:81:f0:a9:ce:b4:de:
                    25:06:3f:76:c9:99:5c:02:bc:04:02:39:5f:3d:0a:
                    37:dc:78:95:a2:b3:bc:49:95:93:bc:2e:1a:53:6d:
                    f6:0b:fc:da:cd:1d:78:1f:f2:95:d8:78:20:cb:7a:
                    bf:db:62:74:5b:bb:93:af:64:a6:e9:d0:b8:f4:dd:
                    e0:80:74:85:a2:86:a8:f1:c9:b2:5a:a8:d4:c2:b8:
                    6b:2b:ef:6b:2b:86:82:5e:ad:62:df:cd:31:7e:25:
                    6c:e2:cc:3e:1a:b8:d2:2c:77:d6:55:60:ca:be:61:
                    1e:37:79:c9:94:49:50:32:08:c5:3c:8e:3c:c3:92:
                    36:af:89:79:4c:dc:0b:35:50:46:3e:fd:ce:3a:ed:
                    26:e0:2c:dd:a4:bd:61:83:2e:31:ee:39:4b:2c:73:
                    46:5b:cb:b3:f8:e0:b2:83:09:b8:52:89:3e:33:4d:
                    df:e7:5a:d4:bd:3b:a3:f5:4d:fa:83:ed:1b:85:b0:
                    c5:d0:15:2c:a9:88:f9:a1:2a:31:ba:ec:7e:ba:ab:
                    12:17:ca:6c:c8:29:9d:ed:0e:6f:59:5c:8b:74:77:
                    57:dd:b1:48:dc:a6:82:18:fd:53:55:4f:7b:ab:09:
                    78:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A5:3D:0C:FB:81:EB:0B:E3:D7:52:C9:4E:22:A5:29:38:9B:37:F2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/c6U9DPuB6wvj11LJTiKlKTibN_I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5b0::/46
                  2a06:a005:5b6::/47

    Signature Algorithm: sha256WithRSAEncryption
         26:6c:79:ce:0f:b3:9f:7e:1d:96:6d:a3:e5:c5:1e:4e:94:03:
         87:86:2b:47:16:ec:00:ef:f1:0a:3f:0e:ad:3b:29:7c:4f:5b:
         d1:c9:a9:69:bc:7d:12:5c:00:c9:e7:2b:f5:ef:c0:4a:d6:f8:
         ee:a9:0b:60:aa:6d:da:fb:79:f7:b0:2c:3e:9f:6a:c5:a5:f3:
         e3:12:09:a7:79:36:22:e5:1b:2f:a6:fb:95:18:bc:33:fb:1f:
         c1:d6:36:5f:94:5f:37:e7:9d:72:f7:74:27:73:d6:e2:b2:1b:
         a2:90:3c:af:5b:d4:7f:73:1c:87:80:8a:ae:93:07:48:1a:95:
         63:1b:ad:74:ad:63:cd:ac:bb:21:98:20:87:9e:09:3d:8d:d3:
         ac:32:4c:2d:25:33:9c:2f:6f:f1:2d:b4:0a:ee:c5:96:07:30:
         f7:03:d0:48:3b:e2:d8:c7:6a:0b:68:45:ca:d3:c6:5f:28:52:
         7e:ce:b3:c1:b4:29:dd:44:53:73:cb:f4:25:c4:9b:22:73:0e:
         44:86:15:22:fc:9f:5b:d4:c5:c7:ab:ae:9f:97:7b:42:bf:42:
         01:78:44:9f:6a:99:c5:b1:d9:c9:58:ce:dc:82:e5:ef:46:00:
         67:09:41:b8:c9:d7:14:0c:60:61:ab:0c:26:12:1f:c2:c3:0c:
         50:60:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----