Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pQiF0DaY74NIiL2gSH12FgQnj-s.roa
File:                     pQiF0DaY74NIiL2gSH12FgQnj-s.roa (raw, json)
Hash identifier:          z0bPuoTP9LStWYq2xiZ6mjM7M8uJDYqdI7XqgZUw/Dw=
Subject key identifier:   A5:08:85:D0:36:98:EF:83:48:88:BD:A0:48:7D:76:16:04:27:8F:EB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01826DFFB93B608E2EB68A5DAEB7F904A1EC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pQiF0DaY74NIiL2gSH12FgQnj-s.roa
Signing time:             Fri 05 Aug 2022 12:34:11 +0000
ROA not before:           Fri 05 Aug 2022 12:34:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209806
IP address blocks:        2a06:a005:2d9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:6d:ff:b9:3b:60:8e:2e:b6:8a:5d:ae:b7:f9:04:a1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  5 12:34:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a50885d03698ef834888bda0487d761604278feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:65:0c:51:3f:15:2c:fd:48:9c:4f:9c:f2:
                    63:e8:b3:f9:f0:03:fb:24:4a:fc:e5:f8:80:fb:ff:
                    79:59:23:f9:cc:92:60:6b:aa:34:3c:54:96:52:51:
                    60:50:95:4a:33:7a:1d:a9:4e:6f:02:29:b4:62:54:
                    f1:b6:0a:58:0f:e2:27:37:b1:6f:76:48:aa:c9:e4:
                    e6:f3:e8:8a:ba:4e:e6:4c:4e:d6:eb:6f:d9:8e:59:
                    27:b1:57:15:5f:fc:cb:56:75:70:59:33:49:22:88:
                    8b:df:82:ef:62:dc:a7:6e:71:50:9f:19:46:ca:06:
                    c6:5c:3e:e9:86:85:48:e8:db:3a:f1:e4:89:bc:91:
                    7b:bb:60:97:45:7c:f6:51:12:f4:37:26:31:fe:36:
                    8f:06:7f:7b:56:19:e2:ba:44:94:45:ef:51:4a:5c:
                    80:fd:8a:75:b3:23:0d:ed:2b:6b:63:95:48:59:33:
                    84:a2:8d:e9:70:55:49:73:d1:aa:b2:1a:dd:56:62:
                    81:07:3e:b5:03:e5:02:c2:18:db:d3:8c:ae:a4:e3:
                    f0:d6:b5:bb:1d:db:d3:d3:d4:1f:66:dd:25:76:ee:
                    50:b8:df:9e:42:c9:f4:da:1b:60:11:1b:07:50:51:
                    8d:66:3d:a0:84:ff:9b:e6:10:66:56:ac:b9:35:6c:
                    cb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:08:85:D0:36:98:EF:83:48:88:BD:A0:48:7D:76:16:04:27:8F:EB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pQiF0DaY74NIiL2gSH12FgQnj-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2d9::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:2c:19:27:5d:de:a8:be:c6:23:dc:6c:41:af:46:05:4d:d5:
         eb:af:58:81:f1:67:8e:34:21:d6:27:6c:61:41:12:e6:51:d1:
         0f:84:a1:44:5e:2b:2a:97:a0:1b:71:cc:2f:b1:93:45:56:4c:
         87:67:99:d4:14:05:ef:e5:be:1f:8e:50:5e:95:22:29:28:ca:
         53:b2:d3:82:0c:95:cb:65:13:e6:7c:01:38:79:e5:f8:3b:4f:
         d0:72:e1:a2:4f:d5:e3:e4:37:80:f5:8d:b1:91:5b:71:b1:02:
         99:84:c0:a8:cf:21:1c:38:09:24:44:63:dd:94:09:13:88:0a:
         4c:3e:69:9f:70:99:77:5f:98:6c:f7:8c:31:65:68:01:7a:8b:
         17:19:71:fb:1b:5f:8a:8a:dc:7b:5b:a2:4e:9b:59:42:cd:53:
         9b:29:a3:a0:5a:89:10:8c:aa:60:74:34:d7:57:3d:66:5b:86:
         35:b9:a2:95:e5:73:6d:3f:38:55:e1:db:3f:d3:1c:20:c4:23:
         be:6a:bf:58:0a:6e:0c:68:62:a9:27:6a:d6:fe:dc:b0:69:0c:
         da:0e:c6:05:1e:03:fb:62:12:82:29:b6:e4:62:96:9a:51:c0:
         68:cc:a7:39:19:b8:4a:4a:5c:cc:fa:8a:09:95:78:91:85:95:
         c8:58:82:62
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYJt/7k7YI4utopdrrf5BKHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODA1MTIzNDExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTA4ODVkMDM2OThlZjgzNDg4OGJkYTA0ODdkNzYxNjA0Mjc4ZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIVlDFE/FSz9SJxPnPJj6LP58AP7
JEr85fiA+/95WSP5zJJga6o0PFSWUlFgUJVKM3odqU5vAim0YlTxtgpYD+InN7Fv
dkiqyeTm8+iKuk7mTE7W62/ZjlknsVcVX/zLVnVwWTNJIoiL34LvYtynbnFQnxlG
ygbGXD7phoVI6Ns68eSJvJF7u2CXRXz2URL0NyYx/jaPBn97VhniukSURe9RSlyA
/Yp1syMN7StrY5VIWTOEoo3pcFVJc9GqshrdVmKBBz61A+UCwhjb04yupOPw1rW7
HdvT09QfZt0ldu5QuN+eQsn02htgERsHUFGNZj2ghP+b5hBmVqy5NWzLMwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKUIhdA2mO+DSIi9oEh9dhYEJ4/rMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvcFFpRjBEYVk3NE5JaUwyZ1NIMTJGZ1Fuai1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQLZ
MA0GCSqGSIb3DQEBCwUAA4IBAQADLBknXd6ovsYj3GxBr0YFTdXrr1iB8WeONCHW
J2xhQRLmUdEPhKFEXisql6AbccwvsZNFVkyHZ5nUFAXv5b4fjlBelSIpKMpTstOC
DJXLZRPmfAE4eeX4O0/QcuGiT9Xj5DeA9Y2xkVtxsQKZhMCozyEcOAkkRGPdlAkT
iApMPmmfcJl3X5hs94wxZWgBeosXGXH7G1+Kitx7W6JOm1lCzVObKaOgWokQjKpg
dDTXVz1mW4Y1uaKV5XNtPzhV4ds/0xwgxCO+ar9YCm4MaGKpJ2rW/tywaQzaDsYF
HgP7YhKCKbbkYpaaUcBozKc5GbhKSlzM+ooJlXiRhZXIWIJi
-----END CERTIFICATE-----