Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jI2NpfsPjLHgRIhPJiSTpmDa9iU.roa
File:                     jI2NpfsPjLHgRIhPJiSTpmDa9iU.roa (raw, json)
Hash identifier:          U0+NUY/HIXtYa8RTRuov4Lzz6nQyw6wzz4cGERn2ojI=
Subject key identifier:   8C:8D:8D:A5:FB:0F:8C:B1:E0:44:88:4F:26:24:93:A6:60:DA:F6:25
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01830E47E45444E054760B63C6E4E0A6436E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jI2NpfsPjLHgRIhPJiSTpmDa9iU.roa
Signing time:             Mon 05 Sep 2022 15:32:16 +0000
ROA not before:           Mon 05 Sep 2022 15:32:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203005
IP address blocks:        2a06:a005:d2a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:0e:47:e4:54:44:e0:54:76:0b:63:c6:e4:e0:a6:43:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  5 15:32:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8c8d8da5fb0f8cb1e044884f262493a660daf625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0b:ef:a6:ef:17:f9:95:34:10:b9:fc:2b:32:
                    6a:f7:34:35:e2:b5:2b:6b:cf:25:70:25:3c:33:16:
                    b4:7f:4d:ed:ae:1e:13:0a:e3:31:72:fe:41:8a:a8:
                    b8:2c:57:04:1e:9d:16:d9:f9:43:c9:bb:a9:a3:b9:
                    74:f0:34:3b:4b:7b:1d:90:6a:a7:80:4d:d1:0f:80:
                    ee:47:02:82:3b:17:98:cb:71:b9:af:f7:d4:56:31:
                    3b:00:27:1a:ee:a0:1c:b3:05:84:a7:cf:7d:17:2f:
                    1f:c3:4b:cd:dd:42:dc:10:28:78:f0:64:89:09:fe:
                    4b:4c:b2:48:d7:17:0d:95:62:55:51:56:fb:fe:b4:
                    45:45:87:cd:a8:1f:13:d9:80:6d:e9:77:72:44:79:
                    13:22:40:d9:9e:07:1a:52:9e:e4:f3:fe:71:38:07:
                    01:fa:e4:63:70:c7:df:df:cc:5b:b4:4f:85:27:61:
                    d5:fd:c5:6b:9f:d8:14:f0:00:8a:63:8f:ed:d2:9f:
                    49:29:9d:3b:99:9b:d9:a4:ec:07:49:92:f4:9a:84:
                    e8:9e:34:7b:10:2f:a9:07:5b:e1:ef:4b:37:6d:0f:
                    f3:7e:88:d2:a3:60:3b:0d:95:f5:13:9e:af:b9:68:
                    4e:b8:c5:fe:9b:0a:c6:0d:30:c7:d5:ae:19:6c:bb:
                    37:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8D:8D:A5:FB:0F:8C:B1:E0:44:88:4F:26:24:93:A6:60:DA:F6:25
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jI2NpfsPjLHgRIhPJiSTpmDa9iU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:3c:bf:84:4b:aa:91:0e:e6:70:5f:49:06:4f:c4:88:3a:
         77:0b:47:54:20:e0:c5:bf:63:5f:88:12:9b:15:57:95:5b:e7:
         6a:68:15:90:31:52:d2:49:f0:e4:b4:f0:71:23:9a:ae:e2:eb:
         a2:fc:23:8a:5b:26:a4:ee:65:e2:c6:c6:27:c4:5d:d0:c3:3a:
         08:7f:ab:24:a3:5e:ba:fa:2d:b5:d3:48:e3:0d:8b:f4:4c:fa:
         f3:a0:c7:25:74:af:84:5f:f1:08:bf:bf:6a:8f:e5:c0:f3:35:
         2c:27:28:a8:89:81:3b:d4:12:25:74:a4:fa:d5:7d:f6:2a:80:
         10:43:0a:d0:6b:ba:4a:5b:67:25:1a:9f:be:58:ef:75:54:8c:
         3b:5d:67:50:11:5f:f0:97:3a:8a:f8:9e:05:78:0b:db:b1:a4:
         36:17:c3:fa:6e:fb:2c:da:1d:1c:80:3f:79:f2:f3:a1:d2:ab:
         10:02:d0:3c:b0:ca:d5:ed:41:dc:7e:a0:67:1d:60:ee:7e:e8:
         cb:bb:00:4f:21:f8:47:cb:fa:84:87:de:a1:89:6b:ba:19:c8:
         41:d9:bf:5d:8d:cc:ad:11:e2:36:4e:12:f9:f3:7a:56:25:22:
         37:7c:2a:3d:26:f0:ed:43:d2:b3:cb:e4:d7:9e:20:99:97:2b:
         02:85:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----