Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rN97wsRZAqbLcjOzsilpX_ZJGVw.roa
File:                     rN97wsRZAqbLcjOzsilpX_ZJGVw.roa (raw, json)
Hash identifier:          D64idvycqEDKN8UhjxA78Al2Ci7v3o0/UgonXTv+QUw=
Subject key identifier:   AC:DF:7B:C2:C4:59:02:A6:CB:72:33:B3:B2:29:69:5F:F6:49:19:5C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181DE2D0F3D36741A49C12BB1FE054F2761
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rN97wsRZAqbLcjOzsilpX_ZJGVw.roa
Signing time:             Fri 08 Jul 2022 14:18:23 +0000
ROA not before:           Fri 08 Jul 2022 14:18:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147018
IP address blocks:        2a06:a005:fc0::/44 maxlen: 48
                          2a06:a005:a06::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:de:2d:0f:3d:36:74:1a:49:c1:2b:b1:fe:05:4f:27:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  8 14:18:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=acdf7bc2c45902a6cb7233b3b229695ff649195c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:73:06:e1:19:a2:98:60:49:f3:7e:82:5e:de:
                    59:d1:15:26:e9:82:7e:f2:a1:64:af:81:ad:f3:3a:
                    f4:7b:32:57:02:7d:c5:2e:0d:68:73:2a:50:98:97:
                    ea:2f:d9:c8:c5:ed:b2:7b:9a:7f:7a:49:1a:e7:43:
                    09:75:be:bb:6b:d9:4e:c2:f8:d4:60:81:fc:37:bd:
                    b3:d1:df:31:d0:90:6c:c3:27:ba:29:15:7f:c6:cb:
                    46:d4:7a:a5:37:9f:74:bf:c1:cb:05:b4:c0:58:33:
                    45:6b:4b:24:20:e9:76:45:37:48:2d:9d:28:a1:d6:
                    db:1a:29:33:a2:6e:bd:2c:29:b7:3b:59:ed:78:65:
                    bf:1d:1b:3f:91:44:8f:7f:34:5e:fd:72:ae:8d:00:
                    1f:d7:6e:aa:d0:be:8f:41:72:60:76:4c:dc:a6:86:
                    16:ae:5d:93:88:fc:cf:27:4a:11:cf:ab:b3:fa:68:
                    b0:2e:97:2d:b0:17:1c:da:f7:43:55:1e:3e:28:b1:
                    72:b4:43:48:7b:c6:e0:16:81:82:9f:24:38:b1:24:
                    a7:9e:f1:a9:6b:62:10:16:ae:7a:79:47:c2:dd:03:
                    d0:8e:9e:8f:0c:8d:ad:6c:a0:24:e4:ea:00:7a:f9:
                    0b:52:33:5a:02:3c:b0:63:59:25:27:2d:f6:e0:ec:
                    eb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DF:7B:C2:C4:59:02:A6:CB:72:33:B3:B2:29:69:5F:F6:49:19:5C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rN97wsRZAqbLcjOzsilpX_ZJGVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a06::/48
                  2a06:a005:fc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7c:c8:a5:16:eb:69:47:0e:f2:f9:03:95:f1:30:84:94:a7:4e:
         64:d1:6f:84:24:d3:3e:80:8f:be:b2:95:5e:67:78:14:ea:1d:
         af:d3:2f:8a:a2:a5:ae:7a:68:3b:06:76:2d:ae:c7:61:48:e7:
         6c:e8:df:22:b3:22:61:28:f3:cd:de:2d:bb:fa:04:15:e3:3d:
         df:53:2f:66:60:5c:61:6a:ea:c2:92:74:dd:6f:64:aa:59:f6:
         06:b7:f4:30:e4:35:c1:f9:bc:6e:4e:09:94:47:61:e9:39:22:
         a8:e6:3f:9a:68:1e:de:ba:be:e9:0f:89:49:5d:f4:ba:27:1e:
         ea:ba:b7:ad:63:28:86:10:cb:8b:37:80:e8:03:da:6d:85:53:
         9b:97:1b:50:05:c1:a3:1a:a1:3f:d7:2b:17:95:b0:48:2a:25:
         12:fe:9d:c7:71:f6:f2:fb:1b:4b:c8:bc:94:5b:7c:c9:14:90:
         30:c8:18:cf:d5:56:c6:fa:c3:0a:8a:f4:46:0c:db:29:d4:99:
         b7:82:3d:9c:aa:a5:83:5c:e5:44:7d:e2:7e:44:92:1a:78:5f:
         71:79:84:c4:4a:38:d4:94:3a:3b:87:a8:8a:1a:0f:1f:d6:14:
         d7:f0:22:36:75:7e:25:33:cd:eb:08:08:c9:e8:49:4e:bf:05:
         cc:d6:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----