Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oHkJy-4g_nIgGxHzRoI4n4AijAU.roa
File:                     oHkJy-4g_nIgGxHzRoI4n4AijAU.roa (raw, json)
Hash identifier:          s5kcX9JSUGZkzZrQK+xe2yRxXariLA1E5Sno6p7T9Ao=
Subject key identifier:   A0:79:09:CB:EE:20:FE:72:20:1B:11:F3:46:82:38:9F:80:22:8C:05
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       182B5A13
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oHkJy-4g_nIgGxHzRoI4n4AijAU.roa
Signing time:             Sat 16 Apr 2022 16:00:43 +0000
ROA not before:           Sat 16 Apr 2022 16:00:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207852
IP address blocks:        2a06:a005:4b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405494291 (0x182b5a13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 16 16:00:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a07909cbee20fe72201b11f34682389f80228c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:ad:e6:e6:31:41:6f:94:59:41:20:77:9a:
                    b7:e7:96:c3:a4:bb:40:c0:55:96:cb:8a:a9:40:cd:
                    b0:c0:e4:e1:f4:4d:a7:16:6e:db:b7:50:e4:fe:68:
                    b9:e3:ae:3f:82:79:74:68:06:28:86:b9:b1:58:e2:
                    98:ae:ea:26:41:06:02:99:1a:8e:56:21:d3:2c:39:
                    4d:61:14:b1:c7:bf:64:02:50:03:12:64:fc:d4:dc:
                    8d:8c:73:fb:06:d3:87:27:1a:7b:7a:e3:0a:38:e1:
                    a2:7e:e7:13:62:bd:2a:46:f4:92:e7:7c:a7:9d:2b:
                    82:ef:4d:9c:64:a6:e5:d6:12:81:8b:20:35:77:6d:
                    38:96:70:14:7d:18:81:60:28:8e:b6:ed:52:92:2f:
                    5d:c5:9f:d0:e9:69:83:4f:13:06:f5:32:3b:41:7d:
                    b7:54:ea:00:15:44:3a:46:dd:56:2f:1a:3f:f8:c2:
                    48:0b:e1:04:03:9b:f4:fc:48:9c:20:14:9e:d1:a7:
                    c2:e2:4e:dc:a7:45:a2:3b:5c:42:81:b1:f3:4a:4b:
                    d7:c5:da:a8:0e:7b:9c:a7:6a:e4:a7:b3:41:30:50:
                    fa:d1:fe:44:63:81:b6:01:1d:01:8f:1f:84:a5:a2:
                    c6:77:a3:f9:95:45:19:d3:9b:c9:dd:db:8c:0e:46:
                    e9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:79:09:CB:EE:20:FE:72:20:1B:11:F3:46:82:38:9F:80:22:8C:05
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/oHkJy-4g_nIgGxHzRoI4n4AijAU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:16:39:79:88:54:46:37:b7:7a:d6:c7:79:87:3f:ef:93:
         f6:63:dc:d1:29:17:69:dc:be:90:1d:d1:5c:7b:86:6f:dd:31:
         b5:0b:b7:a4:2b:6b:79:77:06:cd:c2:f6:0b:68:57:12:01:0c:
         fc:c2:88:91:bc:15:c9:93:58:0c:5c:04:d1:e0:8a:1e:db:ee:
         7c:66:a6:90:0f:7b:5a:7d:16:9c:86:2d:19:e5:a9:7e:9b:00:
         2a:5c:7a:de:76:c9:a2:e2:df:e7:7d:5b:1e:98:84:dc:0d:14:
         37:4b:65:2a:cb:fd:d7:94:f7:37:e3:21:1b:33:e5:65:91:8a:
         30:33:59:5f:1c:e6:bc:2a:50:ee:37:6c:f4:f8:f4:18:cc:5c:
         e5:4c:d2:45:f6:e5:c7:9a:a3:10:ab:4c:91:88:d8:d2:8a:97:
         3b:67:f0:7f:76:de:41:04:92:01:3a:77:a1:f0:e3:69:b9:1c:
         5c:10:e8:c5:7e:33:2f:d6:6e:22:c1:a7:c7:d9:3f:82:28:6a:
         a4:99:4b:a8:e0:f2:a1:79:ce:2f:12:a6:3a:35:65:4c:4b:5e:
         65:ab:55:60:83:8e:be:0b:fb:cc:74:65:5a:a0:d2:a5:aa:b9:
         f8:9d:b1:74:d9:0d:4a:3e:b9:b6:7b:56:e9:f4:57:7f:7d:6e:
         97:b8:fa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----