Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/d2yxT7gVMZR_Rc-ZtFnCU-YQNPU.roa
File:                     d2yxT7gVMZR_Rc-ZtFnCU-YQNPU.roa (raw, json)
Hash identifier:          VHy9FYxT/AnukA9qyYLgZrlibWoB/qSjKsg8cZ/BhRs=
Subject key identifier:   77:6C:B1:4F:B8:15:31:94:7F:45:CF:99:B4:59:C2:53:E6:10:34:F5
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01821442609790727C03CDD5AFFEDEE2C194
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/d2yxT7gVMZR_Rc-ZtFnCU-YQNPU.roa
Signing time:             Tue 19 Jul 2022 02:21:10 +0000
ROA not before:           Tue 19 Jul 2022 02:21:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211954
IP address blocks:        2a0a:6040::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:14:42:60:97:90:72:7c:03:cd:d5:af:fe:de:e2:c1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 19 02:21:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=776cb14fb81531947f45cf99b459c253e61034f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:fe:53:61:27:a2:e8:36:3b:e7:77:5d:ba:
                    93:01:0a:63:9b:b7:76:19:dd:c8:5d:de:8a:56:90:
                    be:f0:a9:32:2d:4c:a3:6e:ec:22:79:93:32:9c:e0:
                    7d:8a:98:5a:a7:5e:eb:be:aa:56:99:ef:79:42:73:
                    7e:21:5c:1f:57:10:da:05:cd:98:71:f6:0d:b7:8d:
                    6d:00:67:31:fd:f7:3a:e4:cb:99:93:08:01:cd:68:
                    ee:74:40:3b:6d:fb:53:9d:c0:db:3a:df:d6:6b:d2:
                    1b:24:ea:d2:c7:d7:f3:64:5d:6a:d5:73:f7:b6:6e:
                    7d:fe:62:85:26:5b:84:21:b9:ab:26:63:c7:34:0c:
                    11:6f:5e:51:3c:38:74:f1:dc:cc:80:13:5f:2f:90:
                    79:51:f5:51:49:f2:95:ee:14:24:00:13:79:7b:49:
                    f1:3e:bf:60:9d:cb:5f:d1:d5:a8:95:29:9e:7f:1b:
                    6a:ac:c8:f3:97:c5:0f:b0:f6:a9:59:04:99:6f:a4:
                    a3:61:c7:f2:3e:c0:43:7d:b3:bd:d9:15:1b:71:55:
                    60:ec:37:ad:42:89:02:53:06:d7:9f:24:2a:19:68:
                    0d:1c:0d:8e:1d:83:87:fd:d8:03:6d:5b:ff:de:43:
                    7a:62:6a:4b:71:bb:fc:15:8c:1c:85:9b:ed:c2:a0:
                    9a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6C:B1:4F:B8:15:31:94:7F:45:CF:99:B4:59:C2:53:E6:10:34:F5
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/d2yxT7gVMZR_Rc-ZtFnCU-YQNPU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:e4:fc:61:a3:1b:c9:2a:78:a0:e2:47:74:a1:bb:bc:0b:52:
         45:32:14:8a:96:b9:dd:dd:6b:c7:67:b0:be:fd:46:32:9b:da:
         d6:71:f8:1e:06:9d:2e:f8:a3:ec:cb:39:0d:e5:e5:f4:36:d2:
         cf:82:b4:98:d7:7c:e1:25:ce:70:09:a7:21:21:5b:b2:ae:60:
         cd:86:85:ef:8b:50:6d:25:01:7a:fb:cc:09:bd:e5:cf:68:bb:
         fe:3c:16:a7:94:9a:5d:65:90:78:27:94:a3:3f:7d:52:84:64:
         b9:71:27:40:94:7b:69:b7:c9:22:4f:e9:01:a3:9e:b6:b0:39:
         e2:20:8b:ce:7b:91:ba:5c:f8:9a:17:ab:7f:bd:df:2a:de:b3:
         17:34:c8:c4:06:29:7d:e0:cf:86:e5:3e:5c:f9:d4:05:f7:8a:
         b7:1f:78:c8:8c:8f:72:86:df:46:bd:45:6b:b9:04:c9:ca:fc:
         87:26:b0:0d:88:40:9e:42:0f:54:c2:6d:94:2c:57:6d:2e:b8:
         ac:c1:d8:47:83:50:38:40:b6:4b:2c:26:0e:a8:9a:5b:58:64:
         88:48:7e:66:0c:f1:6f:9d:9d:88:7f:ed:54:6d:86:6d:33:c2:
         8a:7d:e7:6c:64:a3:95:da:e5:6e:a6:f6:4c:05:e2:94:79:fc:
         f2:e2:02:0d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYIUQmCXkHJ8A83Vr/7e4sGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzE5MDIyMTEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzZjYjE0ZmI4MTUzMTk0N2Y0NWNmOTliNDU5YzI1M2U2MTAzNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupD+U2Enoug2O+d3XbqTAQpjm7d2
Gd3IXd6KVpC+8KkyLUyjbuwieZMynOB9iphap17rvqpWme95QnN+IVwfVxDaBc2Y
cfYNt41tAGcx/fc65MuZkwgBzWjudEA7bftTncDbOt/Wa9IbJOrSx9fzZF1q1XP3
tm59/mKFJluEIbmrJmPHNAwRb15RPDh08dzMgBNfL5B5UfVRSfKV7hQkABN5e0nx
Pr9gnctf0dWolSmefxtqrMjzl8UPsPapWQSZb6SjYcfyPsBDfbO92RUbcVVg7Det
QokCUwbXnyQqGWgNHA2OHYOH/dgDbVv/3kN6YmpLcbv8FYwchZvtwqCaewIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHdssU+4FTGUf0XPmbRZwlPmEDT1MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvZDJ5eFQ3Z1ZNWlJfUmMtWnRGbkNVLVlRTlBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgpgQDAN
BgkqhkiG9w0BAQsFAAOCAQEAf+T8YaMbySp4oOJHdKG7vAtSRTIUipa53d1rx2ew
vv1GMpva1nH4HgadLvij7Ms5DeXl9DbSz4K0mNd84SXOcAmnISFbsq5gzYaF74tQ
bSUBevvMCb3lz2i7/jwWp5SaXWWQeCeUoz99UoRkuXEnQJR7abfJIk/pAaOetrA5
4iCLznuRulz4mherf73fKt6zFzTIxAYpfeDPhuU+XPnUBfeKtx94yIyPcobfRr1F
a7kEycr8hyawDYhAnkIPVMJtlCxXbS64rMHYR4NQOEC2SywmDqiaW1hkiEh+Zgzx
b52diH/tVG2GbTPCin3nbGSjldrlbqb2TAXilHn88uICDQ==
-----END CERTIFICATE-----