Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qgFr1X-dr8XuI7HEztBXoLXn_Eg.roa
File:                     qgFr1X-dr8XuI7HEztBXoLXn_Eg.roa (raw, json)
Hash identifier:          2PTayl4Bd3tZl0WgwOjnfghRJDtB1wAOJ8toBoc4A5g=
Subject key identifier:   AA:01:6B:D5:7F:9D:AF:C5:EE:23:B1:C4:CE:D0:57:A0:B5:E7:FC:48
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01848865857A9EB9882E6B15CBEA95135C4A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qgFr1X-dr8XuI7HEztBXoLXn_Eg.roa
Signing time:             Fri 18 Nov 2022 01:41:05 +0000
ROA not before:           Fri 18 Nov 2022 01:41:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206216
IP address blocks:        2a06:a005:4d1::/48 maxlen: 48
                          2a06:a005:853::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:88:65:85:7a:9e:b9:88:2e:6b:15:cb:ea:95:13:5c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 18 01:41:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa016bd57f9dafc5ee23b1c4ced057a0b5e7fc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:63:c2:1b:2f:b0:ca:f7:6d:45:aa:65:a4:
                    7e:0d:fe:f2:11:4f:0f:84:74:09:e4:a6:80:4b:ca:
                    c0:2c:2c:a8:c3:ee:4e:39:a8:97:80:29:20:52:84:
                    dd:da:7b:40:7a:36:33:29:34:9f:0f:49:a2:e2:80:
                    6e:89:47:d0:de:d9:a2:cc:0f:ec:f7:a2:5b:a1:16:
                    59:cc:c5:3d:25:ae:63:77:0d:db:f0:d7:8a:c1:12:
                    6d:cb:9d:50:82:47:3c:71:08:ed:e5:d1:d3:9c:d1:
                    69:20:a5:83:c5:01:46:b2:1e:78:dc:67:be:89:80:
                    66:e6:ad:d5:49:0b:b5:13:60:69:ac:7a:cc:b8:d7:
                    58:66:ac:1c:39:11:50:8b:15:dc:3e:9e:9f:00:e3:
                    0a:d0:a6:ee:54:79:de:63:b5:35:37:f3:0c:3b:06:
                    e9:b2:30:e0:cb:6c:ac:45:66:4f:42:55:2c:20:c7:
                    39:b8:8c:56:4b:6c:82:62:c0:09:10:f3:0c:70:1d:
                    87:26:cb:f4:71:22:c0:49:92:bf:68:9d:21:36:ff:
                    41:3c:83:51:fb:65:4e:39:ba:de:08:a1:7b:bd:c5:
                    41:d6:96:2d:33:1b:c9:92:7b:66:81:bc:84:ad:ad:
                    85:6a:0b:2b:00:39:96:b2:de:1b:b1:d9:9c:c2:87:
                    fc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:01:6B:D5:7F:9D:AF:C5:EE:23:B1:C4:CE:D0:57:A0:B5:E7:FC:48
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qgFr1X-dr8XuI7HEztBXoLXn_Eg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4d1::/48
                  2a06:a005:853::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:39:d0:13:62:d4:24:c8:50:c3:58:df:c1:78:82:d2:18:4e:
         aa:4f:79:b3:d5:ca:df:a9:c5:67:b6:f8:99:62:cd:25:a4:da:
         15:df:8b:31:e0:de:b6:8d:2a:3a:ed:06:83:99:d0:82:75:ba:
         2c:4c:1d:a5:b3:19:38:d6:cd:18:29:80:a8:ad:df:33:37:fb:
         8c:d3:58:e5:b6:20:c8:f8:b0:9f:c4:e5:6c:76:b7:f0:9e:c1:
         79:fd:17:f8:a3:39:49:d3:e4:ef:a7:37:e0:cf:47:2a:b2:3f:
         14:c3:35:6f:53:ae:30:37:f1:db:1c:42:8f:18:18:1d:55:39:
         2a:5c:fb:33:7d:3e:21:32:13:c9:24:6a:96:75:0b:45:9c:70:
         b8:5b:3c:a3:4d:da:b2:01:11:dc:20:98:64:d1:fb:a0:0f:a0:
         ec:be:1d:c6:f0:8d:c8:31:82:ed:38:a5:c3:0b:5a:64:a2:95:
         45:0e:4e:b3:0a:fc:bf:ca:48:c5:c4:e3:75:9d:7c:56:70:bb:
         f7:4c:a3:ce:75:bd:4c:b2:6e:53:65:e1:44:70:57:b8:6a:20:
         63:1e:e5:04:54:18:73:ee:12:0b:83:a1:90:63:da:ab:7f:67:
         6c:80:17:9d:c1:fe:e7:d3:4b:ce:92:5c:21:e0:fa:b4:c3:a9:
         48:6a:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----