Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ciRMW8lKiAy1azgUPS0gcWjl2qk.roa
File:                     ciRMW8lKiAy1azgUPS0gcWjl2qk.roa (raw, json)
Hash identifier:          h9yD6wa3DQvKcF16o1P4QiQ4/N5fSF9vOCoDtPZOJB0=
Subject key identifier:   72:24:4C:5B:C9:4A:88:0C:B5:6B:38:14:3D:2D:20:71:68:E5:DA:A9
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01848151B327A47E043EE1761F50CBC1F2AB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ciRMW8lKiAy1azgUPS0gcWjl2qk.roa
Signing time:             Wed 16 Nov 2022 16:42:05 +0000
ROA not before:           Wed 16 Nov 2022 16:42:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201412
IP address blocks:        2a06:a005:cf0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:81:51:b3:27:a4:7e:04:3e:e1:76:1f:50:cb:c1:f2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 16 16:42:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=72244c5bc94a880cb56b38143d2d207168e5daa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:dd:53:07:c2:c2:a8:2a:37:69:bd:b5:55:29:
                    77:d9:a2:9c:bd:ef:b4:cd:15:4e:d1:e8:41:26:b9:
                    7a:c2:5d:9d:4c:82:f2:16:ed:36:21:2c:ad:5e:0a:
                    28:f9:aa:6e:c5:a5:86:d1:33:39:01:38:2f:c9:ae:
                    2e:c0:f0:5b:eb:ac:6b:54:17:f7:fc:e9:44:af:5a:
                    d8:14:3f:03:2d:1f:63:9f:1c:10:6e:c1:2a:f5:6d:
                    d7:36:05:cc:f2:5f:63:f2:ef:5c:a4:c8:49:49:7b:
                    99:fc:74:7e:c8:1a:1f:5e:78:ae:34:7f:04:80:a0:
                    31:e3:28:2b:bf:ba:93:3f:f3:07:b1:bf:1d:12:79:
                    d5:a7:97:01:2f:0d:a9:22:32:5b:1d:6e:d3:b5:ca:
                    10:26:90:88:f8:73:30:48:b7:40:fa:57:75:9d:7c:
                    94:b5:0a:d4:d7:6e:3e:9a:bf:5f:96:da:92:9d:82:
                    74:e4:99:72:b0:89:4d:30:45:f2:26:24:d5:27:ca:
                    42:d2:3b:85:78:9b:aa:6f:ef:1c:70:ca:a6:1c:35:
                    10:f1:bd:4c:4b:96:46:8e:92:ed:6f:a6:b0:42:84:
                    40:7b:2a:f8:c2:ed:dc:41:00:89:ed:1e:6b:9a:ea:
                    2a:fd:e9:4a:98:3a:b5:9a:f3:e1:3f:05:ff:e6:63:
                    81:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:24:4C:5B:C9:4A:88:0C:B5:6B:38:14:3D:2D:20:71:68:E5:DA:A9
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ciRMW8lKiAy1azgUPS0gcWjl2qk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:cf0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0b:9c:fb:db:ee:b5:fe:ca:7c:f2:36:ff:de:5d:50:e6:6b:16:
         c2:9e:50:df:3c:54:74:c6:96:0d:56:2d:1e:2d:91:9d:18:93:
         30:c8:ba:32:ca:b3:95:64:a8:ff:ab:13:4a:2f:26:60:d5:0e:
         b9:2f:eb:46:9f:35:e6:03:94:44:d2:a9:30:19:2b:1c:9a:f4:
         2e:ab:be:01:bb:cc:3a:6c:76:ca:71:ce:54:64:ff:94:b7:91:
         59:6e:71:7f:7c:e9:79:fb:d4:c3:ae:4d:6c:eb:c3:e9:76:5b:
         68:e2:9c:a6:7b:16:2e:58:fa:7e:aa:23:74:a0:a4:61:f5:41:
         7d:b5:1c:cc:8c:d7:ed:51:5d:cb:31:2b:2a:16:6f:b7:3e:58:
         eb:8d:2e:f2:4b:cb:4a:82:31:cb:d9:4b:2e:6d:6d:df:07:37:
         c4:be:f4:6e:30:35:c4:b9:87:9e:ef:e1:8c:e2:3f:63:bd:db:
         06:04:be:f4:74:2e:2c:8f:aa:b6:05:ae:e3:38:dd:bf:79:01:
         46:e3:21:81:6f:c3:03:8f:92:4a:07:a7:54:7d:95:db:fc:1b:
         a0:8c:bd:42:c4:d5:a2:a6:b5:b9:9a:2e:7f:2b:17:6b:47:8a:
         ef:7f:2e:6d:f7:9f:ad:21:e6:3b:43:03:59:8b:39:b4:cb:c7:
         a8:90:fe:db
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYSBUbMnpH4EPuF2H1DLwfKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTE2MTY0MjA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjI0NGM1YmM5NGE4ODBjYjU2YjM4MTQzZDJkMjA3MTY4ZTVkYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA991TB8LCqCo3ab21VSl32aKcve+0
zRVO0ehBJrl6wl2dTILyFu02ISytXgoo+apuxaWG0TM5ATgvya4uwPBb66xrVBf3
/OlEr1rYFD8DLR9jnxwQbsEq9W3XNgXM8l9j8u9cpMhJSXuZ/HR+yBofXniuNH8E
gKAx4ygrv7qTP/MHsb8dEnnVp5cBLw2pIjJbHW7TtcoQJpCI+HMwSLdA+ld1nXyU
tQrU124+mr9fltqSnYJ05JlysIlNMEXyJiTVJ8pC0juFeJuqb+8ccMqmHDUQ8b1M
S5ZGjpLtb6awQoRAeyr4wu3cQQCJ7R5rmuoq/elKmDq1mvPhPwX/5mOBKQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHIkTFvJSogMtWs4FD0tIHFo5dqpMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvY2lSTVc4bEtpQXkxYXpnVVBTMGdjV2psMnFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBQzw
MA0GCSqGSIb3DQEBCwUAA4IBAQALnPvb7rX+ynzyNv/eXVDmaxbCnlDfPFR0xpYN
Vi0eLZGdGJMwyLoyyrOVZKj/qxNKLyZg1Q65L+tGnzXmA5RE0qkwGSscmvQuq74B
u8w6bHbKcc5UZP+Ut5FZbnF/fOl5+9TDrk1s68Ppdlto4pymexYuWPp+qiN0oKRh
9UF9tRzMjNftUV3LMSsqFm+3PljrjS7yS8tKgjHL2UsubW3fBzfEvvRuMDXEuYee
7+GM4j9jvdsGBL70dC4sj6q2Ba7jON2/eQFG4yGBb8MDj5JKB6dUfZXb/BugjL1C
xNWiprW5mi5/KxdrR4rvfy5t95+tIeY7QwNZizm0y8eokP7b
-----END CERTIFICATE-----