Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hjce8gMc3brw6Xf3zoET1ysTh8I.roa
File:                     hjce8gMc3brw6Xf3zoET1ysTh8I.roa (raw, json)
Hash identifier:          eX2dPLIvkiVYn8N3GBiCv5GNZEyaqH491Rxv5r2/gV4=
Subject key identifier:   86:37:1E:F2:03:1C:DD:BA:F0:E9:77:F7:CE:81:13:D7:2B:13:87:C2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       16D8A92B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hjce8gMc3brw6Xf3zoET1ysTh8I.roa
Signing time:             Wed 23 Mar 2022 18:42:49 +0000
ROA not before:           Wed 23 Mar 2022 18:42:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207941
IP address blocks:        2a06:a000:150::/44 maxlen: 48
                          2a06:a005:b0::/44 maxlen: 48
                          2a06:a005:c0::/44 maxlen: 48
                          2a06:a005:d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383297835 (0x16d8a92b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Mar 23 18:42:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=86371ef2031cddbaf0e977f7ce8113d72b1387c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:01:84:3c:1a:41:cd:e2:ed:b6:c2:d7:a4:
                    ff:95:76:f3:2d:64:35:c6:72:c6:a5:11:89:78:6e:
                    98:60:04:a5:d0:a8:97:06:c8:e4:46:03:34:0a:e1:
                    63:5e:f4:6e:54:da:cb:23:50:1d:3c:a4:36:59:40:
                    93:d7:1c:41:a9:b0:98:77:63:bd:64:90:ee:81:65:
                    80:1e:8d:5d:ae:ad:a6:11:91:89:54:70:85:ae:8e:
                    2b:da:1b:49:a0:71:87:2f:53:8a:99:fd:ac:d3:5c:
                    3d:6f:e0:a1:ac:1f:62:12:77:04:48:d7:e0:d9:21:
                    8d:b7:41:63:db:d3:13:d2:9e:34:2b:59:f4:cc:41:
                    94:d8:31:6d:f4:43:90:99:19:6e:7d:15:ac:90:a9:
                    f9:45:e9:4f:bb:53:59:84:6e:18:1b:bd:aa:5f:1c:
                    fb:a0:ca:1e:ac:08:c2:2f:85:f5:7b:bb:b6:da:c3:
                    85:e9:24:eb:25:0b:30:91:98:c9:13:3a:16:f9:0a:
                    06:d0:ef:9b:6e:6f:64:7e:e6:a1:c0:4a:81:b5:f7:
                    2e:f4:1f:bd:59:15:4d:55:39:27:3e:17:cf:f9:62:
                    66:09:04:eb:24:3c:6f:ff:5c:70:64:3c:8e:1c:fd:
                    01:b7:46:d2:c0:0b:1f:9a:d1:53:54:a0:e5:00:a4:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:37:1E:F2:03:1C:DD:BA:F0:E9:77:F7:CE:81:13:D7:2B:13:87:C2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hjce8gMc3brw6Xf3zoET1ysTh8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a000:150::/44
                  2a06:a005:b0::-2a06:a005:df:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         15:ce:d0:ed:a7:03:38:6e:6e:49:f1:cb:2c:55:3c:c2:f4:ae:
         a8:33:56:76:08:bb:17:5d:c1:e4:4f:34:18:c9:df:ee:20:dc:
         76:1f:3b:61:21:ab:7c:b1:1f:be:52:64:46:1e:3f:23:34:83:
         44:29:c3:08:b4:fa:d9:1b:df:48:53:c0:78:35:2d:fd:e0:48:
         43:eb:98:de:9c:5d:64:44:37:5e:17:4e:67:09:53:a2:79:04:
         ae:8b:4b:a9:84:f1:e2:15:70:c1:53:c2:cb:26:b3:15:f8:a0:
         49:cd:9d:83:8d:26:6f:39:17:85:17:57:a2:13:c5:14:45:25:
         5f:10:19:ab:a9:33:6a:00:32:f5:90:7b:a2:1b:78:ba:e5:93:
         ca:d9:de:65:49:68:0a:75:8c:7a:06:18:4b:71:98:5a:fc:bb:
         ef:db:78:ca:46:2c:82:25:eb:a1:fe:8f:24:16:eb:9b:8b:4f:
         0a:92:3e:6e:08:ed:c7:8c:e9:1d:a2:0c:2a:c0:8b:c4:7f:f2:
         4e:05:67:d1:35:e9:03:35:b9:5a:f3:f7:96:07:16:39:a2:d6:
         27:0d:f0:4b:a9:50:bf:3b:47:11:09:db:55:be:27:00:a0:a2:
         30:10:d0:02:a2:01:14:cb:eb:fb:a6:f3:2f:ef:0e:9c:cd:9b:
         98:54:95:4f
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEFtipKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDMy
MzE4NDI0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODYzNzFlZjIwMzFj
ZGRiYWYwZTk3N2Y3Y2U4MTEzZDcyYjEzODdjMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL6gAYQ8GkHN4u22wtek/5V28y1kNcZyxqURiXhumGAEpdCo
lwbI5EYDNArhY170blTayyNQHTykNllAk9ccQamwmHdjvWSQ7oFlgB6NXa6tphGR
iVRwha6OK9obSaBxhy9Tipn9rNNcPW/goawfYhJ3BEjX4NkhjbdBY9vTE9KeNCtZ
9MxBlNgxbfRDkJkZbn0VrJCp+UXpT7tTWYRuGBu9ql8c+6DKHqwIwi+F9Xu7ttrD
hekk6yULMJGYyRM6FvkKBtDvm25vZH7mocBKgbX3LvQfvVkVTVU5Jz4Xz/liZgkE
6yQ8b/9ccGQ8jhz9AbdG0sALH5rRU1Sg5QCk6B8CAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBSGNx7yAxzduvDpd/fOgRPXKxOHwjAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L2hqY2U4Z01jM2JydzZYZjN6b0VUMXlzVGg4SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwIwQCAAIwHQMHBCoGoAABUDASAwcEKgagBQCwAwcF
KgagBQDAMA0GCSqGSIb3DQEBCwUAA4IBAQAVztDtpwM4bm5J8cssVTzC9K6oM1Z2
CLsXXcHkTzQYyd/uINx2HzthIat8sR++UmRGHj8jNINEKcMItPrZG99IU8B4NS39
4EhD65jenF1kRDdeF05nCVOieQSui0uphPHiFXDBU8LLJrMV+KBJzZ2DjSZvOReF
F1eiE8UURSVfEBmrqTNqADL1kHuiG3i65ZPK2d5lSWgKdYx6BhhLcZha/Lvv23jK
RiyCJeuh/o8kFuubi08Kkj5uCO3HjOkdogwqwIvEf/JOBWfRNekDNbla8/eWBxY5
otYnDfBLqVC/O0cRCdtVvicAoKIwENACogEUy+v7pvMv7w6czZuYVJVP
-----END CERTIFICATE-----