Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hHclYNqL6Hl2pH9JTUU9qTkx0Rs.roa
File:                     hHclYNqL6Hl2pH9JTUU9qTkx0Rs.roa (raw, json)
Hash identifier:          +4JNTUQqbzLdQwbNBP5xvcvGiFDcnWL2xdK068ehG0c=
Subject key identifier:   84:77:25:60:DA:8B:E8:79:76:A4:7F:49:4D:45:3D:A9:39:31:D1:1B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183EFD53CC69A8FCAFC91E87C350C985DB8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hHclYNqL6Hl2pH9JTUU9qTkx0Rs.roa
Signing time:             Wed 19 Oct 2022 10:41:12 +0000
ROA not before:           Wed 19 Oct 2022 10:41:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202559
IP address blocks:        2a06:a005:2010::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ef:d5:3c:c6:9a:8f:ca:fc:91:e8:7c:35:0c:98:5d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 19 10:41:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=84772560da8be87976a47f494d453da93931d11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1d:bb:f1:2b:78:15:85:b8:c6:ac:0c:a7:44:
                    d4:9d:e4:8c:6c:39:1b:6b:f9:b2:7d:5f:3b:3b:1c:
                    7a:44:bf:ba:4c:95:6a:9c:90:12:c0:50:18:a2:99:
                    38:9f:52:be:00:bd:a9:12:d3:69:dd:b2:49:ce:50:
                    5f:fa:47:8f:74:50:06:31:a7:a5:61:77:91:b8:85:
                    ed:c1:a7:5f:40:03:ac:2c:da:10:b0:21:be:e7:fe:
                    a4:42:d6:eb:9b:3c:7c:50:db:2c:99:b4:72:23:1b:
                    0d:40:86:bc:87:39:28:b5:9b:2b:33:fa:5b:65:a9:
                    92:15:d7:5c:e9:28:43:5f:87:03:a7:3f:25:b6:5b:
                    f9:0d:22:09:38:91:03:04:66:c5:cc:da:74:33:98:
                    e5:d3:b4:94:e1:27:fb:63:f2:c1:93:f5:0b:46:de:
                    77:ae:6a:8d:3a:68:42:50:4d:38:99:f0:32:e0:03:
                    41:2c:ad:48:38:fa:92:9a:20:5b:b7:b5:34:8d:d3:
                    af:93:9d:9a:70:c6:fb:e9:c1:09:3a:09:72:e9:7a:
                    d2:6b:cf:e9:58:cd:93:a4:0e:34:1b:61:09:cb:b4:
                    af:cc:6f:51:12:31:23:7e:ca:46:86:3e:c6:84:5f:
                    f4:20:c2:aa:be:4d:b3:eb:2d:1b:d2:ba:c1:75:fd:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:77:25:60:DA:8B:E8:79:76:A4:7F:49:4D:45:3D:A9:39:31:D1:1B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hHclYNqL6Hl2pH9JTUU9qTkx0Rs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2010::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:d7:3c:bb:d5:42:7c:1d:ee:ff:cc:9b:9c:ca:2a:97:3c:5d:
         e7:cf:8e:0e:44:4f:16:61:9e:98:7c:12:6a:61:3d:62:d9:93:
         2c:a3:d5:ae:de:35:7f:a1:e5:83:08:c3:62:f4:dc:97:bb:66:
         90:8e:cb:74:6f:be:6f:ac:75:80:0e:54:22:50:45:f2:15:3e:
         df:88:59:7d:5e:1c:ab:00:c2:4e:3a:4a:b1:41:fa:91:f4:3b:
         de:4c:e2:96:55:88:8e:34:5e:ee:fd:ce:08:b6:2f:14:9d:c7:
         d4:29:46:3d:7f:77:90:cd:a7:b6:b3:d2:77:e6:eb:33:71:d5:
         97:c8:25:d7:71:04:fd:33:d2:a1:a8:d5:09:0b:3c:dd:97:5d:
         4a:c1:8b:e6:07:b3:39:5c:a3:b2:c3:38:64:72:6b:2c:22:a9:
         88:7a:a9:39:05:e0:59:b1:e0:c7:04:00:cc:fc:84:12:d1:58:
         c1:01:3d:31:a5:da:f0:68:a2:d2:9e:a9:72:eb:1e:7b:ea:a8:
         ee:95:03:38:02:a3:c9:12:ba:8d:58:b5:6a:6c:3b:53:81:85:
         f2:1f:c6:02:5e:b4:db:14:83:e1:d1:27:5a:0b:eb:36:a5:ba:
         67:56:e7:8b:00:55:75:b4:14:09:c4:91:d0:de:d8:88:69:a9:
         57:8e:c5:22
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYPv1TzGmo/K/JHofDUMmF24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDE5MTA0MTEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDc3MjU2MGRhOGJlODc5NzZhNDdmNDk0ZDQ1M2RhOTM5MzFkMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx278St4FYW4xqwMp0TUneSMbDkb
a/myfV87Oxx6RL+6TJVqnJASwFAYopk4n1K+AL2pEtNp3bJJzlBf+kePdFAGMael
YXeRuIXtwadfQAOsLNoQsCG+5/6kQtbrmzx8UNssmbRyIxsNQIa8hzkotZsrM/pb
ZamSFddc6ShDX4cDpz8ltlv5DSIJOJEDBGbFzNp0M5jl07SU4Sf7Y/LBk/ULRt53
rmqNOmhCUE04mfAy4ANBLK1IOPqSmiBbt7U0jdOvk52acMb76cEJOgly6XrSa8/p
WM2TpA40G2EJy7SvzG9REjEjfspGhj7GhF/0IMKqvk2z6y0b0rrBdf0+ZwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIR3JWDai+h5dqR/SU1FPak5MdEbMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvaEhjbFlOcUw2SGwycEg5SlRVVTlxVGt4MFJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBSAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB41zy71UJ8He7/zJucyiqXPF3nz44ORE8WYZ6Y
fBJqYT1i2ZMso9Wu3jV/oeWDCMNi9NyXu2aQjst0b75vrHWADlQiUEXyFT7fiFl9
XhyrAMJOOkqxQfqR9DveTOKWVYiONF7u/c4Iti8UncfUKUY9f3eQzae2s9J35usz
cdWXyCXXcQT9M9KhqNUJCzzdl11KwYvmB7M5XKOywzhkcmssIqmIeqk5BeBZseDH
BADM/IQS0VjBAT0xpdrwaKLSnqly6x576qjulQM4AqPJErqNWLVqbDtTgYXyH8YC
XrTbFIPh0SdaC+s2pbpnVueLAFV1tBQJxJHQ3tiIaalXjsUi
-----END CERTIFICATE-----