Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cEKC6ck6wDjxzf4cLzT4jqbzGNs.roa
File:                     cEKC6ck6wDjxzf4cLzT4jqbzGNs.roa (raw, json)
Hash identifier:          Qf/fMpMnFxr01izSZc5ozlfcgAcbRrZdSePlNmNKl3I=
Subject key identifier:   70:42:82:E9:C9:3A:C0:38:F1:CD:FE:1C:2F:34:F8:8E:A6:F3:18:DB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01848C0C81073D101011BA6D2F2E400C9167
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cEKC6ck6wDjxzf4cLzT4jqbzGNs.roa
Signing time:             Fri 18 Nov 2022 18:42:20 +0000
ROA not before:           Fri 18 Nov 2022 18:42:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203577
IP address blocks:        2a06:a005:2020::/44 maxlen: 48
                          2a06:a005:2030::/44 maxlen: 48
                          2a06:a005:22c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:8c:0c:81:07:3d:10:10:11:ba:6d:2f:2e:40:0c:91:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 18 18:42:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=704282e9c93ac038f1cdfe1c2f34f88ea6f318db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:d6:32:26:d7:a6:65:da:21:ba:d6:96:10:
                    3a:df:18:aa:cf:87:ad:89:3b:2a:61:ae:c3:e5:64:
                    0a:49:e1:6f:90:47:b3:aa:cf:f8:4e:84:c8:f4:57:
                    10:a1:f7:b8:dc:fa:04:5c:17:4e:59:ba:04:df:23:
                    0d:63:84:47:6e:fc:0c:e2:43:6a:5e:87:85:cc:5c:
                    31:41:d4:57:22:50:e0:c3:6e:5f:ba:53:39:b7:ec:
                    93:49:f1:b8:fb:32:3f:ce:e8:a1:6c:36:1f:a2:af:
                    57:85:38:cf:09:55:11:3e:b2:3b:cd:d7:31:2c:3a:
                    95:50:45:b7:6c:4d:0e:88:1a:b6:04:47:1d:d9:69:
                    b9:77:2a:88:6e:7b:0d:f1:a5:dc:fb:28:9b:65:f2:
                    0b:d0:5c:0b:db:b0:6b:9c:d9:22:00:7f:49:50:b6:
                    6f:d1:e7:c7:41:da:81:f8:35:6e:17:c1:97:f7:36:
                    87:e8:eb:cf:80:10:6b:df:5c:79:bb:77:b4:c5:46:
                    3f:5a:06:94:57:39:d5:0c:a3:2c:dd:87:ac:1a:38:
                    63:fe:e7:b7:96:4e:03:59:07:50:07:7b:53:5a:9f:
                    0f:5d:4b:28:4b:8d:d2:ec:3c:df:b3:79:28:20:35:
                    45:2b:6d:cf:1f:48:4c:37:5b:1d:68:90:6b:cf:f2:
                    ae:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:42:82:E9:C9:3A:C0:38:F1:CD:FE:1C:2F:34:F8:8E:A6:F3:18:DB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cEKC6ck6wDjxzf4cLzT4jqbzGNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2020::/43
                  2a06:a005:22c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:1b:11:c1:23:44:56:18:a0:3a:50:e2:a7:cd:39:a9:56:7c:
         85:3a:fe:58:b8:9d:fd:4d:6e:f9:bc:53:12:7e:fb:58:9c:e4:
         8f:98:e0:16:ac:50:51:3e:1a:8e:c7:1a:7b:09:fa:90:25:0b:
         bc:82:a1:20:0a:b7:7d:19:d6:86:4e:a5:ce:50:16:ac:c0:82:
         42:f9:36:d0:53:2e:6b:ae:12:58:15:c8:03:99:79:42:6a:4e:
         d8:15:70:0c:a8:22:bb:eb:99:39:e3:6a:8a:cd:ba:05:8b:4e:
         a0:94:86:8e:81:bf:83:7c:13:21:9d:bc:1d:23:61:31:ff:72:
         3c:0b:9f:e5:6a:44:52:ee:e5:17:8c:c7:68:b2:42:e9:07:09:
         bd:9b:71:92:0f:aa:e0:1f:1e:15:66:89:14:a8:af:42:73:1b:
         9d:d9:63:c3:5e:dd:79:c9:e9:86:74:72:5e:09:7c:d0:16:5a:
         b7:9a:a1:73:85:4f:f6:75:b7:32:10:71:b8:d3:0f:ef:10:d3:
         39:3f:de:64:1d:b4:a0:45:61:8b:59:48:56:be:ae:1c:3b:bf:
         a4:f1:16:ee:a8:65:12:2a:da:17:dc:d7:59:ba:f3:b4:cd:00:
         cd:51:f4:d4:ae:02:bc:d6:df:62:41:93:ee:4d:fc:ad:a2:8c:
         fe:9d:fc:67
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYSMDIEHPRAQEbptLy5ADJFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTE4MTg0MjIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDQyODJlOWM5M2FjMDM4ZjFjZGZlMWMyZjM0Zjg4ZWE2ZjMxOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT/WMibXpmXaIbrWlhA63xiqz4et
iTsqYa7D5WQKSeFvkEezqs/4ToTI9FcQofe43PoEXBdOWboE3yMNY4RHbvwM4kNq
XoeFzFwxQdRXIlDgw25fulM5t+yTSfG4+zI/zuihbDYfoq9XhTjPCVURPrI7zdcx
LDqVUEW3bE0OiBq2BEcd2Wm5dyqIbnsN8aXc+yibZfIL0FwL27BrnNkiAH9JULZv
0efHQdqB+DVuF8GX9zaH6OvPgBBr31x5u3e0xUY/WgaUVznVDKMs3YesGjhj/ue3
lk4DWQdQB3tTWp8PXUsoS43S7Dzfs3koIDVFK23PH0hMN1sdaJBrz/KuKwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHBCgunJOsA48c3+HC80+I6m8xjbMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvY0VLQzZjazZ3RGp4emY0Y0x6VDRqcWJ6R05zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcFKgagBSAg
AwcEKgagBSLAMA0GCSqGSIb3DQEBCwUAA4IBAQApGxHBI0RWGKA6UOKnzTmpVnyF
Ov5YuJ39TW75vFMSfvtYnOSPmOAWrFBRPhqOxxp7CfqQJQu8gqEgCrd9GdaGTqXO
UBaswIJC+TbQUy5rrhJYFcgDmXlCak7YFXAMqCK765k542qKzboFi06glIaOgb+D
fBMhnbwdI2Ex/3I8C5/lakRS7uUXjMdoskLpBwm9m3GSD6rgHx4VZokUqK9Ccxud
2WPDXt15yemGdHJeCXzQFlq3mqFzhU/2dbcyEHG40w/vENM5P95kHbSgRWGLWUhW
vq4cO7+k8RbuqGUSKtoX3NdZuvO0zQDNUfTUrgK81t9iQZPuTfytooz+nfxn
-----END CERTIFICATE-----