Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hivtu7xasLhx0iBvtu4YBc5o94c.roa
File:                     hivtu7xasLhx0iBvtu4YBc5o94c.roa (raw, json)
Hash identifier:          YBD8MWbs3fZE/9YmFdU2VXnN0dr8LufrwFW96YgYkr8=
Subject key identifier:   86:2B:ED:BB:BC:5A:B0:B8:71:D2:20:6F:B6:EE:18:05:CE:68:F7:87
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01840F592E87AA10E4B5D012E108B9A51836
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hivtu7xasLhx0iBvtu4YBc5o94c.roa
Signing time:             Tue 25 Oct 2022 13:33:33 +0000
ROA not before:           Tue 25 Oct 2022 13:33:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201938
IP address blocks:        2a06:a005:5a2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0f:59:2e:87:aa:10:e4:b5:d0:12:e1:08:b9:a5:18:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 25 13:33:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=862bedbbbc5ab0b871d2206fb6ee1805ce68f787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bb:b1:68:97:4a:8a:87:31:7b:a3:3a:ec:97:
                    d4:9e:0b:e4:c0:45:46:2a:b0:e7:5a:c2:50:f1:48:
                    71:f5:26:07:04:59:62:49:ee:85:12:50:51:fe:cc:
                    cd:a4:60:1e:d4:f7:01:e0:f9:c3:c5:ca:64:1d:00:
                    37:7e:9c:04:03:55:1a:95:53:a2:c3:96:0d:9b:33:
                    38:5b:0e:48:95:4a:73:9b:04:41:2e:48:06:1e:e1:
                    ad:c4:aa:03:9e:c3:e0:e7:92:f4:f9:0b:93:ad:b2:
                    7e:29:ce:08:68:26:d3:a2:5a:78:2e:f8:e6:74:17:
                    ef:c0:cb:52:09:cf:b9:57:45:3b:1c:35:e5:b7:8c:
                    b3:de:21:fb:2a:91:e3:98:08:38:5d:5c:f9:f7:81:
                    be:72:5a:b8:49:fa:34:7c:00:9b:f0:98:37:cd:55:
                    af:03:83:dc:e1:38:4c:44:97:4c:c1:b2:2d:5e:df:
                    37:ca:2f:88:46:14:af:ce:6b:2f:29:ae:9b:18:de:
                    b9:23:fe:6d:b2:56:5e:c9:19:65:28:7b:ac:af:ed:
                    02:5c:85:a0:20:40:48:89:45:4e:9f:ce:0f:07:ff:
                    11:9e:0f:99:c4:16:ca:86:23:4c:70:2e:1c:64:5e:
                    18:ef:e2:42:38:76:d4:4c:c6:97:5b:28:5a:89:9a:
                    ab:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2B:ED:BB:BC:5A:B0:B8:71:D2:20:6F:B6:EE:18:05:CE:68:F7:87
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hivtu7xasLhx0iBvtu4YBc5o94c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5a2::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:be:fb:c7:38:17:2f:e9:b9:88:9a:17:86:95:49:d4:03:23:
         d6:5b:4c:38:1d:73:0e:33:d2:4a:d7:22:7d:c3:cf:88:0e:72:
         52:2f:5a:9a:07:ba:a4:09:37:f2:66:c6:37:51:ff:3b:bb:a9:
         c0:0f:f5:3b:87:96:5e:61:0a:f8:1e:91:02:e2:c0:4e:4b:b1:
         7f:31:a9:de:ac:c8:cf:c1:2a:e4:1d:69:c1:54:b1:8a:a8:06:
         cc:ea:17:c4:b9:5d:c2:aa:09:5b:00:1a:63:d7:13:98:2f:7f:
         56:6f:69:80:35:69:3e:2d:8d:9f:88:e4:d0:06:36:f4:c3:99:
         db:58:e5:f4:35:fb:06:41:b5:4d:b8:71:4f:35:9c:50:55:7a:
         14:02:84:f1:f9:3d:8b:47:58:44:de:4a:02:c2:41:21:e8:b0:
         87:f9:34:f5:1d:9b:c5:5d:1b:84:19:f4:87:d7:26:40:d6:6c:
         0d:7a:57:ee:67:c6:0d:80:c6:81:8a:8d:62:8a:51:05:02:c2:
         87:00:b9:3c:64:e6:6f:d2:91:c7:e2:cf:f6:db:d3:dc:39:41:
         d3:e3:39:b7:e2:32:1d:cc:87:32:d9:61:b0:f2:96:e7:e0:28:
         00:4a:5c:36:d1:3c:ee:67:68:cd:a5:90:04:35:8c:4d:eb:63:
         87:46:f8:cc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYQPWS6HqhDktdAS4Qi5pRg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDI1MTMzMzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjJiZWRiYmJjNWFiMGI4NzFkMjIwNmZiNmVlMTgwNWNlNjhmNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLuxaJdKiocxe6M67JfUngvkwEVG
KrDnWsJQ8Uhx9SYHBFliSe6FElBR/szNpGAe1PcB4PnDxcpkHQA3fpwEA1UalVOi
w5YNmzM4Ww5IlUpzmwRBLkgGHuGtxKoDnsPg55L0+QuTrbJ+Kc4IaCbTolp4Lvjm
dBfvwMtSCc+5V0U7HDXlt4yz3iH7KpHjmAg4XVz594G+clq4Sfo0fACb8Jg3zVWv
A4Pc4ThMRJdMwbItXt83yi+IRhSvzmsvKa6bGN65I/5tslZeyRllKHusr+0CXIWg
IEBIiUVOn84PB/8Rng+ZxBbKhiNMcC4cZF4Y7+JCOHbUTMaXWyhaiZqriwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIYr7bu8WrC4cdIgb7buGAXOaPeHMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvaGl2dHU3eGFzTGh4MGlCdnR1NFlCYzVvOTRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQWi
MA0GCSqGSIb3DQEBCwUAA4IBAQB8vvvHOBcv6bmImheGlUnUAyPWW0w4HXMOM9JK
1yJ9w8+IDnJSL1qaB7qkCTfyZsY3Uf87u6nAD/U7h5ZeYQr4HpEC4sBOS7F/Mane
rMjPwSrkHWnBVLGKqAbM6hfEuV3CqglbABpj1xOYL39Wb2mANWk+LY2fiOTQBjb0
w5nbWOX0NfsGQbVNuHFPNZxQVXoUAoTx+T2LR1hE3koCwkEh6LCH+TT1HZvFXRuE
GfSH1yZA1mwNelfuZ8YNgMaBio1iilEFAsKHALk8ZOZv0pHH4s/229PcOUHT4zm3
4jIdzIcy2WGw8pbn4CgASlw20TzuZ2jNpZAENYxN62OHRvjM
-----END CERTIFICATE-----