Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ixlLelNLhzIII1zsqdGrbtKMQJg.roa
File:                     ixlLelNLhzIII1zsqdGrbtKMQJg.roa (raw, json)
Hash identifier:          Eis7EH0QMPb+JuGMWMmx/YUQ+jepghHWLL7TFvtTvcw=
Subject key identifier:   8B:19:4B:7A:53:4B:87:32:08:23:5C:EC:A9:D1:AB:6E:D2:8C:40:98
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01849D5D71994E3DC5E764804863CA68FA09
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ixlLelNLhzIII1zsqdGrbtKMQJg.roa
Signing time:             Tue 22 Nov 2022 03:24:17 +0000
ROA not before:           Tue 22 Nov 2022 03:24:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201733
IP address blocks:        2a06:a005:23c0::/44 maxlen: 48
                          2a06:a005:2360::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:9d:5d:71:99:4e:3d:c5:e7:64:80:48:63:ca:68:fa:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 22 03:24:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8b194b7a534b873208235ceca9d1ab6ed28c4098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:00:19:98:17:fe:96:4d:32:37:b3:7f:c7:7e:
                    07:c1:47:eb:2a:ea:a5:ab:aa:71:84:c0:77:85:fd:
                    67:cf:a7:73:98:76:e7:9f:83:46:21:2e:fb:b3:eb:
                    6c:d4:5c:de:78:4f:5c:76:1c:42:44:b7:16:e1:a0:
                    e7:d7:3b:dd:77:80:6c:e2:a3:01:0b:6e:fe:42:da:
                    fc:d0:ff:9f:24:69:41:49:7e:fd:a9:0e:fa:6d:24:
                    c1:39:15:84:63:bd:a8:6a:0d:6d:90:d2:fc:6b:d9:
                    39:d5:b4:11:1f:ce:09:8e:7c:94:96:e7:cf:43:b2:
                    5e:f2:c1:71:52:55:4f:7f:9e:62:2b:24:51:76:be:
                    f9:03:ad:6b:98:1a:47:ad:68:da:c9:01:b4:c6:bf:
                    12:74:0c:32:16:b5:83:6b:34:b0:6a:2c:8d:e8:04:
                    fe:87:5a:60:fd:49:c8:74:19:85:06:14:16:3b:af:
                    e0:72:01:1b:72:7d:d9:42:25:15:ac:65:a8:a5:2e:
                    0b:f5:1b:21:7f:4d:18:e2:66:04:28:b8:16:42:d1:
                    a5:46:24:40:8a:c5:77:17:ee:e0:de:30:2c:f3:bf:
                    a4:b7:e6:62:da:e0:7b:9b:5a:f1:b7:56:97:16:3b:
                    b9:fb:0c:75:f1:1f:5b:53:d7:40:46:ad:6d:dc:85:
                    2c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:19:4B:7A:53:4B:87:32:08:23:5C:EC:A9:D1:AB:6E:D2:8C:40:98
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ixlLelNLhzIII1zsqdGrbtKMQJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2360::/44
                  2a06:a005:23c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:79:48:6c:c1:8b:fe:42:34:79:19:29:d7:2b:d4:22:17:a3:
         68:f6:88:14:52:99:b2:d8:e7:34:07:43:b2:38:02:22:c6:0b:
         18:b0:1e:20:24:1f:d7:22:c7:9a:44:98:c8:c4:16:ed:5a:c5:
         86:7d:ce:a6:dc:86:37:8a:b9:70:e1:d4:fd:97:51:68:cb:e6:
         a0:53:f0:88:25:21:fc:d8:f1:48:58:0a:2f:e9:45:11:be:d9:
         ea:b1:35:54:8e:41:ed:d8:bb:1f:8f:16:e5:71:e5:25:2a:9d:
         c1:8d:f1:56:e0:e9:3d:d3:ec:92:00:43:08:86:92:ab:02:4a:
         06:34:f7:66:d4:79:5a:7a:97:99:d4:21:3d:8d:9f:3b:f6:c5:
         bc:a9:63:4c:12:d7:e9:2b:4f:f7:fa:dc:da:35:ae:5e:74:cc:
         93:ae:85:52:3b:b6:70:2a:6f:ae:44:fc:34:c1:fc:4c:df:5f:
         00:49:54:7c:2e:c7:8e:38:bc:ec:a0:0d:78:24:99:62:fb:ba:
         2d:53:9c:9f:f8:82:49:ab:ce:43:37:07:5d:9d:70:4f:84:c1:
         e7:7c:f6:ec:24:bc:44:f5:52:c3:7f:e1:07:48:d4:02:74:4f:
         c8:77:68:7c:44:37:15:00:c9:87:9c:8d:23:e6:99:9a:a8:2b:
         1c:79:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----