Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vKtbdpaaj1glC2JP1ezY1DFzB84.roa
File:                     vKtbdpaaj1glC2JP1ezY1DFzB84.roa (raw, json)
Hash identifier:          wlRbDziHy0AmIvl6HObMFt158p0Ycjt8TQBudq5miv0=
Subject key identifier:   BC:AB:5B:76:96:9A:8F:58:25:0B:62:4F:D5:EC:D8:D4:31:73:07:CE
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183FB269680CBE5E3933EA1BCFA271DCCC9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vKtbdpaaj1glC2JP1ezY1DFzB84.roa
Signing time:             Fri 21 Oct 2022 15:25:53 +0000
ROA not before:           Fri 21 Oct 2022 15:25:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211877
IP address blocks:        2a06:a005:ed0::/44 maxlen: 48
                          2a06:a005:d40::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:fb:26:96:80:cb:e5:e3:93:3e:a1:bc:fa:27:1d:cc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 21 15:25:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bcab5b76969a8f58250b624fd5ecd8d4317307ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:43:f4:ef:18:53:d3:66:85:4d:87:2d:12:
                    30:30:8a:c8:8d:6d:13:fc:12:bb:7e:e7:2f:f6:0a:
                    9c:e1:5e:a4:6d:b9:3f:cf:ae:00:19:2d:70:98:b0:
                    49:ab:f8:69:0d:7e:87:c9:0a:52:b1:26:cd:8f:51:
                    cf:85:25:6d:88:62:b8:e9:23:d2:af:84:dd:88:42:
                    a7:ab:cd:8b:bb:91:b1:08:2d:0b:e3:ea:78:0e:2f:
                    67:03:7b:e7:19:5d:a4:ea:61:66:ec:6d:d7:0d:a8:
                    c8:ed:e0:22:59:3e:68:0b:3a:82:16:87:d1:db:88:
                    99:bf:10:26:cc:ee:8b:c7:9b:85:42:96:61:51:7b:
                    ed:9e:d6:9a:fc:3c:d7:9c:a4:54:a9:a4:58:aa:ae:
                    fa:22:f0:b3:ae:b0:8f:ee:ae:9a:c4:6c:fc:d6:dc:
                    06:7e:40:0e:3d:59:d6:0a:f9:19:bd:10:a7:c7:ce:
                    c4:62:da:03:c0:54:7e:6a:4a:85:53:30:e8:d3:c2:
                    0c:e6:82:8e:39:4f:f0:8b:23:41:6d:eb:6f:63:f8:
                    ce:51:0e:69:bf:17:22:d2:e0:4b:71:2c:ce:92:c7:
                    ae:07:70:e4:89:13:84:5d:06:10:29:da:eb:70:95:
                    07:04:9b:1a:8c:82:ce:42:5a:fe:c2:94:ca:31:f0:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AB:5B:76:96:9A:8F:58:25:0B:62:4F:D5:EC:D8:D4:31:73:07:CE
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vKtbdpaaj1glC2JP1ezY1DFzB84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d40::/44
                  2a06:a005:ed0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8c:95:80:91:9f:de:9a:72:27:b9:00:69:4a:e9:65:cf:50:51:
         50:b4:30:5b:da:65:7b:b4:04:31:76:8f:7e:7e:84:35:0a:4b:
         cf:20:14:45:8d:04:0c:2c:c8:77:93:7e:d4:d6:f8:43:9c:f7:
         a9:85:22:76:40:2f:7e:48:c9:97:d4:9f:aa:ac:32:39:f5:8e:
         98:1a:11:d7:2c:b4:ca:13:d8:16:c6:53:94:05:3e:d0:2b:a4:
         5b:f6:5e:45:77:52:23:78:ac:32:08:f7:c3:f8:f1:36:18:ea:
         f3:39:97:25:03:13:48:17:60:26:5e:96:64:48:07:60:a5:81:
         0d:50:9a:08:7a:d4:99:46:a0:cb:0d:cb:47:20:25:e9:4d:de:
         ae:0e:f9:a7:97:b4:b9:64:9c:f5:4e:78:39:b7:18:df:5d:ec:
         f2:7b:97:bd:8e:3f:c8:46:b5:77:00:df:12:0d:21:b3:a7:69:
         6d:8f:a2:85:0f:9e:3a:ab:2d:94:a9:5a:ff:0a:fd:33:ea:a7:
         a6:0d:ce:c9:94:80:22:23:95:6b:eb:e3:70:d5:07:ca:26:e4:
         b5:7b:24:c0:f6:10:fd:7d:4f:08:e8:dd:3d:ad:e2:96:3d:15:
         5a:a7:1a:b7:c2:e0:5d:4c:0e:08:59:7a:8b:2c:c1:1c:45:b4:
         db:a6:a6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----