Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qQOAdrQwIMVBTp1bcRn_eAFyJIc.roa
File:                     qQOAdrQwIMVBTp1bcRn_eAFyJIc.roa (raw, json)
Hash identifier:          GMBBZsAxtLaqitM1fna0bIo41XKAsi6EIvuXiLiPXw0=
Subject key identifier:   A9:03:80:76:B4:30:20:C5:41:4E:9D:5B:71:19:FF:78:01:72:24:87
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184F490855DF6740F49A70FB31D6F63961F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qQOAdrQwIMVBTp1bcRn_eAFyJIc.roa
Signing time:             Fri 09 Dec 2022 01:47:02 +0000
ROA not before:           Fri 09 Dec 2022 01:47:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     396998
IP address blocks:        2a0a:6040:fa00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f4:90:85:5d:f6:74:0f:49:a7:0f:b3:1d:6f:63:96:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  9 01:47:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a9038076b43020c5414e9d5b7119ff7801722487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0b:b1:fc:2c:73:0b:3c:37:e6:b3:f1:cf:0f:
                    3b:1a:3c:ad:55:75:59:ac:ac:a2:24:11:49:83:f3:
                    03:97:31:1e:8f:96:c8:9e:50:88:b5:10:5c:d5:6a:
                    38:69:35:11:9d:8d:f4:5d:17:26:c9:c0:61:87:27:
                    43:c8:0c:41:ab:2e:a1:2c:52:bc:35:a0:cc:26:ac:
                    bc:01:b6:25:ab:d7:32:7f:eb:68:80:30:f7:d6:49:
                    d6:41:2f:0e:9c:00:dc:98:c5:4d:2c:85:bc:2a:10:
                    bb:9c:58:ea:6a:c7:db:19:0f:f2:67:05:3c:df:6d:
                    26:ab:75:c2:30:71:39:04:f0:00:ac:ca:14:10:81:
                    43:20:5b:a8:70:e0:14:df:62:3b:89:07:2f:47:87:
                    66:4a:8e:e5:e7:e4:9a:84:8b:7b:bb:a1:32:be:f9:
                    35:ff:fc:04:df:8b:63:e5:88:32:b5:db:2c:0b:6e:
                    1b:87:41:3a:33:ee:e2:b3:e5:0c:37:1a:12:73:64:
                    d9:36:36:56:ef:e9:24:cc:b1:d7:e8:85:c7:8e:8c:
                    a1:1b:64:e2:b4:d0:98:4f:0f:98:3b:f2:4c:67:78:
                    ce:15:dc:61:ac:ec:7c:e6:1e:72:67:62:35:f0:86:
                    23:85:24:b2:47:93:7b:36:94:ec:7c:65:19:2c:a7:
                    e9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:03:80:76:B4:30:20:C5:41:4E:9D:5B:71:19:FF:78:01:72:24:87
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qQOAdrQwIMVBTp1bcRn_eAFyJIc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:59:ba:17:8b:78:c1:de:86:04:ad:f2:c1:4c:4b:69:3a:81:
         6f:c5:f9:83:2e:f7:56:ce:27:fc:0a:99:4b:ad:61:41:17:84:
         9a:c0:8f:1b:a5:ed:b0:79:0f:34:12:4f:b2:f6:8d:5b:8c:92:
         a1:b0:9e:47:9d:50:2f:5e:8c:cc:aa:6f:7f:2e:e2:d2:c0:0c:
         57:6f:c5:5e:0c:58:d5:d5:48:f2:0e:bf:f4:d4:66:0a:fd:9c:
         c2:13:92:ad:f0:0d:a5:37:3f:a2:99:ba:fa:87:cf:3e:73:83:
         5b:f0:52:cc:22:c6:07:ec:5c:6e:3c:bc:3d:a9:a8:81:93:45:
         59:c4:2b:ac:d2:f9:b2:0c:5a:c4:c4:af:2c:81:b2:8a:5c:d0:
         02:68:50:05:b6:4c:0e:27:54:5a:61:56:f8:7c:e5:2c:a6:42:
         e6:48:65:bf:3e:a5:3b:36:9c:a2:4d:2a:ac:e8:c7:73:11:33:
         0e:ad:26:e0:10:aa:54:49:9a:54:b0:04:37:ae:c5:12:cf:bb:
         ca:fa:bd:c9:05:ab:49:b2:e7:75:a2:2f:5b:64:06:b0:e6:dc:
         c1:62:e3:44:8d:71:6e:42:59:1c:c2:ad:10:53:84:fd:16:41:
         d1:b1:ea:6b:51:c9:5d:aa:64:4d:78:49:f2:31:46:1a:11:b8:
         94:f0:c8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----