Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tEyjcM-um7tzY-d7vokpadT2Lqg.roa
File:                     tEyjcM-um7tzY-d7vokpadT2Lqg.roa (raw, json)
Hash identifier:          D/KRY3WKYvEkQcfZwFcSmz+FfQPFk0ebLmEaO66+tX4=
Subject key identifier:   B4:4C:A3:70:CF:AE:9B:BB:73:63:E7:7B:BE:89:29:69:D4:F6:2E:A8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18D455BF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tEyjcM-um7tzY-d7vokpadT2Lqg.roa
Signing time:             Wed 27 Apr 2022 17:19:29 +0000
ROA not before:           Wed 27 Apr 2022 17:19:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44406
IP address blocks:        2a06:a005:1e::/47 maxlen: 48
                          2a06:a005:4e0::/44 maxlen: 48
                          2a06:a005:670::/44 maxlen: 48
                          2a06:a005:1d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416568767 (0x18d455bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 27 17:19:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b44ca370cfae9bbb7363e77bbe892969d4f62ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:c5:62:d8:e7:8f:0f:0e:0d:13:ef:4b:74:
                    50:e9:56:11:4e:fe:ca:6c:dd:dd:23:fb:36:71:67:
                    9a:89:0c:d2:20:61:b4:a6:9d:db:ed:ce:dd:21:48:
                    a6:a1:87:02:7f:4f:83:8b:77:33:87:ea:85:12:fe:
                    c8:b2:87:e0:7f:42:8b:06:bf:7c:ff:ea:46:df:15:
                    03:c9:22:90:11:6a:4d:7a:80:59:57:65:3d:e6:6a:
                    59:4a:8a:13:8f:90:f9:78:f0:ee:6e:7e:ce:d3:ad:
                    98:f2:cf:61:36:23:2f:73:7e:34:35:54:2d:0d:8d:
                    bc:b9:46:ea:ff:71:72:0f:c5:26:12:bc:26:1e:c9:
                    c4:5e:39:fb:bf:9f:c3:59:ce:62:1c:79:57:97:42:
                    fd:b8:37:a7:d9:74:f4:d6:57:e2:b3:da:de:d6:4a:
                    4d:10:1a:da:eb:3f:af:30:2a:53:09:fe:6e:d8:ef:
                    71:ff:47:d2:27:bf:e4:27:ee:eb:7d:eb:b2:c5:7f:
                    20:11:00:de:2b:35:51:d1:25:de:83:66:4a:b6:4f:
                    cb:32:36:05:67:55:fd:37:4f:6f:00:2f:1a:db:a8:
                    ef:40:b6:fa:2c:df:63:c0:06:5f:92:9e:d5:10:62:
                    43:44:77:92:83:8e:b5:46:e1:1b:08:2f:0f:92:ea:
                    7d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4C:A3:70:CF:AE:9B:BB:73:63:E7:7B:BE:89:29:69:D4:F6:2E:A8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tEyjcM-um7tzY-d7vokpadT2Lqg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1d::-2a06:a005:1f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:4e0::/44
                  2a06:a005:670::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:26:a6:02:f7:ac:10:ac:a0:42:f6:bf:c3:5f:01:2c:91:5d:
         d7:03:6f:4f:7f:c8:02:5c:83:9f:3c:c6:2e:05:b8:b6:a2:5c:
         39:96:ed:0b:d9:3a:d1:42:af:77:0c:fa:21:93:38:a5:fb:ca:
         28:df:8e:e7:73:c2:7b:1c:a4:59:30:71:13:0d:df:89:62:82:
         53:4a:cf:ff:53:80:09:a7:09:0c:6e:a1:04:b2:ac:67:b1:33:
         d8:29:65:46:8a:2c:20:b9:bd:fd:66:30:a6:96:7e:e1:c8:17:
         a3:ce:f0:4a:d3:64:18:c1:23:3d:a3:5b:e9:0c:2a:b2:29:0a:
         f6:60:79:0e:e5:ba:d7:b2:a7:e0:0c:b1:6f:7e:df:d3:9c:8f:
         d6:a4:1e:d4:24:ae:98:04:f3:23:bb:57:53:7d:e7:a0:95:f9:
         9c:51:b3:fa:a9:6b:40:0b:6c:0a:1d:66:a9:78:99:bc:ea:1c:
         9a:6c:a0:2d:71:6d:94:06:15:37:ce:3e:ce:c3:72:24:6f:25:
         45:d4:bb:cd:f0:ab:86:ef:8d:bb:ed:13:4c:4e:03:5b:1f:16:
         86:1f:a0:10:19:3e:98:2b:e0:9e:91:ee:da:c3:09:a7:89:37:
         a1:c0:d4:7c:2d:2f:49:dd:55:8d:79:46:59:a0:3a:ab:c6:eb:
         56:57:25:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----