Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dbpbhHe2p8Xr8fvfGMGiYkhFGUQ.roa
File:                     dbpbhHe2p8Xr8fvfGMGiYkhFGUQ.roa (raw, json)
Hash identifier:          V1uwoIb3XRFliXHyx+tiOZHC477gOJBUXgeabdDQ/k4=
Subject key identifier:   75:BA:5B:84:77:B6:A7:C5:EB:F1:FB:DF:18:C1:A2:62:48:45:19:44
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018305171A2415ABC2076A0BA34C738A80A8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dbpbhHe2p8Xr8fvfGMGiYkhFGUQ.roa
Signing time:             Sat 03 Sep 2022 20:42:23 +0000
ROA not before:           Sat 03 Sep 2022 20:42:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206271
IP address blocks:        2a06:a005:437::/48 maxlen: 48
                          2a06:a005:a15::/48 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:05:17:1a:24:15:ab:c2:07:6a:0b:a3:4c:73:8a:80:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  3 20:42:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75ba5b8477b6a7c5ebf1fbdf18c1a26248451944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:96:97:15:a5:fa:70:0e:fa:fe:22:0c:85:
                    cf:3b:8b:3e:af:d0:77:f4:6c:4b:ca:40:73:25:f6:
                    45:39:e2:bb:ce:f1:0f:96:15:76:c4:7f:6f:d2:40:
                    9c:fc:19:22:67:4a:f7:ac:58:ae:6f:84:76:58:85:
                    d6:44:a5:6c:c0:a2:2c:e2:65:53:bd:84:d5:2f:d1:
                    96:51:76:0d:c7:43:8a:e0:20:9f:67:4c:98:ca:07:
                    5b:bb:af:eb:63:bd:b6:ae:0b:3e:e5:77:9f:0d:9f:
                    8f:28:9e:de:a8:c7:47:bf:1f:f2:f4:a0:55:b0:05:
                    59:ed:f8:97:ae:86:e4:b3:3b:66:a9:e6:70:a7:d9:
                    71:5b:de:a9:a1:bb:eb:3f:65:7b:ef:74:42:36:64:
                    6d:b6:06:f4:1f:c4:3a:64:c8:c1:a3:09:c7:f6:44:
                    9c:69:3d:13:85:50:01:2f:63:e9:cb:75:25:48:a2:
                    d5:82:b7:3a:7f:d9:69:df:9a:26:14:1f:c0:10:c3:
                    db:27:8b:82:b0:f0:79:0f:46:3f:c5:d0:1a:78:d9:
                    0d:8e:65:13:f6:d1:8e:6b:60:cc:86:4d:8a:6b:fd:
                    8f:43:79:d8:cc:5b:e3:1c:69:53:49:4c:cf:b9:de:
                    32:b8:b7:6a:49:78:75:2f:31:39:41:04:0f:9c:db:
                    a7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BA:5B:84:77:B6:A7:C5:EB:F1:FB:DF:18:C1:A2:62:48:45:19:44
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dbpbhHe2p8Xr8fvfGMGiYkhFGUQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:437::/48
                  2a06:a005:a15::/48
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:a3:69:dd:4d:33:25:f7:98:66:71:a9:07:75:e7:4e:97:76:
         c4:9d:e8:56:b1:89:04:98:fe:70:99:69:c9:1f:43:a5:eb:a6:
         85:de:05:65:fd:2f:b0:61:b9:72:6a:84:7d:6e:d6:79:80:68:
         ad:e0:ce:f8:b3:8d:69:ea:83:31:14:82:59:98:13:2b:65:3b:
         5e:43:e3:84:c0:cb:38:ea:9a:38:83:a1:39:0f:46:49:a0:68:
         27:e2:44:83:9f:b1:f4:c4:1d:a9:38:99:c8:30:4d:46:23:c3:
         e9:da:20:6c:db:82:d3:9a:bb:ee:6c:76:02:1e:97:9f:aa:69:
         7c:39:8c:c1:16:3f:58:a1:5f:6a:bb:85:bf:de:6d:45:b8:ca:
         a2:ad:e4:22:b3:0c:bb:8b:f9:79:06:c9:e5:8b:81:aa:59:df:
         ed:ce:b5:60:e8:ab:59:4e:a6:2b:1f:6e:44:15:bb:2d:2b:6a:
         18:06:50:0c:a4:76:e0:68:72:a2:53:ea:50:bb:ad:c0:6c:29:
         af:6c:9a:11:27:eb:4e:3e:e9:bd:35:94:81:06:6f:14:6a:e8:
         4d:67:f6:b6:0e:53:ab:09:bc:b8:21:42:cf:27:31:d3:87:d5:
         44:b9:c1:8e:75:41:9b:7a:d6:52:5f:44:3d:6f:43:87:83:b6:
         40:2e:cf:bf
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYMFFxokFavCB2oLo0xzioCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTAzMjA0MjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWJhNWI4NDc3YjZhN2M1ZWJmMWZiZGYxOGMxYTI2MjQ4NDUxOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovqWlxWl+nAO+v4iDIXPO4s+r9B3
9GxLykBzJfZFOeK7zvEPlhV2xH9v0kCc/BkiZ0r3rFiub4R2WIXWRKVswKIs4mVT
vYTVL9GWUXYNx0OK4CCfZ0yYygdbu6/rY722rgs+5XefDZ+PKJ7eqMdHvx/y9KBV
sAVZ7fiXrobksztmqeZwp9lxW96pobvrP2V773RCNmRttgb0H8Q6ZMjBownH9kSc
aT0ThVABL2Ppy3UlSKLVgrc6f9lp35omFB/AEMPbJ4uCsPB5D0Y/xdAaeNkNjmUT
9tGOa2DMhk2Ka/2PQ3nYzFvjHGlTSUzPud4yuLdqSXh1LzE5QQQPnNunBQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHW6W4R3tqfF6/H73xjBomJIRRlEMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvZGJwYmhIZTJwOFhyOGZ2ZkdNR2lZa2hGR1VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgagBQQ3
AwcAKgagBQoVAwcAKgdUwrALMA0GCSqGSIb3DQEBCwUAA4IBAQBCo2ndTTMl95hm
cakHdedOl3bEnehWsYkEmP5wmWnJH0Ol66aF3gVl/S+wYblyaoR9btZ5gGit4M74
s41p6oMxFIJZmBMrZTteQ+OEwMs46po4g6E5D0ZJoGgn4kSDn7H0xB2pOJnIME1G
I8Pp2iBs24LTmrvubHYCHpefqml8OYzBFj9YoV9qu4W/3m1FuMqireQiswy7i/l5
Bsnli4GqWd/tzrVg6KtZTqYrH25EFbstK2oYBlAMpHbgaHKiU+pQu63AbCmvbJoR
J+tOPum9NZSBBm8UauhNZ/a2DlOrCby4IULPJzHTh9VEucGOdUGbetZSX0Q9b0OH
g7ZALs+/
-----END CERTIFICATE-----