Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iYjyVkdDEEW4emY5wzVCTUrdXxs.roa
File:                     iYjyVkdDEEW4emY5wzVCTUrdXxs.roa (raw, json)
Hash identifier:          PKRSJrjm8bZEt46ItHQjUArmzp5gv8lYoAzrhzj08qg=
Subject key identifier:   89:88:F2:56:47:43:10:45:B8:7A:66:39:C3:35:42:4D:4A:DD:5F:1B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183F992D3768ECBED27365D09B497AC961B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iYjyVkdDEEW4emY5wzVCTUrdXxs.roa
Signing time:             Fri 21 Oct 2022 08:04:52 +0000
ROA not before:           Fri 21 Oct 2022 08:04:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202255
IP address blocks:        2a06:a005:1503::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f9:92:d3:76:8e:cb:ed:27:36:5d:09:b4:97:ac:96:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 21 08:04:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8988f25647431045b87a6639c335424d4add5f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ac:9e:89:ab:9f:eb:a8:62:5f:a7:81:07:52:
                    9d:eb:fd:bf:9a:2a:89:4a:02:61:61:24:fa:0d:f1:
                    20:b2:90:b1:36:5c:71:87:08:62:56:07:d9:40:35:
                    24:1e:4d:ca:d3:fb:21:1d:b6:1e:ba:f9:e5:e4:fa:
                    6b:f5:f4:29:75:86:1c:11:5b:99:91:50:4f:37:64:
                    db:87:8c:1b:eb:6b:59:11:eb:bd:a3:5e:6f:03:e3:
                    66:9b:a7:ed:96:75:84:5d:6a:c2:04:ea:3c:77:58:
                    8e:d1:94:d3:33:88:a9:ac:f3:8a:11:56:86:55:06:
                    d7:fe:0c:3b:7e:04:1f:d0:2b:27:cd:ee:44:42:65:
                    41:28:fb:16:ae:48:b2:b4:35:7c:46:9c:8b:54:8f:
                    a5:8c:48:05:3d:a6:47:d2:2a:48:a9:9e:c0:c3:44:
                    65:b9:34:2c:4d:1e:03:48:dc:3f:1f:4a:7b:0a:70:
                    06:6c:ae:4c:83:96:c1:4b:3e:58:a0:fc:ab:9c:7e:
                    cc:bf:14:95:c0:34:dc:ce:a7:bf:ce:45:b7:81:c2:
                    3d:6e:1c:e5:82:2e:20:57:fa:4a:00:c8:1b:10:a2:
                    b9:b5:d9:36:24:a4:ce:4b:43:60:08:02:92:f7:ec:
                    0b:59:cf:85:9d:23:2e:93:eb:e6:54:55:29:0c:51:
                    2f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:88:F2:56:47:43:10:45:B8:7A:66:39:C3:35:42:4D:4A:DD:5F:1B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iYjyVkdDEEW4emY5wzVCTUrdXxs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1503::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:55:c9:f5:98:3d:db:e6:12:0e:36:d9:ed:56:9f:09:f3:e8:
         c4:b7:aa:0d:34:87:41:a9:d0:16:d0:1b:90:e8:f4:e7:3a:4b:
         38:ec:15:16:31:89:ad:c3:dc:5e:cc:f6:b7:48:b3:76:2d:56:
         e3:f9:12:e2:43:a6:8c:1f:fd:cd:99:21:04:a8:6a:20:da:c6:
         52:a3:5b:57:26:66:31:9d:f0:9f:a6:88:7f:e1:df:4f:1e:97:
         4d:67:df:1c:c3:69:c2:ae:07:98:05:c1:5e:75:32:cd:00:5d:
         3a:a7:68:b9:1e:a5:65:8f:e6:88:69:db:46:eb:73:0f:ef:db:
         35:52:e5:1e:5f:12:fd:64:92:69:c4:8e:ee:89:6e:15:4c:e6:
         5f:c5:5b:ae:83:75:42:a3:01:f6:a3:29:64:95:59:ab:b8:14:
         e3:2e:4f:93:e6:e3:3b:14:96:2d:59:e5:93:52:13:84:bc:00:
         25:78:e6:f9:3c:91:99:87:5f:fd:35:ed:3d:59:3e:35:70:93:
         fc:70:b1:fd:3a:ea:f1:0b:12:fb:89:92:c7:ab:fc:07:8b:5a:
         14:87:ff:ef:80:8e:7b:f6:b6:97:93:24:b3:7f:71:9f:dc:bb:
         da:51:e8:85:eb:8d:1f:e2:f2:ab:91:f9:d9:bc:aa:7a:89:83:
         04:e9:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----