Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iyiwGCKBVxJ2dgL2VEtLnRho2GY.roa
File:                     iyiwGCKBVxJ2dgL2VEtLnRho2GY.roa (raw, json)
Hash identifier:          v78oetwkvPAAPAqy3BGUMkq/1sDfbQVA/rxBG07Orzs=
Subject key identifier:   8B:28:B0:18:22:81:57:12:76:76:02:F6:54:4B:4B:9D:18:68:D8:66
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184F0539D0046B44E210C08949380D87DF4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iyiwGCKBVxJ2dgL2VEtLnRho2GY.roa
Signing time:             Thu 08 Dec 2022 06:02:02 +0000
ROA not before:           Thu 08 Dec 2022 06:02:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200766
IP address blocks:        2a0a:6040:c100::/40 maxlen: 48
                          2a06:a005:116b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f0:53:9d:00:46:b4:4e:21:0c:08:94:93:80:d8:7d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  8 06:02:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8b28b01822815712767602f6544b4b9d1868d866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fe:54:d2:60:fe:09:c9:05:7e:ad:2e:32:b3:
                    ba:0c:27:e0:e7:07:3e:72:ff:07:3f:b3:03:77:6f:
                    94:86:47:d5:6b:db:f0:dd:7c:6d:5b:40:c0:87:9e:
                    53:c8:7f:11:4e:1c:64:97:da:9e:b1:7f:01:4f:07:
                    27:35:77:c3:9c:c0:7b:7b:67:b3:75:b2:d1:9f:2a:
                    93:79:50:63:a8:3b:29:03:c9:d2:18:1c:25:6b:ab:
                    cb:e0:8a:cb:ad:40:c8:64:cb:ca:58:0e:ba:36:20:
                    9b:3a:ee:91:3a:f5:0a:0b:dc:86:f8:ba:ad:d4:ab:
                    fe:4b:76:16:12:26:0d:db:fa:3c:6f:cb:2c:fd:48:
                    2e:d2:60:16:cd:55:4f:0b:14:f5:ca:64:8c:0f:bb:
                    ea:63:be:7e:8f:d8:a5:53:0f:92:72:c2:d2:63:c2:
                    af:19:94:cc:26:2d:32:5f:5e:90:39:bc:8f:4b:4b:
                    a8:6a:05:f5:80:c6:4f:15:78:c0:a7:e8:ff:bc:4c:
                    65:14:bb:31:f5:cd:a6:fa:52:9f:55:ae:9e:9e:81:
                    d3:b5:5c:2d:e4:a9:d3:d1:8f:9f:18:42:0a:95:ed:
                    b9:d0:d6:c3:3d:88:9c:68:ae:1f:5c:36:67:d5:8f:
                    c6:9f:3b:52:d1:96:e0:53:46:e5:7d:0d:73:78:1f:
                    93:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:28:B0:18:22:81:57:12:76:76:02:F6:54:4B:4B:9D:18:68:D8:66
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iyiwGCKBVxJ2dgL2VEtLnRho2GY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:116b::/48
                  2a0a:6040:c100::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:20:76:e6:51:ad:af:90:d7:0e:01:ea:45:9f:28:f4:7b:11:
         fc:56:a8:b2:53:9f:20:e4:37:fc:d0:c4:8f:e0:1f:77:d5:d7:
         3d:77:d0:a2:4b:d6:ff:74:f8:23:cf:c7:81:02:ab:37:c9:b2:
         14:d2:38:b5:fd:c5:fa:be:21:00:91:3b:7c:3b:b4:5e:d8:82:
         36:b5:af:2c:09:fe:4e:86:e2:de:68:ca:67:8e:4f:e8:f7:09:
         8e:26:54:06:06:61:3a:ba:dc:d2:b7:3c:b4:eb:20:55:c6:c3:
         8f:e5:b2:a2:de:e0:f1:9a:65:37:08:4f:36:3a:22:d4:68:8a:
         dc:5a:cf:b4:90:08:bb:e9:a2:c5:64:13:98:37:d4:cc:91:32:
         d9:ba:42:a8:04:5d:73:8b:f9:4b:1a:04:8e:1f:b0:43:ab:12:
         f2:49:c3:b8:70:6e:55:e7:40:54:be:6a:6a:c3:fb:c0:ea:20:
         d0:ed:90:96:fe:dc:b8:b5:80:70:be:e3:89:8a:ce:e1:f2:d9:
         92:27:8d:cb:26:ee:53:38:36:1d:0d:db:7f:72:cc:a2:26:0d:
         4a:1b:95:43:f0:7d:68:ce:31:2c:0c:f6:d4:ff:a0:de:e2:95:
         fb:ef:36:19:64:a1:18:b3:97:d1:db:44:9d:d5:82:0b:dd:da:
         a6:c2:43:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----