Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hhnNaZZ2VZnOjUdSJvCdTnu2OQw.roa
File:                     hhnNaZZ2VZnOjUdSJvCdTnu2OQw.roa (raw, json)
Hash identifier:          DOeujsZ34yJKIJIZ4me+fkVWI7Qpm6Iofa3hQlfgDlI=
Subject key identifier:   86:19:CD:69:96:76:55:99:CE:8D:47:52:26:F0:9D:4E:7B:B6:39:0C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181F940C2648970FDAB79160F1F526863F0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hhnNaZZ2VZnOjUdSJvCdTnu2OQw.roa
Signing time:             Wed 13 Jul 2022 20:29:39 +0000
ROA not before:           Wed 13 Jul 2022 20:29:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23428
IP address blocks:        2a06:a005:a17::/48 maxlen: 48
                          2a06:a005:1180::/44 maxlen: 48
                          2a06:a005:d20::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f9:40:c2:64:89:70:fd:ab:79:16:0f:1f:52:68:63:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 13 20:29:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8619cd6996765599ce8d475226f09d4e7bb6390c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:de:2f:98:02:49:5f:da:c0:b5:f0:a4:00:26:
                    08:69:fd:d5:ad:38:9b:c8:89:88:30:57:ef:a5:5f:
                    c9:ec:fa:58:1d:0c:69:74:3c:07:7a:f6:e9:e0:c0:
                    2d:a1:98:87:f6:c5:f7:ec:05:05:48:52:44:12:82:
                    a0:a4:44:b1:e7:f3:19:cb:ab:34:1d:c1:b0:6b:48:
                    01:31:f8:95:45:00:39:7f:83:14:cc:4b:38:ac:a6:
                    79:56:2f:62:9d:eb:e6:48:47:11:c3:c7:21:ed:f4:
                    be:1a:a8:cd:46:ab:40:45:e0:fd:dd:09:25:da:0c:
                    b3:05:aa:20:8e:42:03:91:98:90:7e:7b:c1:61:43:
                    1d:b1:81:cf:64:fd:91:0c:82:9f:53:86:4a:c0:44:
                    81:a7:bd:90:3f:20:f6:56:ed:fd:2a:65:41:83:eb:
                    24:e9:c3:23:86:5f:71:ba:6a:48:3a:eb:7c:5d:a6:
                    75:b9:29:d5:06:ba:46:0e:25:98:1c:1b:c4:c7:a1:
                    33:06:02:8d:ec:35:58:bc:41:6c:4d:7b:3e:1c:69:
                    99:8d:cd:93:1e:e5:38:69:2f:a0:00:ba:fe:5f:15:
                    cd:46:2c:6f:a6:52:7f:aa:80:56:3f:05:89:df:0c:
                    26:a1:81:3c:47:86:59:29:17:3b:2e:fa:eb:76:a5:
                    4d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:19:CD:69:96:76:55:99:CE:8D:47:52:26:F0:9D:4E:7B:B6:39:0C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hhnNaZZ2VZnOjUdSJvCdTnu2OQw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a17::/48
                  2a06:a005:d20::/48
                  2a06:a005:1180::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:fd:c6:a9:4b:20:44:e2:d8:1d:7f:04:2a:ee:1c:91:da:97:
         24:0c:88:ac:89:39:7f:9e:1e:60:ba:bf:24:45:b4:92:9e:56:
         d9:3c:46:64:62:1e:e2:d3:cc:51:d4:ac:70:06:7c:06:a2:46:
         80:a2:ee:93:57:8b:2e:48:49:96:8e:d0:7b:9a:b9:0e:db:38:
         a5:0d:15:77:5a:6a:a8:cc:35:e3:7e:57:d5:0c:2f:b9:af:4b:
         cf:c1:0a:3d:16:58:f0:9c:f1:ee:85:6b:4b:bd:c1:f4:e6:ef:
         62:a6:44:65:cc:09:5a:d1:e1:5a:9b:f8:8a:f6:91:77:bc:0d:
         b3:d7:48:29:23:2f:5c:60:c1:cd:af:a2:e1:a2:73:d5:b9:a4:
         ee:45:7e:a4:c0:89:a3:af:13:41:6a:a7:de:89:07:62:c4:7d:
         21:df:45:bd:58:68:91:10:9c:d7:8d:03:b0:79:e9:32:ec:43:
         c3:0f:50:ee:84:f1:58:eb:34:4a:72:9b:94:1f:6f:39:44:fe:
         d1:9b:a8:cf:9a:89:4e:aa:15:a1:b7:5f:79:fb:f4:2a:d2:41:
         e9:99:20:ee:b0:5f:1a:ac:6f:52:05:98:91:69:71:cc:21:22:
         de:c9:55:0e:51:7e:cf:d5:e0:0f:57:97:63:0a:a3:e4:57:a4:
         85:cd:89:58
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYH5QMJkiXD9q3kWDx9SaGPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzEzMjAyOTM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjE5Y2Q2OTk2NzY1NTk5Y2U4ZDQ3NTIyNmYwOWQ0ZTdiYjYzOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN4vmAJJX9rAtfCkACYIaf3VrTib
yImIMFfvpV/J7PpYHQxpdDwHevbp4MAtoZiH9sX37AUFSFJEEoKgpESx5/MZy6s0
HcGwa0gBMfiVRQA5f4MUzEs4rKZ5Vi9inevmSEcRw8ch7fS+GqjNRqtAReD93Qkl
2gyzBaogjkIDkZiQfnvBYUMdsYHPZP2RDIKfU4ZKwESBp72QPyD2Vu39KmVBg+sk
6cMjhl9xumpIOut8XaZ1uSnVBrpGDiWYHBvEx6EzBgKN7DVYvEFsTXs+HGmZjc2T
HuU4aS+gALr+XxXNRixvplJ/qoBWPwWJ3wwmoYE8R4ZZKRc7LvrrdqVNVwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIYZzWmWdlWZzo1HUibwnU57tjkMMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvaGhuTmFaWjJWWm5PalVkU0p2Q2RUbnUyT1F3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgagBQoX
AwcAKgagBQ0gAwcEKgagBRGAMA0GCSqGSIb3DQEBCwUAA4IBAQCC/capSyBE4tgd
fwQq7hyR2pckDIisiTl/nh5gur8kRbSSnlbZPEZkYh7i08xR1KxwBnwGokaAou6T
V4suSEmWjtB7mrkO2zilDRV3WmqozDXjflfVDC+5r0vPwQo9FljwnPHuhWtLvcH0
5u9ipkRlzAla0eFam/iK9pF3vA2z10gpIy9cYMHNr6LhonPVuaTuRX6kwImjrxNB
aqfeiQdixH0h30W9WGiREJzXjQOweeky7EPDD1DuhPFY6zRKcpuUH285RP7Rm6jP
molOqhWht195+/Qq0kHpmSDusF8arG9SBZiRaXHMISLeyVUOUX7P1eAPV5djCqPk
V6SFzYlY
-----END CERTIFICATE-----