Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/r0SUCUJTYUY99YvGkaMRYBPtSys.roa
File:                     r0SUCUJTYUY99YvGkaMRYBPtSys.roa (raw, json)
Hash identifier:          B1gjDpiTK4RkXV40iUYcTFuVORY2X04GDXvB34KTFG0=
Subject key identifier:   AF:44:94:09:42:53:61:46:3D:F5:8B:C6:91:A3:11:60:13:ED:4B:2B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184D001AF1191FA07AC8A49808ABFE89121
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/r0SUCUJTYUY99YvGkaMRYBPtSys.roa
Signing time:             Thu 01 Dec 2022 23:24:41 +0000
ROA not before:           Thu 01 Dec 2022 23:24:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200968
IP address blocks:        2a0a:6040:f100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d0:01:af:11:91:fa:07:ac:8a:49:80:8a:bf:e8:91:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  1 23:24:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=af449409425361463df58bc691a3116013ed4b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:d8:3a:52:ea:89:77:79:de:c6:a8:30:75:
                    44:10:9e:28:ce:4c:7d:d8:6a:ad:ea:6b:f3:65:f2:
                    1e:14:54:ec:0f:8f:65:d5:37:0a:bf:96:a4:f2:0d:
                    88:ea:fd:c3:6b:cc:e4:f3:a2:b8:45:d8:37:ef:89:
                    40:dd:c1:02:a9:95:f9:de:e7:9f:9a:40:90:0a:5d:
                    f3:51:3a:ff:03:2a:0d:4e:c6:f0:96:8a:57:3f:63:
                    2c:18:1e:96:1e:3c:5d:26:b8:28:3f:2b:4a:19:c5:
                    f4:52:14:2f:36:cf:02:60:6f:eb:4a:62:b7:80:df:
                    4a:dc:bc:6e:16:2f:9c:9a:db:f5:86:2c:7e:3d:64:
                    3c:06:d4:d7:70:05:db:32:8d:eb:20:d3:03:d1:0f:
                    ab:ac:dd:ea:4a:05:c3:00:70:e8:0e:cb:d6:cf:0a:
                    0e:4a:9a:66:25:60:03:19:fd:85:cc:05:47:6b:6b:
                    9a:20:99:03:33:bc:4d:0f:f7:34:7d:a9:fe:8b:91:
                    b5:38:66:07:b9:a5:af:86:91:4c:e1:e4:07:e0:8f:
                    b8:f1:69:1c:2b:b3:12:50:11:ab:4f:7f:59:95:27:
                    91:53:eb:60:5a:fd:14:4e:5f:e1:2a:5f:c2:24:fc:
                    19:68:2f:90:ba:1a:89:75:63:7c:ea:aa:22:8e:27:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:44:94:09:42:53:61:46:3D:F5:8B:C6:91:A3:11:60:13:ED:4B:2B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/r0SUCUJTYUY99YvGkaMRYBPtSys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:f100::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:8a:ea:dc:2c:d2:f0:ed:72:bf:6b:53:9b:55:74:07:00:e1:
         1e:8a:bf:6d:b3:3c:6d:90:92:16:c3:73:17:bf:1a:37:4a:2b:
         d9:b5:48:39:b5:31:65:64:54:90:f1:f6:8d:de:cd:01:83:72:
         6a:e8:c1:6e:89:2e:5d:8c:d9:db:51:91:0a:fe:d4:cd:1f:a9:
         5b:ac:de:81:f2:15:cc:ec:33:3b:af:b5:58:47:c0:7e:96:57:
         bf:26:d4:e7:20:6b:ed:e0:7f:ae:28:85:ac:b1:77:5a:bd:ee:
         51:bc:d4:bd:64:86:59:cf:3b:c6:6f:0b:f3:aa:e5:31:b6:0f:
         69:86:2b:ce:fa:55:dc:e6:4b:e0:5f:56:7d:35:d0:37:cb:a5:
         1b:fa:b4:32:5f:24:60:97:a6:ed:27:37:8c:91:1c:f7:30:4c:
         ac:23:54:e2:ca:a6:9f:e3:31:8d:0a:f2:ed:90:6d:17:27:f0:
         e2:18:72:a4:c7:6c:a2:3a:39:1d:a7:73:45:30:a5:8d:f6:b0:
         d3:43:24:2a:78:95:30:8b:43:57:77:cb:44:60:8e:cb:56:b5:
         ea:ea:1e:58:55:67:93:5d:c8:1a:ee:bc:ed:40:ac:63:51:76:
         9a:2a:70:cb:c8:a9:8a:e9:94:ae:4e:73:4b:a9:7d:05:4f:33:
         21:5a:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----