Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m7C4PqSAiF65Z3r10T-AYFQ6io4.roa
File:                     m7C4PqSAiF65Z3r10T-AYFQ6io4.roa (raw, json)
Hash identifier:          P707IlFdpGVN6jsI48DxQ+SR/0bXo2e7j7Q1JXKLtTo=
Subject key identifier:   9B:B0:B8:3E:A4:80:88:5E:B9:67:7A:F5:D1:3F:80:60:54:3A:8A:8E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18817667
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m7C4PqSAiF65Z3r10T-AYFQ6io4.roa
Signing time:             Thu 21 Apr 2022 12:16:49 +0000
ROA not before:           Thu 21 Apr 2022 12:16:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211509
IP address blocks:        2a06:a005:9::/48 maxlen: 48
                          2a06:a005:8::/48 maxlen: 48
                          2a05:dfc7:8500::/43 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411137639 (0x18817667)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 21 12:16:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9bb0b83ea480885eb9677af5d13f8060543a8a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:21:04:96:9f:1b:f6:5a:7d:0b:0b:4c:b7:88:
                    17:48:83:70:cd:d2:77:0a:d8:8c:f2:e1:39:63:5f:
                    3a:70:d4:0b:c9:d1:05:c8:25:e2:43:97:da:99:cf:
                    30:50:55:c9:b4:85:58:e0:57:e4:06:e7:ab:08:09:
                    6b:55:9a:ca:e1:7d:40:5c:e7:d7:36:35:c2:e6:f6:
                    56:3c:fc:b0:e7:02:15:3d:c4:d4:c1:c1:c2:1e:87:
                    01:83:0a:e1:38:df:31:b2:4d:72:98:3c:f8:1d:f2:
                    c9:fd:7b:3d:37:9a:76:70:66:96:b2:f8:d4:c1:f9:
                    5d:21:58:32:87:26:93:38:fa:f6:0b:45:c4:5f:03:
                    38:a6:b5:42:2d:20:27:1e:6c:59:96:31:44:b5:59:
                    a2:d2:43:08:1b:05:53:b0:de:e6:0c:45:de:bd:26:
                    76:8f:05:6f:29:82:0e:a8:07:1e:69:6b:70:e7:34:
                    37:51:93:c9:df:da:ef:76:1e:0e:2b:f1:c4:c4:a7:
                    ea:27:12:6a:e8:1b:b2:da:fe:b7:aa:9d:cd:04:67:
                    0a:83:0e:b5:e8:de:a2:c3:d6:be:9a:40:80:44:f1:
                    f4:fc:5c:d4:c4:67:6b:bf:6a:7c:12:eb:66:b5:88:
                    05:5e:13:d2:aa:17:65:95:da:b0:06:89:2f:4b:70:
                    43:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B0:B8:3E:A4:80:88:5E:B9:67:7A:F5:D1:3F:80:60:54:3A:8A:8E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m7C4PqSAiF65Z3r10T-AYFQ6io4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8500::/43
                  2a06:a005:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         9e:d2:8a:2c:10:77:38:0e:dc:a1:ea:5b:02:1f:06:0f:0e:1d:
         aa:e8:4c:e0:7f:bb:f3:34:58:76:45:65:d6:26:91:5e:16:22:
         25:f7:e3:17:53:23:18:09:88:ad:fc:49:a5:51:a5:6e:32:ee:
         8f:4e:0c:c8:35:bb:37:24:65:e6:d3:9b:8f:1f:ba:7e:33:3c:
         82:dd:67:93:dc:2f:88:24:f7:a0:b0:a3:61:01:be:bb:c8:36:
         f6:44:89:df:8b:d8:9d:1c:59:50:1f:ba:4b:03:be:74:d3:23:
         5f:b9:40:43:ec:e7:ba:73:a2:db:30:f7:40:b2:1a:9a:a1:91:
         18:3e:24:ea:bc:51:38:c0:6e:6a:89:6c:fa:d1:16:62:d7:d5:
         92:ae:ad:a6:b2:62:e7:96:47:73:bd:d3:31:f6:2b:f6:e3:9c:
         e9:93:44:a7:75:97:c7:0e:1f:f3:f6:da:44:cc:bd:0a:bc:25:
         0c:19:14:2e:e1:13:65:eb:d1:f1:b5:9a:7b:c2:3d:f5:bd:25:
         23:c2:e9:e6:c7:27:bc:08:14:86:50:c1:30:d2:f4:10:1a:48:
         44:ec:50:e3:04:8e:d2:8d:32:4c:fa:7b:4b:2c:76:c8:6e:eb:
         18:b4:a5:31:89:79:99:03:7c:ee:84:66:34:ec:9a:89:97:24:
         24:38:5a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----