Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rqPeqypCW2pQbSm3Y4L-Ijzkv_I.roa
File:                     rqPeqypCW2pQbSm3Y4L-Ijzkv_I.roa (raw, json)
Hash identifier:          cwVKCPrW72GMyT44YoGBnf7aM5qasYmcKse2w4dK65E=
Subject key identifier:   AE:A3:DE:AB:2A:42:5B:6A:50:6D:29:B7:63:82:FE:22:3C:E4:BF:F2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181D795D3381E83522D3A9218A41A1DB017
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rqPeqypCW2pQbSm3Y4L-Ijzkv_I.roa
Signing time:             Thu 07 Jul 2022 07:35:29 +0000
ROA not before:           Thu 07 Jul 2022 07:35:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399866
IP address blocks:        2a06:a005:1170::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d7:95:d3:38:1e:83:52:2d:3a:92:18:a4:1a:1d:b0:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  7 07:35:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aea3deab2a425b6a506d29b76382fe223ce4bff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:d2:55:59:db:ee:69:e6:aa:df:35:47:6f:
                    ce:95:66:02:9d:31:5b:cc:97:60:b3:a7:a5:83:10:
                    10:e8:5e:d9:4e:28:07:87:bd:3e:7b:9c:b5:bb:09:
                    37:49:31:76:81:fb:cd:62:c6:75:1f:9b:5e:61:ed:
                    61:6e:09:00:d5:3e:ce:c2:7c:60:e1:c5:6d:a8:39:
                    49:a5:6d:93:8b:65:eb:dd:d2:e9:9d:19:c0:9a:f7:
                    d7:1e:b8:e9:3c:50:a4:88:59:4b:1e:d9:e0:49:6f:
                    70:d1:52:91:79:aa:23:9c:c6:4d:f7:00:c4:b2:c0:
                    43:bd:e3:4e:5f:d1:20:88:a6:f6:4c:f5:b1:21:b1:
                    a9:31:20:6d:ce:c3:3e:cb:e7:16:4d:60:62:27:32:
                    64:c5:27:b9:87:31:99:c6:8d:50:64:79:ce:70:80:
                    20:c1:e5:fc:40:8a:e0:c2:1c:6f:39:3d:c5:14:21:
                    e7:07:93:b2:b1:27:bb:f2:e8:7e:ea:68:47:3a:d4:
                    2f:03:24:37:a8:31:c8:4d:5a:49:e5:a9:ec:5c:e6:
                    6d:1f:c5:09:ca:6f:53:ae:a2:2a:ce:03:d2:35:5d:
                    13:39:66:34:3b:f9:be:bc:fb:39:47:e5:96:db:70:
                    02:ad:cd:d6:3c:de:88:4f:ed:91:65:78:25:0e:b8:
                    2d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A3:DE:AB:2A:42:5B:6A:50:6D:29:B7:63:82:FE:22:3C:E4:BF:F2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rqPeqypCW2pQbSm3Y4L-Ijzkv_I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1170::/44

    Signature Algorithm: sha256WithRSAEncryption
         6e:f6:77:64:92:7f:bd:3e:4f:3c:62:bc:db:0e:02:c3:05:1b:
         71:52:da:67:eb:27:c5:97:b8:8f:bd:7f:da:c6:29:bc:47:fa:
         e4:bb:b8:a0:a4:98:ab:e3:cb:c9:9a:6e:ae:cb:5a:50:73:4c:
         70:3a:c5:ce:83:d4:12:9d:56:71:b8:49:cf:63:08:63:96:f4:
         ca:d9:d3:a7:f7:3f:f0:a6:f0:22:e3:3c:44:d1:11:1b:21:81:
         90:2a:8d:25:c5:88:00:b0:63:d9:18:4d:cb:92:a7:a1:dc:fc:
         e8:b6:51:ef:b5:ab:be:32:45:c5:dd:a2:c0:5c:52:38:bc:d5:
         6a:4c:47:da:37:9c:44:ad:59:12:b1:07:a9:b2:8a:3c:65:4d:
         da:9e:d3:6c:64:07:9a:91:7b:0f:b5:8c:9a:9d:c8:b5:f1:ce:
         7f:2b:35:59:b3:0a:0d:d0:3b:66:11:19:4d:86:3d:ce:ee:a7:
         f9:1c:d3:b0:1f:08:e7:ea:a1:d2:e7:82:6f:05:25:61:90:b2:
         ef:b5:75:e1:bc:8c:56:e9:32:5d:8b:ab:31:59:ee:47:19:aa:
         d5:14:25:8b:1e:b5:b2:cf:4d:ea:df:eb:2b:21:27:12:1c:71:
         d4:01:c2:62:84:44:5b:3b:4d:a5:72:07:c1:c2:c2:e1:39:ca:
         05:8d:19:9d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYHXldM4HoNSLTqSGKQaHbAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzA3MDczNTI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWEzZGVhYjJhNDI1YjZhNTA2ZDI5Yjc2MzgyZmUyMjNjZTRiZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYbSVVnb7mnmqt81R2/OlWYCnTFb
zJdgs6elgxAQ6F7ZTigHh70+e5y1uwk3STF2gfvNYsZ1H5teYe1hbgkA1T7Ownxg
4cVtqDlJpW2Ti2Xr3dLpnRnAmvfXHrjpPFCkiFlLHtngSW9w0VKReaojnMZN9wDE
ssBDveNOX9EgiKb2TPWxIbGpMSBtzsM+y+cWTWBiJzJkxSe5hzGZxo1QZHnOcIAg
weX8QIrgwhxvOT3FFCHnB5OysSe78uh+6mhHOtQvAyQ3qDHITVpJ5ansXOZtH8UJ
ym9TrqIqzgPSNV0TOWY0O/m+vPs5R+WW23ACrc3WPN6IT+2RZXglDrgtIwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK6j3qsqQltqUG0pt2OC/iI85L/yMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvcnFQZXF5cENXMnBRYlNtM1k0TC1Janprdl9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBRFw
MA0GCSqGSIb3DQEBCwUAA4IBAQBu9ndkkn+9Pk88YrzbDgLDBRtxUtpn6yfFl7iP
vX/axim8R/rku7igpJir48vJmm6uy1pQc0xwOsXOg9QSnVZxuEnPYwhjlvTK2dOn
9z/wpvAi4zxE0REbIYGQKo0lxYgAsGPZGE3Lkqeh3PzotlHvtau+MkXF3aLAXFI4
vNVqTEfaN5xErVkSsQepsoo8ZU3antNsZAeakXsPtYyanci18c5/KzVZswoN0Dtm
ERlNhj3O7qf5HNOwHwjn6qHS54JvBSVhkLLvtXXhvIxW6TJdi6sxWe5HGarVFCWL
HrWyz03q3+srIScSHHHUAcJihERbO02lcgfBwsLhOcoFjRmd
-----END CERTIFICATE-----