Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qawQZF06B0PMZV4hx9ZIOX4rfsA.roa
File:                     qawQZF06B0PMZV4hx9ZIOX4rfsA.roa (raw, json)
Hash identifier:          brq9QM7BIL/n4e+xsmMPRKa+1MOBV/pykARFS/bwUdw=
Subject key identifier:   A9:AC:10:64:5D:3A:07:43:CC:65:5E:21:C7:D6:48:39:7E:2B:7E:C0
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15B271BB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qawQZF06B0PMZV4hx9ZIOX4rfsA.roa
Signing time:             Sat 01 Jan 2022 05:58:59 +0000
ROA not before:           Sat 01 Jan 2022 05:58:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8100
IP address blocks:        2a06:1280:ce03::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364016059 (0x15b271bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:58:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a9ac10645d3a0743cc655e21c7d648397e2b7ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:33:50:a9:42:ac:19:4f:9d:16:0c:db:dc:
                    de:0b:ce:bd:35:d8:e8:97:b2:5f:d7:35:5d:39:af:
                    e2:47:a6:fb:e2:fa:87:93:40:19:a2:23:f9:51:b9:
                    fd:c4:94:89:4a:9e:68:83:c2:2b:0b:cc:1d:c0:dd:
                    cc:52:ee:e1:e0:3a:c3:15:a6:44:a6:b9:ca:23:09:
                    b6:23:3f:4a:ec:a6:76:d4:70:94:a0:32:69:10:e5:
                    db:c6:a8:67:45:b6:ad:31:f7:e3:68:a7:9a:39:57:
                    2a:c3:cd:ee:f7:32:e7:94:c8:d4:40:21:c2:f3:7a:
                    e0:40:fd:ae:1b:a9:c0:aa:b9:17:71:f6:3e:2f:bc:
                    66:06:bb:18:39:d8:be:32:11:34:8f:f6:f1:d0:63:
                    f8:76:97:f3:45:13:66:dd:50:79:1a:94:3f:8a:7a:
                    71:25:04:de:2c:ae:91:1f:3b:71:0d:6c:a9:34:94:
                    ab:b2:14:ff:27:e1:65:2f:bb:80:f3:13:25:8e:8c:
                    73:46:7c:90:bc:63:7f:21:87:5f:28:8a:8c:34:77:
                    68:46:e0:17:d9:97:fe:1d:fe:fb:6f:96:2c:02:83:
                    57:72:5e:6f:16:f6:34:53:c8:24:ec:f6:ed:bc:28:
                    24:01:20:b2:f7:8a:f1:e0:e4:6c:a7:64:85:c9:b9:
                    87:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AC:10:64:5D:3A:07:43:CC:65:5E:21:C7:D6:48:39:7E:2B:7E:C0
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qawQZF06B0PMZV4hx9ZIOX4rfsA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1280:ce03::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:1f:a2:76:db:7b:e3:0b:8e:a0:fc:89:2a:1d:d9:fa:e7:06:
         86:a7:1d:66:fd:fd:4d:98:2d:e9:f8:52:b5:44:80:2b:a1:fc:
         53:7f:a4:db:e1:7e:ef:78:ff:99:86:a5:41:78:84:3a:91:91:
         78:9a:91:07:8e:9c:b9:c5:6b:21:f4:f0:1b:fa:c5:86:b0:47:
         39:44:59:47:80:5f:34:b2:98:d8:ba:d5:30:33:7f:f9:1a:64:
         17:33:b1:57:e5:57:77:71:81:7a:03:b2:f9:7b:c9:65:87:74:
         d7:68:2a:8b:7f:ee:10:84:a4:d2:f5:13:b7:1e:5e:c8:1e:e9:
         9a:c3:95:ab:40:3f:42:39:f4:7c:2d:3d:b7:c0:52:6f:58:f4:
         14:28:91:5b:fa:f4:dc:d8:b6:8f:ec:ec:58:8e:6c:f5:1b:22:
         ce:80:28:55:63:bb:cd:0f:69:2c:c6:f2:4d:5a:92:87:6a:ba:
         b4:6c:ab:11:d9:93:ac:28:86:2e:27:69:a6:58:1b:18:84:6e:
         3e:59:84:01:d8:ff:26:cb:75:a8:ea:3e:03:19:2c:d4:f8:fb:
         f4:fb:4f:c8:2d:38:97:c6:00:6f:0e:86:ed:00:00:1f:7d:c6:
         24:1a:04:06:62:43:f1:95:25:67:69:ef:49:90:51:9c:ba:10:
         05:29:28:6e
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEFbJxuzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDEw
MTA1NTg1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTlhYzEwNjQ1ZDNh
MDc0M2NjNjU1ZTIxYzdkNjQ4Mzk3ZTJiN2VjMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJJ8M1CpQqwZT50WDNvc3gvOvTXY6JeyX9c1XTmv4kem++L6
h5NAGaIj+VG5/cSUiUqeaIPCKwvMHcDdzFLu4eA6wxWmRKa5yiMJtiM/SuymdtRw
lKAyaRDl28aoZ0W2rTH342inmjlXKsPN7vcy55TI1EAhwvN64ED9rhupwKq5F3H2
Pi+8Zga7GDnYvjIRNI/28dBj+HaX80UTZt1QeRqUP4p6cSUE3iyukR87cQ1sqTSU
q7IU/yfhZS+7gPMTJY6Mc0Z8kLxjfyGHXyiKjDR3aEbgF9mX/h3++2+WLAKDV3Je
bxb2NFPIJOz27bwoJAEgsveK8eDkbKdkhcm5h28CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSprBBkXToHQ8xlXiHH1kg5fit+wDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L3Fhd1FaRjA2QjBQTVpWNGh4OVpJT1g0cmZzQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGEoDOAzANBgkqhkiG9w0BAQsF
AAOCAQEAgx+idtt74wuOoPyJKh3Z+ucGhqcdZv39TZgt6fhStUSAK6H8U3+k2+F+
73j/mYalQXiEOpGReJqRB46cucVrIfTwG/rFhrBHOURZR4BfNLKY2LrVMDN/+Rpk
FzOxV+VXd3GBegOy+XvJZYd012gqi3/uEISk0vUTtx5eyB7pmsOVq0A/Qjn0fC09
t8BSb1j0FCiRW/r03Ni2j+zsWI5s9RsizoAoVWO7zQ9pLMbyTVqSh2q6tGyrEdmT
rCiGLidpplgbGIRuPlmEAdj/Jst1qOo+Axks1Pj79PtPyC04l8YAbw6G7QAAH33G
JBoEBmJD8ZUlZ2nvSZBRnLoQBSkobg==
-----END CERTIFICATE-----