Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/d4aGOsarMuoZ70tIlmDyTXklY70.roa
File:                     d4aGOsarMuoZ70tIlmDyTXklY70.roa (raw, json)
Hash identifier:          RMNauwuuwKnRMws9w5py5v/6WD1X+BFgTKXgvif+bq8=
Subject key identifier:   77:86:86:3A:C6:AB:32:EA:19:EF:4B:48:96:60:F2:4D:79:25:63:BD
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182BCFEE093F396235DED149C9639239B90
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/d4aGOsarMuoZ70tIlmDyTXklY70.roa
Signing time:             Sat 20 Aug 2022 20:43:16 +0000
ROA not before:           Sat 20 Aug 2022 20:43:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203868
IP address blocks:        2a06:a005:d2a::/48 maxlen: 48
                          2a06:a005:15d0::/44 maxlen: 48
                          2a06:1287:900::/40 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:bc:fe:e0:93:f3:96:23:5d:ed:14:9c:96:39:23:9b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 20 20:43:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7786863ac6ab32ea19ef4b489660f24d792563bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:1b:80:f3:be:f9:25:00:9f:3c:1b:49:7f:
                    1d:ef:5a:24:c1:59:d4:6d:83:39:4c:c1:ec:1f:c3:
                    8e:96:cf:ca:04:52:ef:3a:6a:14:4d:6c:0f:f5:34:
                    a0:4f:f4:2c:cf:1f:c0:1f:86:2b:0d:e1:08:d6:f9:
                    cd:2a:07:4c:f5:37:af:a5:e2:8c:8f:c8:ae:c2:c2:
                    fa:8f:7f:91:3b:fb:fa:0a:80:75:e9:2b:83:c2:dd:
                    f1:59:f2:9e:d5:71:42:01:22:f6:d3:9c:d1:f3:36:
                    10:46:76:5e:bb:9d:5d:e2:93:00:1f:01:b2:dc:f0:
                    02:79:b0:a7:44:ee:5c:a6:91:bb:05:e4:59:13:fd:
                    51:7a:79:b6:23:a2:da:b7:99:2e:d1:1b:d8:fc:56:
                    c4:7e:3b:c8:1d:e2:29:16:6e:e1:c8:b9:17:94:83:
                    87:04:1d:59:c6:14:ab:7c:3b:a2:ea:b7:d3:d2:b1:
                    a7:10:1a:c9:bc:65:38:57:a2:e2:b4:96:84:38:8e:
                    9e:c7:ea:fa:23:26:02:2a:58:c7:ce:ba:74:8f:1a:
                    89:48:f0:a6:c7:40:4a:21:b2:e0:86:6d:13:70:98:
                    63:d0:f1:cc:4d:e0:48:05:d7:0c:46:2e:70:eb:6a:
                    e6:fd:36:c3:49:a8:de:d4:82:12:bf:3c:be:a9:5c:
                    8d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:86:86:3A:C6:AB:32:EA:19:EF:4B:48:96:60:F2:4D:79:25:63:BD
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/d4aGOsarMuoZ70tIlmDyTXklY70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:900::/40
                  2a06:a005:d2a::/48
                  2a06:a005:15d0::/44
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:5f:0d:da:73:bd:85:e1:c1:0b:e9:e9:6d:2f:e1:3d:d3:
         7c:cb:d6:c3:3b:ab:52:b1:50:6d:b7:a2:61:ce:fa:ca:e5:03:
         7f:b8:32:b8:ae:aa:b4:4b:07:be:39:17:85:b4:92:45:18:ee:
         1c:b3:3a:30:7c:55:31:70:2b:88:f5:97:11:4d:a4:e8:bf:d6:
         5b:2c:43:4d:85:25:fc:d6:b9:ce:0c:59:d7:e4:2b:dd:00:86:
         a9:8c:b4:a1:93:82:6e:6c:b4:f4:1a:a0:98:2b:10:68:d3:64:
         05:bc:50:4c:bc:f6:14:ad:3f:1f:07:de:7c:72:70:f1:a8:65:
         b5:68:06:77:54:7f:5a:bc:0b:b2:c0:cc:8e:17:0c:97:ee:00:
         1d:c9:ff:b5:1a:ac:02:d0:b8:b9:5c:97:27:7e:10:b3:94:e3:
         7a:6f:79:39:51:11:ba:14:c6:88:01:93:07:06:85:52:70:29:
         f2:13:0e:43:83:b5:5d:01:8b:20:76:0f:aa:f0:d7:72:77:05:
         87:87:57:a8:05:7d:76:21:b0:33:bf:5e:5e:7f:fe:0c:05:43:
         5a:63:17:ed:a9:6e:66:5a:a2:ab:01:93:42:42:fe:ff:e8:f0:
         e9:ea:53:5d:9e:b3:c3:0b:eb:6d:7b:f2:bb:cb:87:30:4a:85:
         77:5b:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----