Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m3fXedFj9f6Q4e42_X4-V7Dlvxw.roa
File:                     m3fXedFj9f6Q4e42_X4-V7Dlvxw.roa (raw, json)
Hash identifier:          xCymorzsUGX+NMpJLOokoRFhTO0wtuQvWWcrx1W1OgA=
Subject key identifier:   9B:77:D7:79:D1:63:F5:FE:90:E1:EE:36:FD:7E:3E:57:B0:E5:BF:1C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018210F9ECC6DB163007BB804A2CF4D2E792
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m3fXedFj9f6Q4e42_X4-V7Dlvxw.roa
Signing time:             Mon 18 Jul 2022 11:03:10 +0000
ROA not before:           Mon 18 Jul 2022 11:03:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206290
IP address blocks:        2a06:a005:1276::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:10:f9:ec:c6:db:16:30:07:bb:80:4a:2c:f4:d2:e7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 18 11:03:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b77d779d163f5fe90e1ee36fd7e3e57b0e5bf1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bc:12:41:18:96:9e:e9:d6:ef:f1:a1:81:44:
                    75:6e:1d:39:16:6d:19:3b:43:68:4f:5d:e4:af:c9:
                    ce:e6:6b:bf:f9:0d:ff:3b:9e:a5:49:9e:dc:ce:50:
                    5e:31:6e:f5:22:ad:f1:8d:04:df:ae:f7:78:ef:f8:
                    a2:d1:b3:c2:63:78:2f:94:8a:bd:2a:cf:50:31:37:
                    ff:05:3c:79:2d:28:82:5f:75:88:85:5f:cd:c7:18:
                    b4:7d:3c:61:a9:3e:24:a6:b3:1d:cd:11:66:d5:fa:
                    59:3f:a4:5a:d4:57:b4:c1:87:77:75:a7:51:56:ac:
                    b7:09:c9:1a:29:a4:fe:17:9c:15:58:e5:ac:97:5e:
                    24:9d:7a:51:ed:be:35:93:8c:da:c0:05:b2:ae:12:
                    49:c3:55:24:d7:06:b9:7d:d8:c7:a7:50:6d:62:f3:
                    89:9d:b7:49:23:6c:ad:1c:3c:a1:24:65:c4:04:72:
                    ee:fe:d4:27:8a:40:10:c1:bc:4f:ef:06:0d:70:d4:
                    bd:90:fd:b3:c8:6d:a7:02:d2:d1:7d:2f:0e:45:02:
                    47:28:ff:4f:c9:bf:2e:fa:ac:de:00:e7:c9:04:10:
                    0c:aa:73:23:59:98:c7:6e:77:7f:1e:92:b7:ca:23:
                    1b:3b:8e:18:cc:4d:80:ac:59:76:f7:57:0f:04:69:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:77:D7:79:D1:63:F5:FE:90:E1:EE:36:FD:7E:3E:57:B0:E5:BF:1C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m3fXedFj9f6Q4e42_X4-V7Dlvxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1276::/47

    Signature Algorithm: sha256WithRSAEncryption
         51:17:03:ab:0a:29:ed:a9:2e:78:62:3c:0f:ce:ac:21:57:7b:
         53:4b:06:fc:e4:3f:de:9a:47:e2:3b:cd:aa:0d:44:62:a9:8f:
         b6:8b:b6:f6:7f:b9:51:9d:30:ef:e9:71:73:2d:32:8f:53:89:
         98:f1:c7:5c:fe:a3:7e:6d:6c:4f:f9:2a:37:b8:18:ad:84:55:
         1b:e8:d4:91:36:9e:d0:f1:90:20:84:4b:f7:74:38:f8:77:0c:
         f4:a0:31:f2:aa:28:c4:f5:4a:9d:3e:e3:d3:17:2e:b0:ee:99:
         26:f6:1e:5a:03:aa:e2:8b:68:3c:5d:be:03:e5:52:3b:95:16:
         3c:c4:21:dc:8f:9d:27:2d:88:90:3f:96:84:16:be:74:54:40:
         d7:30:f9:4d:78:b2:1a:24:be:69:44:f1:45:31:bc:f9:49:1a:
         25:9f:ba:d3:64:3d:c6:50:a9:f1:6d:ba:e7:22:10:cd:dd:93:
         fc:3c:0d:a2:a9:b4:22:78:ca:b6:40:fe:03:26:a4:2e:e0:54:
         56:e4:a5:b2:7a:9b:aa:fe:35:68:75:b0:cd:3c:e4:3f:39:d6:
         92:42:bb:2c:43:86:6d:78:65:5f:44:21:ea:5e:12:e6:b4:77:
         80:b3:2f:fd:1b:18:dc:81:5b:e6:61:37:c0:50:22:4b:71:b0:
         9d:d5:44:1a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYIQ+ezG2xYwB7uASiz00ueSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzE4MTEwMzEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yjc3ZDc3OWQxNjNmNWZlOTBlMWVlMzZmZDdlM2U1N2IwZTViZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7wSQRiWnunW7/GhgUR1bh05Fm0Z
O0NoT13kr8nO5mu/+Q3/O56lSZ7czlBeMW71Iq3xjQTfrvd47/ii0bPCY3gvlIq9
Ks9QMTf/BTx5LSiCX3WIhV/Nxxi0fTxhqT4kprMdzRFm1fpZP6Ra1Fe0wYd3dadR
Vqy3CckaKaT+F5wVWOWsl14knXpR7b41k4zawAWyrhJJw1Uk1wa5fdjHp1BtYvOJ
nbdJI2ytHDyhJGXEBHLu/tQnikAQwbxP7wYNcNS9kP2zyG2nAtLRfS8ORQJHKP9P
yb8u+qzeAOfJBBAMqnMjWZjHbnd/HpK3yiMbO44YzE2ArFl291cPBGlpdQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJt313nRY/X+kOHuNv1+Plew5b8cMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvbTNmWGVkRmo5ZjZRNGU0Ml9YNC1WN0Rsdnh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgagBRJ2
MA0GCSqGSIb3DQEBCwUAA4IBAQBRFwOrCintqS54YjwPzqwhV3tTSwb85D/emkfi
O82qDURiqY+2i7b2f7lRnTDv6XFzLTKPU4mY8cdc/qN+bWxP+So3uBithFUb6NSR
Np7Q8ZAghEv3dDj4dwz0oDHyqijE9UqdPuPTFy6w7pkm9h5aA6rii2g8Xb4D5VI7
lRY8xCHcj50nLYiQP5aEFr50VEDXMPlNeLIaJL5pRPFFMbz5SRoln7rTZD3GUKnx
bbrnIhDN3ZP8PA2iqbQieMq2QP4DJqQu4FRW5KWyepuq/jVodbDNPOQ/OdaSQrss
Q4ZteGVfRCHqXhLmtHeAsy/9GxjcgVvmYTfAUCJLcbCd1UQa
-----END CERTIFICATE-----