Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mMuiEgGp-vkiYo_3frynCBfXZWo.roa
File:                     mMuiEgGp-vkiYo_3frynCBfXZWo.roa (raw, json)
Hash identifier:          FLjR2lirRZ7ZQeZVx+6MsPoaUFXvl5qIXmfKUp6+qH4=
Subject key identifier:   98:CB:A2:12:01:A9:FA:F9:22:62:8F:F7:7E:BC:A7:08:17:D7:65:6A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182A47D17E9DB0C2838A0CEA46583F60964
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mMuiEgGp-vkiYo_3frynCBfXZWo.roa
Signing time:             Tue 16 Aug 2022 02:30:37 +0000
ROA not before:           Tue 16 Aug 2022 02:30:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44570
IP address blocks:        2a06:a005:4::/48 maxlen: 48
                          2a06:a004::/32 maxlen: 48
                          2a06:a000::/32 maxlen: 48
                          2a06:1280:1000::/36 maxlen: 48
                          2a06:a003::/32 maxlen: 48
                          2a06:a005::/32 maxlen: 48
                          2a06:a005:a::/47 maxlen: 48
                          2a06:a005:43d::/48 maxlen: 48
                          2a06:a005:5::/48 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a06:a005:6::/48 maxlen: 48
                          2a06:a005:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:a4:7d:17:e9:db:0c:28:38:a0:ce:a4:65:83:f6:09:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 16 02:30:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=98cba21201a9faf922628ff77ebca70817d7656a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:ce:ba:4c:e9:37:5b:1a:6a:66:d1:52:0d:
                    7e:bc:7b:cd:8e:05:f5:a6:7c:77:5e:f1:8c:73:19:
                    a9:9c:1f:98:38:f0:01:8f:d7:33:cf:ea:de:ea:d6:
                    c5:1f:02:2d:00:38:e4:04:ec:b0:f9:50:da:8d:d8:
                    34:68:ca:32:45:11:b0:68:16:c2:c1:b4:0c:d5:bf:
                    5f:f5:be:ec:e6:98:ef:d2:ca:56:79:fc:bb:21:fd:
                    e6:cc:68:c3:3b:4e:db:60:4f:ac:6d:99:a8:92:89:
                    2b:29:62:69:38:11:01:7a:28:3c:f7:6e:21:2c:d2:
                    08:c7:ec:16:96:2c:7d:b3:1f:58:a8:ae:8c:56:5e:
                    bc:bb:38:92:4c:d6:aa:22:0b:c9:de:6a:dc:2b:52:
                    e5:b8:84:4d:58:51:a3:c4:d2:8e:67:eb:91:4c:d1:
                    77:88:16:ae:58:c7:5a:0a:82:61:10:04:bc:5a:84:
                    ee:dd:ea:a4:aa:5d:99:64:a1:d6:48:c1:d9:c8:e6:
                    76:9a:ec:f8:ba:5d:c4:a5:3f:c7:46:89:7e:02:83:
                    32:46:7e:5f:cc:7b:dc:67:44:c6:6b:15:c8:39:33:
                    b7:b7:31:7b:64:f2:62:17:d5:9e:90:09:20:f6:ed:
                    fe:dc:11:4c:ab:dc:eb:49:1a:f6:54:89:7c:ee:56:
                    1b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CB:A2:12:01:A9:FA:F9:22:62:8F:F7:7E:BC:A7:08:17:D7:65:6A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mMuiEgGp-vkiYo_3frynCBfXZWo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1280:1000::/36
                  2a06:a000::/32
                  2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:2d:be:16:0a:5c:06:be:6b:28:9b:ab:8c:ed:d3:26:c8:b7:
         1f:e1:3a:62:54:50:6d:69:3a:8c:fb:cb:f5:0e:43:1d:ca:e3:
         77:d0:de:f8:bf:77:85:b1:bb:24:4d:88:ac:c0:26:e9:06:f3:
         e3:3d:a8:bc:54:c1:50:77:61:ca:b4:2f:11:96:4e:c5:6c:fb:
         21:7f:a5:12:d2:90:8c:00:b6:99:04:cf:54:1a:e7:0c:90:c5:
         07:38:0e:f9:4c:8d:6f:5e:05:a3:91:9c:73:a5:ee:39:c8:f1:
         f9:68:52:b3:09:86:6b:bc:a0:f8:6e:1d:6b:02:54:da:8b:01:
         99:e1:25:15:7d:eb:51:74:73:f0:1e:b9:a1:9a:c5:d4:2d:f8:
         06:35:8f:3b:99:8f:30:f9:44:8f:a4:6e:98:36:08:0a:9f:ef:
         e3:97:28:09:33:ee:79:31:8c:ed:42:39:31:2d:9b:a4:bb:f0:
         8e:74:0c:db:9c:8e:7e:df:ad:9f:8d:8b:d8:b3:54:d4:3f:cd:
         5f:16:91:a8:42:bf:1c:e6:35:eb:c2:6f:8a:7d:ce:29:23:ea:
         c0:a2:83:33:78:b7:20:17:12:c9:34:ce:ce:c5:a8:09:ec:23:
         37:d7:d6:f5:a8:08:72:07:5a:cb:5f:e1:96:10:ea:bc:d4:f7:
         ae:08:69:6d
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYKkfRfp2wwoOKDOpGWD9glkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODE2MDIzMDM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGNiYTIxMjAxYTlmYWY5MjI2MjhmZjc3ZWJjYTcwODE3ZDc2NTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj87OukzpN1saambRUg1+vHvNjgX1
pnx3XvGMcxmpnB+YOPABj9czz+re6tbFHwItADjkBOyw+VDajdg0aMoyRRGwaBbC
wbQM1b9f9b7s5pjv0spWefy7If3mzGjDO07bYE+sbZmokokrKWJpOBEBeig8924h
LNIIx+wWlix9sx9YqK6MVl68uziSTNaqIgvJ3mrcK1LluIRNWFGjxNKOZ+uRTNF3
iBauWMdaCoJhEAS8WoTu3eqkql2ZZKHWSMHZyOZ2muz4ul3EpT/HRol+AoMyRn5f
zHvcZ0TGaxXIOTO3tzF7ZPJiF9WekAkg9u3+3BFMq9zrSRr2VIl87lYbIwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFJjLohIBqfr5ImKP9368pwgX12VqMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvbU11aUVnR3AtdmtpWW9fM2ZyeW5DQmZYWldvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAAjAoAwYEKgYSgBAD
BQAqBqAAMA4DBQAqBqADAwUBKgagBAMHACoHVMKwCzANBgkqhkiG9w0BAQsFAAOC
AQEAWy2+FgpcBr5rKJurjO3TJsi3H+E6YlRQbWk6jPvL9Q5DHcrjd9De+L93hbG7
JE2IrMAm6Qbz4z2ovFTBUHdhyrQvEZZOxWz7IX+lEtKQjAC2mQTPVBrnDJDFBzgO
+UyNb14Fo5Gcc6XuOcjx+WhSswmGa7yg+G4dawJU2osBmeElFX3rUXRz8B65oZrF
1C34BjWPO5mPMPlEj6RumDYICp/v45coCTPueTGM7UI5MS2bpLvwjnQM25yOft+t
n42L2LNU1D/NXxaRqEK/HOY168Jvin3OKSPqwKKDM3i3IBcSyTTOzsWoCewjN9fW
9agIcgday1/hlhDqvNT3rghpbQ==
-----END CERTIFICATE-----