Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cPUu0ngGQMJgz1bYe4ojpYccdu4.roa
File:                     cPUu0ngGQMJgz1bYe4ojpYccdu4.roa (raw, json)
Hash identifier:          3fON9FnBeti00mOny1UqBbIhyJPAByLAYCW3vAtUsv8=
Subject key identifier:   70:F5:2E:D2:78:06:40:C2:60:CF:56:D8:7B:8A:23:A5:87:1C:76:EE
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184F1A333FBB9FD07806BC938B60938189D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cPUu0ngGQMJgz1bYe4ojpYccdu4.roa
Signing time:             Thu 08 Dec 2022 12:08:35 +0000
ROA not before:           Thu 08 Dec 2022 12:08:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200732
IP address blocks:        2a0a:6040:b600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f1:a3:33:fb:b9:fd:07:80:6b:c9:38:b6:09:38:18:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  8 12:08:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=70f52ed2780640c260cf56d87b8a23a5871c76ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e8:cd:3a:18:13:4a:85:22:08:2c:ab:80:b6:
                    3e:1b:5d:15:03:8c:c6:d2:fd:cb:0a:c1:17:11:ff:
                    b6:4d:9d:81:1d:4e:0a:4a:28:95:84:e7:82:9b:33:
                    bc:13:78:e5:cb:a8:c9:1c:ea:33:7d:70:d5:08:59:
                    a4:89:fe:74:40:9e:0f:71:fd:7b:e3:67:78:84:38:
                    3c:f6:a8:24:bf:59:59:72:18:fe:be:9a:d5:96:c2:
                    a1:af:bf:a6:f7:4e:2f:74:6b:a5:12:c2:b7:08:f0:
                    79:b1:6a:ec:36:9c:f1:c6:8e:9c:80:e3:4a:b7:d3:
                    a0:c8:17:dd:56:18:ff:b4:7e:f8:57:68:94:5e:d5:
                    68:c2:8a:23:50:02:b3:3c:1d:76:f5:4b:8f:3f:fb:
                    3a:58:8a:df:72:c7:8e:5c:7b:cb:db:dc:c1:c3:93:
                    a6:3a:5b:f4:9e:c1:fa:8d:99:b7:4c:2a:b1:25:e7:
                    9f:4c:da:b0:4b:e0:cf:56:b3:f9:be:86:98:a5:a4:
                    85:8b:8d:45:69:29:dd:f5:5b:f4:24:4b:dd:a3:c0:
                    6f:1c:10:7c:6a:46:86:db:07:20:7e:51:2c:b2:68:
                    59:84:93:10:50:b6:87:e8:eb:b0:25:0c:0d:cf:f9:
                    db:3c:74:b8:cb:76:da:e0:14:0b:31:54:6f:e5:1a:
                    ed:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F5:2E:D2:78:06:40:C2:60:CF:56:D8:7B:8A:23:A5:87:1C:76:EE
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/cPUu0ngGQMJgz1bYe4ojpYccdu4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b600::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:a7:95:ae:31:a4:03:14:46:d9:aa:51:f6:a3:a7:a7:75:0c:
         ba:0c:b5:88:49:0a:d9:c5:e2:58:da:bd:23:b7:73:a0:09:6a:
         fe:6a:4e:c7:ec:ba:b5:a0:39:88:89:40:35:48:dc:3b:23:6a:
         36:59:32:f9:cb:4f:52:c7:80:2a:0b:22:b8:df:43:ee:4f:71:
         b5:aa:d1:44:7d:a7:99:3a:d3:1c:41:4d:a1:db:0b:3d:59:b3:
         4a:a4:3c:72:98:55:4e:e1:5b:68:67:b7:6b:77:c5:70:e9:ed:
         6e:df:a5:3a:ac:83:f7:d7:b8:f5:d9:e5:f8:c1:29:fb:cf:97:
         8f:2a:3f:44:a9:27:a4:84:43:3a:02:eb:4d:55:b7:9b:5c:7c:
         05:31:c7:26:6e:67:6b:ae:eb:fa:85:f2:2b:7e:f9:5f:f0:38:
         aa:ec:31:d4:60:c4:88:61:e0:24:8e:1c:5c:eb:3d:89:5e:80:
         46:93:3a:89:c9:54:c2:cc:df:69:7f:65:ad:8e:97:36:bf:b1:
         73:0b:f0:6d:07:b4:b7:b5:7c:26:75:b3:c6:d7:55:94:58:39:
         ae:7a:d8:a2:f1:bd:60:c2:a4:10:0a:9b:80:7d:55:ad:ac:25:
         ff:22:6d:94:8b:74:7c:d0:3e:39:b2:7b:1b:2a:8f:20:57:b3:
         ff:d2:40:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----