Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/q6oWLZe70na8EVTWLFrMLgkGfwo.roa
File:                     q6oWLZe70na8EVTWLFrMLgkGfwo.roa (raw, json)
Hash identifier:          GENsPu/ufmlPpALRKovXpwjmV+oaZtEy6+5kICSEyiY=
Subject key identifier:   AB:AA:16:2D:97:BB:D2:76:BC:11:54:D6:2C:5A:CC:2E:09:06:7F:0A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183F31C7837FEC4195160ADA072C432322C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/q6oWLZe70na8EVTWLFrMLgkGfwo.roa
Signing time:             Thu 20 Oct 2022 01:57:52 +0000
ROA not before:           Thu 20 Oct 2022 01:57:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22659
IP address blocks:        2a06:a005:1502::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f3:1c:78:37:fe:c4:19:51:60:ad:a0:72:c4:32:32:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 20 01:57:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=abaa162d97bbd276bc1154d62c5acc2e09067f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:41:67:03:b0:9d:b4:26:e1:e1:9f:ec:ec:
                    65:dc:37:89:69:ee:c4:a5:42:5f:8b:69:68:de:9d:
                    b8:7f:e0:fb:6d:03:cb:de:a3:8a:e4:45:2c:e2:9f:
                    11:71:71:59:f9:3e:0b:07:45:0d:8a:1b:3a:14:13:
                    01:b9:0d:fb:ac:15:13:79:e1:a4:24:65:b9:37:fe:
                    89:24:f7:07:6a:12:cc:2c:be:52:ff:33:bf:38:0e:
                    dd:22:0d:79:2f:40:1e:ec:20:ef:05:00:4a:8b:4b:
                    f0:e5:91:10:8b:a0:07:d6:ac:98:27:5d:a4:85:9d:
                    60:a5:7e:d1:34:d9:0d:1f:12:01:35:2b:f9:da:fb:
                    4a:82:8e:2d:32:84:7f:8a:01:5a:f3:70:90:52:61:
                    e8:e9:b3:67:bf:2d:f8:8f:ab:74:d9:37:5b:de:05:
                    52:d1:c6:d6:42:1c:b4:32:2c:09:f4:78:c1:84:56:
                    e1:da:7f:ed:da:df:2e:98:60:bb:22:e2:69:33:c8:
                    0b:09:a2:8b:65:31:d1:39:ee:8b:29:64:20:9f:03:
                    58:d6:68:8b:30:04:ae:aa:55:db:ae:26:d3:db:03:
                    d4:01:83:65:e2:92:52:f5:3b:c4:71:43:53:a2:3e:
                    94:67:15:17:58:0c:09:2b:49:6e:d0:7c:55:1f:be:
                    7f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AA:16:2D:97:BB:D2:76:BC:11:54:D6:2C:5A:CC:2E:09:06:7F:0A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/q6oWLZe70na8EVTWLFrMLgkGfwo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1502::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:67:72:16:cd:ba:07:de:26:1d:fd:c3:ed:99:aa:cb:f1:92:
         62:a4:57:ce:f0:21:37:bc:15:e2:d0:d2:e9:77:ef:d8:33:c1:
         65:b0:79:83:98:5a:ca:04:4f:55:1a:0e:2d:3d:b7:27:b3:b8:
         b3:7c:c8:73:56:8c:3d:9e:36:75:a4:b4:be:30:d5:be:9b:69:
         4c:b5:05:85:8f:0b:5b:fa:50:2f:bb:15:b6:02:fe:d8:76:d4:
         7e:c3:4d:67:b6:10:7a:16:ec:23:c0:8c:3f:9a:47:8b:41:74:
         de:6b:a9:44:0a:b6:39:97:c1:20:7c:b4:4f:c7:b7:ab:ac:72:
         82:e4:ea:19:b1:60:a0:2a:0d:f0:94:51:2d:87:8d:fc:c3:0e:
         80:05:26:6f:19:74:c7:06:8b:21:05:ae:5c:a6:a7:7b:31:97:
         c6:e9:6f:c2:4f:c9:09:a1:a0:a7:af:c8:73:32:aa:e9:4f:74:
         4c:bf:69:a8:7e:53:1d:2d:e5:10:72:e5:9a:96:20:84:e7:6e:
         c3:29:83:52:3f:25:0c:46:e5:99:96:09:48:0e:0f:2a:da:b7:
         fb:25:55:08:09:ee:55:f0:93:e6:ca:d2:54:5e:96:f4:3f:70:
         b6:82:06:8e:bd:de:8d:11:6b:a6:10:7e:c7:4b:b5:b9:90:49:
         21:72:10:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----