Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rQ6s4o6XI87g8lkjqi1_A3i-g3c.roa
File:                     rQ6s4o6XI87g8lkjqi1_A3i-g3c.roa (raw, json)
Hash identifier:          lAUiHaYSaEKqFWFHg/NpYifJwrFRMRtRvPFOxTvlV5U=
Subject key identifier:   AD:0E:AC:E2:8E:97:23:CE:E0:F2:59:23:AA:2D:7F:03:78:BE:83:77
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018410D906ED564CA089EB0E2A180A1C562D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rQ6s4o6XI87g8lkjqi1_A3i-g3c.roa
Signing time:             Tue 25 Oct 2022 20:32:49 +0000
ROA not before:           Tue 25 Oct 2022 20:32:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13308
IP address blocks:        2a06:a005:2dc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:10:d9:06:ed:56:4c:a0:89:eb:0e:2a:18:0a:1c:56:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 25 20:32:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ad0eace28e9723cee0f25923aa2d7f0378be8377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:42:f3:f9:bc:8e:d8:2b:fa:65:3a:94:48:ed:
                    f5:f3:6c:39:47:7b:c6:d9:1d:a0:bb:96:3f:f5:f5:
                    07:c7:75:da:f5:68:3a:db:8c:36:69:e6:e9:50:64:
                    94:56:d8:fe:64:ba:e1:cc:4b:71:ae:98:e9:1e:c1:
                    bd:90:fa:84:0a:5c:62:b9:d9:fa:88:09:86:63:fc:
                    6e:bb:e2:f8:69:6b:d6:fb:72:1f:a9:09:4b:d6:26:
                    85:63:cd:7f:cf:98:e2:1f:6e:8e:ef:c3:6a:91:14:
                    f8:da:e4:87:14:54:e3:51:c1:2e:39:4c:53:bb:3b:
                    02:ec:2b:59:df:74:62:74:40:c9:c8:a2:d6:01:8b:
                    b2:1c:54:b1:11:0e:16:95:41:ae:56:c1:ad:a3:b0:
                    c3:f5:96:84:50:3a:96:c4:93:fc:85:9a:f9:8f:6b:
                    17:94:26:6e:d2:a6:9e:99:b9:10:d4:2f:6b:d8:e0:
                    37:21:50:27:24:b3:24:b9:ee:8f:8b:d7:1c:ad:f8:
                    9f:86:a4:0b:66:a2:85:67:70:61:fb:f4:a4:da:02:
                    57:cb:40:13:9d:b3:4d:c2:ea:98:f1:90:b6:33:e0:
                    0a:89:57:32:af:f5:63:86:34:34:27:89:d6:f0:63:
                    07:c9:b4:e2:91:5c:ec:7e:8d:d1:46:ba:5c:14:11:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0E:AC:E2:8E:97:23:CE:E0:F2:59:23:AA:2D:7F:03:78:BE:83:77
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rQ6s4o6XI87g8lkjqi1_A3i-g3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2dc::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:90:7e:bf:d4:ca:b2:f0:a5:8b:34:be:df:6b:67:ba:e2:4a:
         27:3f:e5:76:68:bd:c1:ba:b8:99:22:60:a1:c5:cb:f8:28:9c:
         e6:ed:61:14:ba:42:39:a1:3c:18:05:23:62:2b:9e:3c:6f:14:
         6f:8e:46:1b:9a:5d:16:92:c7:ad:b0:6a:75:51:a2:8f:d4:79:
         58:b7:46:1d:81:bb:a0:99:2b:4b:a8:63:8b:8e:cc:f3:ca:94:
         48:5b:79:ce:6c:b8:e0:e0:60:bc:9f:1b:0b:19:5a:04:57:4c:
         e4:40:ca:45:a1:7e:33:8c:be:fe:20:b8:01:4c:ae:f8:e5:dd:
         9e:77:92:79:56:7d:bd:e1:99:ec:7b:54:e7:c9:70:14:be:61:
         5e:f3:3f:90:75:6d:ff:6b:d8:21:0e:a6:40:61:d4:a1:de:92:
         98:71:f2:2a:92:df:8c:2b:04:08:ae:c0:50:47:e0:f9:64:ad:
         05:35:8c:6b:eb:c2:81:07:69:16:9a:c7:c1:f9:cd:83:80:ec:
         57:92:4c:e2:31:08:16:9d:78:ee:41:ff:35:e4:54:fe:d7:91:
         e6:13:7a:77:aa:7e:42:e9:67:eb:0b:e1:bf:3a:e6:a6:b2:be:
         d6:82:8a:6b:4d:9b:b6:7c:33:a2:96:32:7d:fd:b3:ee:39:3d:
         01:06:ce:f9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYQQ2QbtVkygiesOKhgKHFYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDI1MjAzMjQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDBlYWNlMjhlOTcyM2NlZTBmMjU5MjNhYTJkN2YwMzc4YmU4Mzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Lz+byO2Cv6ZTqUSO3182w5R3vG
2R2gu5Y/9fUHx3Xa9Wg624w2aebpUGSUVtj+ZLrhzEtxrpjpHsG9kPqEClxiudn6
iAmGY/xuu+L4aWvW+3IfqQlL1iaFY81/z5jiH26O78NqkRT42uSHFFTjUcEuOUxT
uzsC7CtZ33RidEDJyKLWAYuyHFSxEQ4WlUGuVsGto7DD9ZaEUDqWxJP8hZr5j2sX
lCZu0qaembkQ1C9r2OA3IVAnJLMkue6Pi9ccrfifhqQLZqKFZ3Bh+/Sk2gJXy0AT
nbNNwuqY8ZC2M+AKiVcyr/VjhjQ0J4nW8GMHybTikVzsfo3RRrpcFBGPaQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK0OrOKOlyPO4PJZI6otfwN4voN3MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvclE2czRvNlhJODdnOGxranFpMV9BM2ktZzNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQLc
MA0GCSqGSIb3DQEBCwUAA4IBAQAEkH6/1Mqy8KWLNL7fa2e64konP+V2aL3BuriZ
ImChxcv4KJzm7WEUukI5oTwYBSNiK548bxRvjkYbml0WksetsGp1UaKP1HlYt0Yd
gbugmStLqGOLjszzypRIW3nObLjg4GC8nxsLGVoEV0zkQMpFoX4zjL7+ILgBTK74
5d2ed5J5Vn294Znse1TnyXAUvmFe8z+QdW3/a9ghDqZAYdSh3pKYcfIqkt+MKwQI
rsBQR+D5ZK0FNYxr68KBB2kWmsfB+c2DgOxXkkziMQgWnXjuQf815FT+15HmE3p3
qn5C6WfrC+G/Ouamsr7WgoprTZu2fDOiljJ9/bPuOT0BBs75
-----END CERTIFICATE-----