Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sLiuxibKwYfx26X-xYnVE3q_f1w.roa
File:                     sLiuxibKwYfx26X-xYnVE3q_f1w.roa (raw, json)
Hash identifier:          5SMKe3CGs/799cHIeF47sRME1/cIinoyN27QnPbjQZo=
Subject key identifier:   B0:B8:AE:C6:26:CA:C1:87:F1:DB:A5:FE:C5:89:D5:13:7A:BF:7F:5C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01847652B80B5E2551A9835FE21231EA3BB6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sLiuxibKwYfx26X-xYnVE3q_f1w.roa
Signing time:             Mon 14 Nov 2022 13:27:23 +0000
ROA not before:           Mon 14 Nov 2022 13:27:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     149953
IP address blocks:        2a06:a005:1081::/48 maxlen: 48
                          2a06:a005:d2e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:76:52:b8:0b:5e:25:51:a9:83:5f:e2:12:31:ea:3b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 14 13:27:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b0b8aec626cac187f1dba5fec589d5137abf7f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:85:0d:7d:25:33:e6:35:ce:d5:c4:e3:84:
                    e8:dc:21:f5:98:f3:fb:da:1e:32:38:97:33:2a:3f:
                    44:a7:3a:05:bf:70:34:43:02:10:c1:d7:0d:bc:8c:
                    f4:2a:54:2c:af:4b:64:a9:fe:e5:b7:93:bb:20:ed:
                    de:3f:0e:d9:a7:40:e7:8f:d5:55:30:df:f6:2e:c4:
                    8a:2b:12:08:06:29:a3:6a:27:ff:b3:b8:76:8d:36:
                    fa:d7:6b:52:c8:b4:6f:a4:aa:77:ed:84:a2:ab:bf:
                    0a:36:d7:c0:8c:99:98:c2:34:54:a5:4a:6c:f9:86:
                    a1:8d:83:08:a8:e4:68:4e:82:34:2f:6f:bc:d1:1a:
                    be:35:0d:ae:13:fe:b4:ce:af:7f:c5:85:eb:e0:14:
                    38:38:05:bc:82:36:ac:7d:1e:f3:94:ba:29:48:35:
                    b8:51:cd:8e:81:40:c6:cf:f6:0e:70:c4:23:12:af:
                    7f:9f:87:08:c5:ef:7c:99:ce:57:6c:91:78:d0:fd:
                    07:6c:89:63:87:08:da:cd:37:a5:00:c6:81:2e:e6:
                    08:ca:70:0c:45:92:b7:65:1a:c3:05:b6:19:7a:30:
                    90:ce:e4:11:44:e3:fc:87:34:6c:51:f5:6b:47:f5:
                    47:e0:73:36:01:72:37:6c:b4:7d:36:e2:15:1c:62:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B8:AE:C6:26:CA:C1:87:F1:DB:A5:FE:C5:89:D5:13:7A:BF:7F:5C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sLiuxibKwYfx26X-xYnVE3q_f1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2e::/48
                  2a06:a005:1081::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:f9:c3:be:39:2e:54:bb:cf:b5:16:84:61:fa:f8:4b:59:bc:
         35:6b:dc:55:e6:76:93:c5:be:48:e4:70:0c:ec:ad:5a:e5:58:
         a6:b0:86:b9:ef:34:8c:8b:a7:84:35:16:88:99:3b:c3:8b:4d:
         d9:e0:64:61:14:b4:69:62:6e:d0:b4:a7:98:33:4d:22:b1:8b:
         3a:c2:5b:0c:88:c2:c6:f1:8c:08:b2:7e:90:b2:e6:e0:7b:19:
         c3:43:16:fc:1b:fe:70:26:a3:af:7e:20:0a:c4:77:7e:b9:02:
         c9:ba:d8:51:01:5f:b4:09:fe:d4:b5:39:44:98:a2:e8:17:81:
         62:15:1a:69:8c:cf:b8:3d:81:72:1b:6d:a9:00:f1:d6:e5:e3:
         b0:66:58:a8:bd:03:26:cc:cb:85:75:48:ae:02:11:c1:30:4f:
         80:e6:5f:63:5d:72:f6:72:72:90:80:68:9a:1f:31:e2:5c:f6:
         8f:a9:c5:26:b6:40:d9:76:fd:1c:47:62:f9:14:23:9d:0b:e6:
         e9:c5:33:26:a8:92:0a:22:fb:27:2c:b7:b8:75:f2:43:00:be:
         15:d4:16:32:98:ee:18:0e:1c:8f:61:83:93:63:1a:61:65:f6:
         2b:af:2e:70:35:69:f4:21:ab:7a:aa:6c:68:7e:43:cd:e7:2c:
         86:a4:e7:0e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYR2UrgLXiVRqYNf4hIx6ju2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTE0MTMyNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGI4YWVjNjI2Y2FjMTg3ZjFkYmE1ZmVjNTg5ZDUxMzdhYmY3ZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHyFDX0lM+Y1ztXE44To3CH1mPP7
2h4yOJczKj9EpzoFv3A0QwIQwdcNvIz0KlQsr0tkqf7lt5O7IO3ePw7Zp0Dnj9VV
MN/2LsSKKxIIBimjaif/s7h2jTb612tSyLRvpKp37YSiq78KNtfAjJmYwjRUpUps
+YahjYMIqORoToI0L2+80Rq+NQ2uE/60zq9/xYXr4BQ4OAW8gjasfR7zlLopSDW4
Uc2OgUDGz/YOcMQjEq9/n4cIxe98mc5XbJF40P0HbIljhwjazTelAMaBLuYIynAM
RZK3ZRrDBbYZejCQzuQRROP8hzRsUfVrR/VH4HM2AXI3bLR9NuIVHGKEswIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLC4rsYmysGH8dul/sWJ1RN6v39cMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvc0xpdXhpYkt3WWZ4MjZYLXhZblZFM3FfZjF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgagBQ0u
AwcAKgagBRCBMA0GCSqGSIb3DQEBCwUAA4IBAQBu+cO+OS5Uu8+1FoRh+vhLWbw1
a9xV5naTxb5I5HAM7K1a5VimsIa57zSMi6eENRaImTvDi03Z4GRhFLRpYm7QtKeY
M00isYs6wlsMiMLG8YwIsn6QsubgexnDQxb8G/5wJqOvfiAKxHd+uQLJuthRAV+0
Cf7UtTlEmKLoF4FiFRppjM+4PYFyG22pAPHW5eOwZliovQMmzMuFdUiuAhHBME+A
5l9jXXL2cnKQgGiaHzHiXPaPqcUmtkDZdv0cR2L5FCOdC+bpxTMmqJIKIvsnLLe4
dfJDAL4V1BYymO4YDhyPYYOTYxphZfYrry5wNWn0Iat6qmxofkPN5yyGpOcO
-----END CERTIFICATE-----