Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qmRHVJFvs-zpdDyN9KK1Sq9tDP4.roa
File:                     qmRHVJFvs-zpdDyN9KK1Sq9tDP4.roa (raw, json)
Hash identifier:          ZT+aOI6rJiIskLvYikGT6wY/BeBUqXcfnLXiPwsppKY=
Subject key identifier:   AA:64:47:54:91:6F:B3:EC:E9:74:3C:8D:F4:A2:B5:4A:AF:6D:0C:FE
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01825AE097EB769B3F89734F732B7058AE4B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qmRHVJFvs-zpdDyN9KK1Sq9tDP4.roa
Signing time:             Mon 01 Aug 2022 19:27:24 +0000
ROA not before:           Mon 01 Aug 2022 19:27:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142598
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:5a:e0:97:eb:76:9b:3f:89:73:4f:73:2b:70:58:ae:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  1 19:27:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa644754916fb3ece9743c8df4a2b54aaf6d0cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a1:98:0f:5c:1d:72:dc:16:8a:b6:c7:fb:5e:
                    38:bd:49:61:e6:47:15:c9:3b:be:ad:dc:64:14:d0:
                    49:f7:3a:05:6d:8c:62:0a:d3:34:6b:bb:c5:28:cb:
                    f0:1d:bf:0d:fc:75:99:47:40:76:da:cc:a2:67:be:
                    31:5d:fa:17:87:20:3c:d3:dd:20:76:00:a5:74:27:
                    a6:cb:27:34:07:6e:59:42:96:bb:be:42:32:d2:f1:
                    30:b4:4d:70:60:f5:5d:22:f0:10:cf:60:da:70:7f:
                    b5:b6:44:2d:fa:9c:74:fb:8b:ed:8d:a5:45:97:b5:
                    61:bf:aa:d2:5e:17:05:15:05:9d:90:85:f9:a9:d9:
                    ac:57:e3:90:cc:b1:60:83:62:70:57:c3:07:c7:5a:
                    e5:2a:75:8e:c9:a1:cc:73:e8:03:ca:c8:f9:a6:cd:
                    f3:d2:14:d3:c3:0e:19:cd:89:2f:80:0a:66:6e:90:
                    ed:bc:ad:78:55:fc:42:de:57:d1:5d:46:fd:7a:59:
                    48:3f:a4:09:72:07:60:65:67:49:b2:36:b9:af:3a:
                    31:3d:f5:02:41:4c:61:e5:14:48:0a:6d:fd:25:55:
                    33:40:b4:85:6f:3f:3e:e2:88:2b:28:1d:e1:86:ac:
                    56:76:da:1e:d3:c4:79:b5:3e:d7:12:75:5b:58:65:
                    b6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:64:47:54:91:6F:B3:EC:E9:74:3C:8D:F4:A2:B5:4A:AF:6D:0C:FE
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qmRHVJFvs-zpdDyN9KK1Sq9tDP4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:74:23:1a:f7:a4:3d:e5:3a:bd:70:18:fd:65:16:a5:b6:4b:
         f8:df:06:ef:9a:98:0f:6b:b1:a5:29:26:26:af:dc:21:dc:4f:
         bb:eb:e9:c3:bc:f9:8e:0a:ad:69:84:10:f1:15:16:e4:1d:d4:
         86:4a:e8:61:04:ca:1b:c4:a8:df:eb:cd:1d:53:49:ea:c8:0f:
         f0:3d:3e:f1:ea:0e:4b:e0:43:ee:88:9d:3c:f7:ac:a6:2e:e5:
         d0:72:c1:c9:19:c0:cb:5a:63:61:74:62:9d:0e:49:da:ac:8a:
         3b:ee:97:22:19:d6:30:88:aa:b5:72:ce:7c:31:69:2d:d6:bc:
         97:21:b9:a9:05:ea:6a:c1:a6:a4:4d:40:44:3d:09:9e:b8:a2:
         ee:13:2d:f6:31:c7:3b:17:05:7b:86:af:53:a0:e9:d4:a1:a3:
         3f:2b:99:90:a6:f3:8a:80:e9:58:81:6d:46:ec:75:a4:3b:59:
         ec:b5:da:57:f1:fd:73:0e:5b:3b:2c:29:ec:b8:df:21:50:2e:
         14:57:51:08:79:ef:7a:d5:a4:f1:1c:55:7d:ee:f7:ae:c6:f9:
         83:7f:01:20:b5:6d:de:f3:e9:c1:31:dc:9b:b4:e8:e3:37:8e:
         01:50:9f:63:d3:95:ab:2c:03:c6:b1:90:bc:9b:10:67:a7:b5:
         4d:80:10:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----