Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hliFfkAkESND_yFmrSzhOuB3KOA.roa
File:                     hliFfkAkESND_yFmrSzhOuB3KOA.roa (raw, json)
Hash identifier:          XlSwUplRPRKXjadnF8ghLNh4akZiGDz+VPygRLrvMLE=
Subject key identifier:   86:58:85:7E:40:24:11:23:43:FF:21:66:AD:2C:E1:3A:E0:77:28:E0
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184AC2451AC364691991A0915BDF43E8BD6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hliFfkAkESND_yFmrSzhOuB3KOA.roa
Signing time:             Fri 25 Nov 2022 00:16:12 +0000
ROA not before:           Fri 25 Nov 2022 00:16:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212276
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ac:24:51:ac:36:46:91:99:1a:09:15:bd:f4:3e:8b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 25 00:16:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8658857e4024112343ff2166ad2ce13ae07728e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a7:8a:c8:f7:ee:37:fe:24:08:5d:e6:cd:74:
                    3e:77:a6:22:f9:63:ab:fb:3d:0f:cf:ee:51:99:25:
                    55:0d:11:b2:8b:41:0e:24:22:11:fd:52:04:d7:a0:
                    a7:80:40:09:10:b9:9b:39:c6:72:81:2f:68:e0:f0:
                    2c:37:6b:25:45:08:80:3a:ce:14:1b:bc:8b:33:55:
                    b6:bb:03:dd:59:ee:e9:4b:51:77:e8:97:6e:57:8b:
                    b2:3e:c6:05:1e:d9:d6:ff:71:44:ab:e3:e7:17:80:
                    9e:af:81:aa:1e:ab:51:01:a1:44:69:d2:b4:4c:f4:
                    01:e6:a2:f6:8c:56:d5:87:bf:d7:aa:0b:55:75:46:
                    82:df:46:4c:c8:7a:30:ed:79:91:38:29:7b:47:3d:
                    83:41:f7:20:39:0a:d3:8c:b4:db:fd:0c:3f:ab:1d:
                    6d:18:06:6a:fa:e5:9b:fd:e3:7d:ba:c8:85:05:52:
                    d7:82:b5:9d:ff:44:df:db:30:db:28:db:14:4b:86:
                    e6:5e:69:6c:6e:b3:9a:bc:57:58:a5:8e:a8:07:fe:
                    b8:d7:81:8a:f6:bb:16:f4:c9:9f:50:cb:cc:00:79:
                    de:5e:3a:98:f7:87:71:84:f2:8c:ab:cc:7c:94:8c:
                    c6:cf:fd:c4:2d:9b:ff:c9:c5:63:db:df:1e:61:3c:
                    a9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:58:85:7E:40:24:11:23:43:FF:21:66:AD:2C:E1:3A:E0:77:28:E0
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hliFfkAkESND_yFmrSzhOuB3KOA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:e2:c8:d3:22:e5:94:a0:3a:20:e9:12:16:09:3d:95:8e:8c:
         55:f2:80:f1:3a:07:8e:a6:08:1a:40:f0:2a:35:fa:36:5d:e9:
         86:64:e9:54:64:c2:4b:f0:7d:f4:9a:f6:37:96:48:41:23:63:
         8e:a3:a9:5e:db:b1:a6:5f:9a:53:9e:d4:69:68:59:d2:04:05:
         67:10:e2:bb:0a:27:d0:32:56:cf:96:42:9d:4b:f5:c6:86:b7:
         1c:2a:a8:d2:f6:6d:ae:eb:3c:c8:3d:f3:c3:8d:a9:a1:c5:f9:
         9c:02:5d:05:79:fa:df:f3:f5:bf:ee:06:12:5a:0d:9b:ca:68:
         9b:33:ba:f4:53:44:e3:3b:a9:58:a3:53:f1:3f:e2:c1:b0:04:
         ae:2a:25:2f:d5:b7:76:63:99:ea:bc:cd:ee:87:53:e5:94:ef:
         76:3c:26:72:29:d5:8c:b8:dc:8c:a6:2e:c8:01:e4:f3:3d:1f:
         85:b0:98:d1:26:5c:1c:e9:1d:db:53:33:f5:09:97:30:4b:37:
         19:b1:3d:2d:24:46:d7:1d:70:7e:22:7c:98:35:0c:76:f5:ca:
         d2:84:dc:7f:5c:15:9e:72:31:d0:14:cd:e2:9d:16:b5:2b:a5:
         c2:a7:ad:a9:c7:b6:27:07:f0:23:4d:a0:b6:4d:39:8f:65:7e:
         84:48:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----