Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/is6ndYdWUfAbS_Ucub1-mssulPE.roa
File:                     is6ndYdWUfAbS_Ucub1-mssulPE.roa (raw, json)
Hash identifier:          PF7GxtF0g3EJnux0W7GhW2pQkCLRic4D7TMkfNCc9ek=
Subject key identifier:   8A:CE:A7:75:87:56:51:F0:1B:4B:F5:1C:B9:BD:7E:9A:CB:2E:94:F1
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1898C222
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/is6ndYdWUfAbS_Ucub1-mssulPE.roa
Signing time:             Fri 22 Apr 2022 14:02:12 +0000
ROA not before:           Fri 22 Apr 2022 14:02:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208223
IP address blocks:        2a06:a005:4de::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412664354 (0x1898c222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 22 14:02:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8acea775875651f01b4bf51cb9bd7e9acb2e94f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:66:45:d7:b9:bd:72:72:2a:dc:60:e3:61:
                    dd:40:b8:36:02:22:e0:0f:bc:7e:a6:8e:a5:8f:71:
                    f4:5f:29:bd:7d:35:ff:db:a1:ec:f8:5e:e7:f1:e2:
                    4e:df:bf:1b:68:eb:13:02:30:f3:b3:36:15:62:e0:
                    47:75:33:d6:7b:40:85:09:24:ac:98:4d:cc:6b:89:
                    39:e1:ce:23:78:b3:50:56:2c:5d:f6:28:c2:51:f9:
                    eb:41:0c:48:ca:bf:64:a5:cc:44:3b:95:7f:1a:08:
                    1f:de:ca:3a:94:ff:5b:72:89:43:3d:07:30:59:0d:
                    85:5a:37:ca:e9:ed:d9:74:83:76:c2:d6:c8:26:3c:
                    f6:bf:7b:23:ef:20:a2:85:b5:f2:e5:ed:fd:0e:95:
                    a2:93:e4:77:62:8d:74:23:4f:5a:98:bc:49:67:a4:
                    8a:f6:81:cc:36:ca:eb:86:3c:41:8b:8d:4c:27:6d:
                    43:da:aa:a0:15:87:4e:61:3b:3c:06:36:de:52:15:
                    88:a1:1a:bc:49:c7:94:5a:63:98:90:81:c9:78:ba:
                    b3:2b:95:f8:dd:ef:ae:d8:51:d4:10:04:aa:6f:0c:
                    51:18:16:b3:d3:28:2b:e7:2c:63:cf:4e:45:9c:5c:
                    25:a5:18:98:49:a1:63:1f:c3:47:d0:8a:5e:22:c9:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CE:A7:75:87:56:51:F0:1B:4B:F5:1C:B9:BD:7E:9A:CB:2E:94:F1
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/is6ndYdWUfAbS_Ucub1-mssulPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4de::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:2d:9b:06:11:ae:03:71:27:f8:6c:c0:62:77:e1:00:fe:e5:
         7c:03:b0:4f:5e:b2:20:c8:e2:15:57:76:3c:2d:0a:c7:b9:6f:
         63:14:68:45:90:43:c2:19:bb:8b:62:6e:cb:c7:e7:3a:36:3a:
         e7:cb:69:55:96:c2:1f:8b:7a:ce:cb:34:27:c9:f9:52:d7:b0:
         2f:e0:86:87:15:50:9b:d5:06:60:91:f6:98:c0:5a:e2:30:63:
         30:d2:18:e9:08:75:80:f2:80:d4:05:11:74:4d:57:c4:6e:21:
         2c:e5:3a:9f:e5:a9:e8:09:53:76:39:52:dd:19:e0:c0:24:6c:
         8f:a9:80:dc:7e:a0:50:70:c2:46:c6:1a:97:51:8c:da:5f:6e:
         67:7d:d5:13:12:7f:b3:dd:f3:d2:ad:1e:2a:83:fa:50:45:02:
         97:81:5f:ff:cf:d0:ad:81:b4:a0:86:fd:6a:ae:b9:94:16:b8:
         ad:11:9a:c1:82:d0:a5:5a:a6:b7:2b:00:c6:5a:da:98:85:14:
         7f:71:dc:dc:0a:b3:e3:d0:84:3b:fd:3c:52:70:a2:92:e7:9c:
         05:71:50:15:f1:e9:56:96:d6:2f:50:26:b4:99:65:ce:dd:6b:
         93:6a:64:43:61:7c:1e:5b:cd:db:02:9a:08:c5:6a:de:cb:9d:
         b2:60:7e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----