Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/t1BHza8zs8PR7nxRTGJJSxEcg9w.roa
File:                     t1BHza8zs8PR7nxRTGJJSxEcg9w.roa (raw, json)
Hash identifier:          GlZEn99oR1NoxAcWu59XFQLR9Ttu2ho3x7cPoc/Jv6g=
Subject key identifier:   B7:50:47:CD:AF:33:B3:C3:D1:EE:7C:51:4C:62:49:4B:11:1C:83:DC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184576850F098083FC297B68F5E2F2C80CD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/t1BHza8zs8PR7nxRTGJJSxEcg9w.roa
Signing time:             Tue 08 Nov 2022 13:22:45 +0000
ROA not before:           Tue 08 Nov 2022 13:22:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203873
IP address blocks:        2a0a:6040:fc00::/40 maxlen: 48
                          2a06:a005:1280::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:57:68:50:f0:98:08:3f:c2:97:b6:8f:5e:2f:2c:80:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov  8 13:22:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b75047cdaf33b3c3d1ee7c514c62494b111c83dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:6e:1f:b5:2c:a0:9e:63:19:6e:51:c0:37:
                    9a:f0:89:69:df:c7:5f:fe:c9:e2:1f:13:a5:df:ba:
                    57:cd:f0:a7:e3:76:42:71:73:27:89:b5:b0:06:cc:
                    9f:77:56:37:49:8e:8c:2e:44:27:37:e8:08:ad:ed:
                    9c:32:ee:d2:5a:33:c6:2b:85:24:55:b4:8b:d1:87:
                    71:91:b4:b1:f9:d4:41:97:4f:4d:e9:8f:9a:22:38:
                    1e:7e:4f:62:a9:73:a3:56:16:9f:d2:a5:43:62:57:
                    7a:16:a8:e2:55:3b:6d:fe:25:39:48:15:4c:e6:b2:
                    86:f4:d2:7a:5c:bf:ff:c5:4f:3a:c7:2f:44:5b:fd:
                    03:28:c2:80:3b:1b:53:50:e9:93:6a:8f:48:76:3c:
                    42:d5:c4:76:1f:2f:a8:07:e4:8b:fd:49:25:64:2f:
                    48:e4:67:a9:05:ec:a2:c9:e9:3f:6b:4b:83:7c:0f:
                    b3:5c:2b:99:9c:e9:4e:9d:4c:ba:b5:82:b3:04:f7:
                    2d:65:39:a9:ce:7c:df:14:bb:c5:dc:b1:b1:9b:f5:
                    7c:78:9d:f6:51:d6:6a:5c:a6:94:98:68:a7:76:74:
                    7b:ee:97:53:9e:af:d5:62:66:98:14:e7:e3:a6:43:
                    8e:d8:b8:87:f3:aa:f4:ca:a3:59:b7:d6:94:6b:97:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:50:47:CD:AF:33:B3:C3:D1:EE:7C:51:4C:62:49:4B:11:1C:83:DC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/t1BHza8zs8PR7nxRTGJJSxEcg9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1280::/44
                  2a0a:6040:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a1:2b:dd:cd:4a:5e:13:19:89:84:b6:59:ca:f4:55:b8:99:2f:
         d3:34:5a:23:dd:12:ab:af:d6:6c:3d:3e:ba:bb:48:55:f4:20:
         8b:ad:26:53:17:19:03:ff:0a:0c:a1:9f:b4:8d:18:da:3b:4f:
         6d:0e:c6:99:87:b4:59:51:69:0a:e0:39:55:5b:d9:bd:3f:e5:
         a1:93:42:bf:aa:b6:34:0d:33:14:fd:0f:13:f9:4e:9c:f7:98:
         ca:ad:a7:e1:53:c5:58:9f:20:c5:63:7a:d3:a2:04:c7:0f:c6:
         a4:b0:0e:7a:92:e5:77:d1:2a:71:aa:21:01:ac:d3:21:02:3b:
         2f:4d:4f:a6:7c:c3:92:b2:e8:ad:c3:7f:d7:f9:02:f3:9c:77:
         ed:52:67:ff:15:ba:15:ad:0d:43:b9:ab:f5:8d:8e:cf:0c:44:
         ce:d3:c0:d1:52:15:f5:6e:c2:75:a2:60:3b:d5:30:21:f5:28:
         61:07:78:52:f7:2e:b9:0d:f1:ed:78:04:5c:ec:1e:00:a3:2b:
         39:01:7c:f3:51:67:17:8b:fe:99:98:cf:8c:78:19:23:fc:f4:
         29:05:ce:4b:dc:ce:d2:97:9d:a2:d8:ae:5d:dd:48:bc:2c:55:
         b6:14:e4:6c:6d:fa:92:c5:10:4a:3b:08:b0:73:44:43:99:3b:
         55:24:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----