Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vMSmhRqq-rQLO7cYP-bgO_gGIFM.roa
File:                     vMSmhRqq-rQLO7cYP-bgO_gGIFM.roa (raw, json)
Hash identifier:          yn1VkGKqRrThj0mgGTFR42AHKNOwjpH9Y+2YXWqaTMk=
Subject key identifier:   BC:C4:A6:85:1A:AA:FA:B4:0B:3B:B7:18:3F:E6:E0:3B:F8:06:20:53
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15B3DE5C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vMSmhRqq-rQLO7cYP-bgO_gGIFM.roa
Signing time:             Sat 01 Jan 2022 05:59:00 +0000
ROA not before:           Sat 01 Jan 2022 05:59:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48741
IP address blocks:        2a06:a001:a020::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364109404 (0x15b3de5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:59:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bcc4a6851aaafab40b3bb7183fe6e03bf8062053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:71:ad:0f:7f:23:a2:fe:f2:3b:dd:f1:9d:e5:
                    34:aa:b1:4a:20:f1:8b:fe:1a:64:78:61:f3:ba:38:
                    00:1b:01:1c:b6:b4:c6:89:86:a2:bb:ef:a6:a0:77:
                    b0:e8:07:bb:28:7f:0a:a4:0b:84:f2:2c:c4:f6:4d:
                    33:0d:4b:bb:3d:23:41:02:e0:51:71:20:b4:30:bd:
                    c1:b8:c5:84:a1:6d:4f:1e:52:48:37:58:ca:b7:b3:
                    ab:8a:a2:30:b8:04:3b:8e:d2:5f:99:1e:0c:78:31:
                    44:b9:47:20:b6:d5:c5:27:83:50:52:52:61:c5:4a:
                    37:86:66:8c:d6:f1:2c:ec:3f:21:c6:a1:4b:97:a2:
                    da:13:6c:4c:fa:25:28:0d:21:bc:f9:68:3d:00:0c:
                    ef:ad:df:eb:2c:e6:26:98:ca:f0:3b:48:af:1c:e2:
                    b8:b7:f3:e8:89:27:b4:a6:68:42:7c:68:15:72:34:
                    02:22:02:dd:db:35:65:e5:d3:fe:50:76:72:2a:22:
                    fa:73:56:25:83:e1:5e:ff:82:27:79:6e:71:da:27:
                    76:3e:f8:6b:87:88:a9:3d:ca:f6:c5:55:67:d6:35:
                    e7:af:c3:21:24:73:bd:33:4d:22:17:bb:c9:7d:c4:
                    8c:05:84:c5:63:ae:ca:8e:21:03:20:c8:48:44:20:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C4:A6:85:1A:AA:FA:B4:0B:3B:B7:18:3F:E6:E0:3B:F8:06:20:53
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vMSmhRqq-rQLO7cYP-bgO_gGIFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a020::/44

    Signature Algorithm: sha256WithRSAEncryption
         14:58:66:a2:9a:44:23:c6:8d:40:f0:54:6b:f1:30:d5:1c:ab:
         7c:6d:c4:1f:13:8c:6b:75:ab:76:cd:ba:ac:3b:c3:18:8e:dc:
         e2:58:f3:07:04:c6:ce:48:ce:c6:ab:b1:24:9a:2d:8e:c7:a7:
         65:7e:3a:27:9e:f8:e2:55:8c:ac:1c:73:ab:d1:93:bc:e6:60:
         aa:06:6b:57:fc:33:34:36:ac:4b:31:12:e4:bc:c5:3b:04:3e:
         64:9a:da:60:8a:6a:a7:d7:f1:db:21:e0:40:48:4a:53:24:cd:
         a1:af:b1:c0:93:a6:56:fa:18:f1:d4:23:29:bb:10:e5:01:fc:
         51:5f:ac:57:21:b3:89:19:b2:4f:83:1a:c9:27:b0:88:65:a1:
         1f:f7:80:7e:13:14:e9:4f:0f:b6:44:88:b6:1f:4d:5c:45:fc:
         0a:f9:ee:01:ae:59:0c:b0:84:82:7e:9f:43:30:73:8f:53:6d:
         d3:83:e3:06:d4:42:11:0b:20:02:35:0f:8e:ac:e2:68:06:15:
         f8:10:c2:94:fe:e5:33:bb:04:4c:fa:73:35:fa:c0:cf:f3:22:
         19:af:d2:fd:3c:28:e1:7f:45:55:94:54:b4:b6:5d:8c:67:82:
         b5:b8:66:d4:08:ac:0e:40:7a:f3:bc:90:64:1d:aa:76:99:33:
         2e:73:ef:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----