Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/r5djfhVyB-iItfHgadgJb9z7Zf4.roa
File:                     r5djfhVyB-iItfHgadgJb9z7Zf4.roa (raw, json)
Hash identifier:          A6UROHSzMd2MAYTWpReWrpCPsJc+b4S8M5TLYbAjlII=
Subject key identifier:   AF:97:63:7E:15:72:07:E8:88:B5:F1:E0:69:D8:09:6F:DC:FB:65:FE
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       16E5C079
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/r5djfhVyB-iItfHgadgJb9z7Zf4.roa
Signing time:             Fri 25 Mar 2022 11:50:10 +0000
ROA not before:           Fri 25 Mar 2022 11:50:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208753
IP address blocks:        2a06:a005:c::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384155769 (0x16e5c079)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Mar 25 11:50:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=af97637e157207e888b5f1e069d8096fdcfb65fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:03:e5:e1:83:89:14:8d:1a:4d:13:24:ca:
                    d9:93:6f:93:4f:ce:60:ad:7b:87:09:6a:2f:27:ec:
                    ee:38:4d:37:f4:35:91:25:cd:92:52:50:42:75:ef:
                    00:eb:64:55:19:84:f0:84:6a:17:7e:4a:68:20:c3:
                    14:75:70:a4:9f:da:93:3f:b2:05:5e:ab:8c:c9:b2:
                    d7:ce:5e:0a:24:e6:28:3b:24:c1:dd:0b:ac:d0:e0:
                    71:34:b6:5c:66:98:16:90:06:05:6a:0b:98:79:ce:
                    a2:ed:6a:48:67:d4:4e:08:25:39:e2:a3:8b:fa:5b:
                    ef:a0:a7:26:06:28:c6:0f:3f:bc:38:62:77:c2:5c:
                    e3:f6:8a:e9:bb:f3:aa:e2:89:81:d6:57:9b:cd:2b:
                    6f:89:40:85:c7:69:59:dd:d2:ee:e4:0c:41:31:61:
                    da:07:c9:78:22:a2:d1:d1:be:9a:4e:ec:aa:f5:6f:
                    e8:af:7c:6a:db:e6:a1:d4:7f:d8:7f:a6:55:1f:b2:
                    c6:76:e0:84:06:01:be:81:03:68:d5:10:9a:50:a9:
                    c1:2e:3d:f2:72:24:f9:48:1c:78:7d:6e:db:ee:69:
                    e1:bf:ca:80:83:bc:ba:90:39:6f:ca:0b:f2:c7:be:
                    d9:d0:c6:37:43:8d:3e:de:b1:32:93:de:85:9e:68:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:97:63:7E:15:72:07:E8:88:B5:F1:E0:69:D8:09:6F:DC:FB:65:FE
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/r5djfhVyB-iItfHgadgJb9z7Zf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:c::/46

    Signature Algorithm: sha256WithRSAEncryption
         46:b0:65:37:c1:9d:59:5c:2b:38:9b:c2:56:8c:2c:75:5a:88:
         83:46:88:65:94:bc:8f:2a:bd:0c:6b:01:c6:bd:a3:a1:d9:c5:
         48:89:67:4d:3b:ff:94:28:b9:b9:8b:25:33:f7:d6:1c:63:22:
         c3:4e:0a:d5:02:13:7b:ee:c5:34:43:89:9a:29:44:b6:33:93:
         f8:ea:cc:7a:b9:bb:70:40:79:ac:98:55:6a:05:d9:a0:a0:a6:
         da:75:19:3b:26:31:eb:ff:4d:b9:e7:6a:47:06:6c:1f:87:9e:
         5d:a3:ec:f6:51:7b:c5:d7:f1:5d:ab:af:df:8e:5a:50:d5:09:
         55:34:6e:e3:79:ec:a8:07:c5:94:37:60:31:1a:7c:df:c3:17:
         31:44:bf:7c:ee:93:02:ee:2f:0d:d5:5f:4b:81:81:90:ea:0d:
         91:f2:2a:b7:9f:7c:8c:95:22:00:c1:fe:9d:a0:89:1a:b4:9f:
         ff:be:fd:c3:b5:e1:87:35:cb:7b:24:2f:3d:2b:8c:82:79:58:
         f4:8b:d7:66:41:53:c2:d9:aa:32:be:a9:c4:9c:04:21:7c:1d:
         c2:3e:e1:dc:88:7c:00:67:78:3a:64:14:2c:90:5e:2f:5c:6b:
         a2:6b:0f:f6:3a:b7:9b:ae:7f:43:9c:5e:5f:0f:ac:46:4c:92:
         b0:0f:4c:58
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEFuXAeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDMy
NTExNTAxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWY5NzYzN2UxNTcy
MDdlODg4YjVmMWUwNjlkODA5NmZkY2ZiNjVmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM/gA+Xhg4kUjRpNEyTK2ZNvk0/OYK17hwlqLyfs7jhNN/Q1
kSXNklJQQnXvAOtkVRmE8IRqF35KaCDDFHVwpJ/akz+yBV6rjMmy185eCiTmKDsk
wd0LrNDgcTS2XGaYFpAGBWoLmHnOou1qSGfUTgglOeKji/pb76CnJgYoxg8/vDhi
d8Jc4/aK6bvzquKJgdZXm80rb4lAhcdpWd3S7uQMQTFh2gfJeCKi0dG+mk7sqvVv
6K98atvmodR/2H+mVR+yxnbghAYBvoEDaNUQmlCpwS498nIk+UgceH1u2+5p4b/K
gIO8upA5b8oL8se+2dDGN0ONPt6xMpPehZ5onNcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSvl2N+FXIH6Ii18eBp2Alv3Ptl/jAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L3I1ZGpmaFZ5Qi1pSXRmSGdhZGdKYjl6N1pmNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioGoAUADDANBgkqhkiG9w0BAQsF
AAOCAQEARrBlN8GdWVwrOJvCVowsdVqIg0aIZZS8jyq9DGsBxr2jodnFSIlnTTv/
lCi5uYslM/fWHGMiw04K1QITe+7FNEOJmilEtjOT+OrMerm7cEB5rJhVagXZoKCm
2nUZOyYx6/9NuedqRwZsH4eeXaPs9lF7xdfxXauv345aUNUJVTRu43nsqAfFlDdg
MRp838MXMUS/fO6TAu4vDdVfS4GBkOoNkfIqt598jJUiAMH+naCJGrSf/779w7Xh
hzXLeyQvPSuMgnlY9IvXZkFTwtmqMr6pxJwEIXwdwj7h3Ih8AGd4OmQULJBeL1xr
omsP9jq3m65/Q5xeXw+sRkySsA9MWA==
-----END CERTIFICATE-----