Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vVEsgScW7nykQYfWyeprni7ZLVM.roa
File:                     vVEsgScW7nykQYfWyeprni7ZLVM.roa (raw, json)
Hash identifier:          D+m44sa7EhyUQ1K+PEQdumpoDxDjpTyR6bvq94Jz6pU=
Subject key identifier:   BD:51:2C:81:27:16:EE:7C:A4:41:87:D6:C9:EA:6B:9E:2E:D9:2D:53
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B3C274C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vVEsgScW7nykQYfWyeprni7ZLVM.roa
Signing time:             Wed 22 Jun 2022 18:31:32 +0000
ROA not before:           Wed 22 Jun 2022 18:31:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17866
IP address blocks:        2a06:a005:d2a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456927052 (0x1b3c274c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 22 18:31:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd512c812716ee7ca44187d6c9ea6b9e2ed92d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:87:20:40:11:79:a5:99:5f:6b:1f:e9:65:
                    2d:9b:3e:eb:ae:e0:71:ce:d6:e3:ee:b6:0b:b0:c2:
                    01:77:76:4a:90:0c:04:3f:91:16:db:c6:9b:7c:a6:
                    61:2e:f9:56:d5:7f:2c:22:c6:1f:84:83:9f:88:5a:
                    e0:0d:8b:d7:5e:7c:ed:c6:21:04:37:eb:3c:f5:bf:
                    ac:40:a1:58:76:74:26:9b:f8:ac:77:87:7e:f1:5f:
                    1f:c4:c8:64:50:c4:71:26:76:ef:0b:f7:59:e6:88:
                    08:7d:b7:24:a9:29:88:e6:31:30:10:10:15:a1:00:
                    a9:82:68:30:e6:e2:82:6a:09:3c:49:24:97:49:96:
                    e4:18:f1:e7:c6:f1:2b:63:94:f8:42:a9:36:6b:c8:
                    46:85:d8:97:a0:b5:95:c3:5a:c7:d0:f3:91:5e:40:
                    5d:5f:f0:13:20:63:ba:4c:9f:55:40:72:70:ec:89:
                    db:d2:e8:25:32:2f:4b:10:65:9e:51:49:fc:c8:68:
                    a4:b3:d0:be:74:42:bb:f3:f7:d3:44:a3:58:36:c8:
                    90:2f:7f:85:04:2b:7c:51:30:8d:a7:1b:2e:4b:4b:
                    4c:b3:80:63:89:2c:d7:76:70:0d:19:22:b6:29:d6:
                    34:e1:ed:e3:51:10:f0:33:9f:9e:b0:75:34:07:6e:
                    93:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:51:2C:81:27:16:EE:7C:A4:41:87:D6:C9:EA:6B:9E:2E:D9:2D:53
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vVEsgScW7nykQYfWyeprni7ZLVM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:42:d5:d2:eb:02:db:34:fa:03:a3:43:aa:53:e1:86:30:61:
         b7:fe:28:86:b7:d6:10:d8:01:f0:e1:95:7a:c8:3f:18:e9:fa:
         2c:82:cd:19:35:da:c4:e6:22:e2:bb:48:71:9c:a2:65:3c:81:
         4d:aa:72:75:d0:2d:b7:41:b1:d0:db:57:5a:97:ea:d5:93:79:
         4b:76:dd:6b:64:dc:03:fc:54:90:3f:8a:5e:8d:44:5c:cc:fb:
         3b:32:f3:40:29:90:e2:2f:1c:3c:d6:25:5d:1d:cf:cd:e3:b7:
         41:cb:81:eb:e9:6b:28:4a:c4:c2:31:f0:34:77:4b:05:60:85:
         aa:e4:0c:21:b7:13:5b:6e:31:c0:3d:d6:e6:29:c7:04:6f:16:
         78:96:66:75:ba:e7:09:fe:9e:1a:c9:d5:f7:40:22:b7:28:2c:
         1f:b2:47:99:b4:2a:c6:fc:40:c8:09:69:e7:f7:bf:e0:17:17:
         e5:e9:cc:c0:36:23:26:e5:53:ce:60:94:08:07:84:c0:44:c7:
         58:52:f3:54:ac:67:9d:c0:45:6b:da:5b:46:df:97:06:e8:e9:
         31:7c:e8:6d:a4:82:56:35:20:b2:08:8f:d3:98:d8:a8:08:72:
         fb:9c:ff:c6:e7:c2:f1:75:d6:ad:25:74:2f:1c:f2:66:78:40:
         69:36:b1:8b
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGzwnTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYy
MjE4MzEzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmQ1MTJjODEyNzE2
ZWU3Y2E0NDE4N2Q2YzllYTZiOWUyZWQ5MmQ1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKJ9hyBAEXmlmV9rH+llLZs+667gcc7W4+62C7DCAXd2SpAM
BD+RFtvGm3ymYS75VtV/LCLGH4SDn4ha4A2L11587cYhBDfrPPW/rEChWHZ0Jpv4
rHeHfvFfH8TIZFDEcSZ27wv3WeaICH23JKkpiOYxMBAQFaEAqYJoMObigmoJPEkk
l0mW5Bjx58bxK2OU+EKpNmvIRoXYl6C1lcNax9DzkV5AXV/wEyBjukyfVUBycOyJ
29LoJTIvSxBlnlFJ/MhopLPQvnRCu/P300SjWDbIkC9/hQQrfFEwjacbLktLTLOA
Y4ks13ZwDRkitinWNOHt41EQ8DOfnrB1NAduk/8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBS9USyBJxbufKRBh9bJ6mueLtktUzAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L3ZWRXNnU2NXN255a1FZZld5ZXBybmk3WkxWTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGoAUNKjANBgkqhkiG9w0BAQsF
AAOCAQEAKELV0usC2zT6A6NDqlPhhjBht/4ohrfWENgB8OGVesg/GOn6LILNGTXa
xOYi4rtIcZyiZTyBTapyddAtt0Gx0NtXWpfq1ZN5S3bda2TcA/xUkD+KXo1EXMz7
OzLzQCmQ4i8cPNYlXR3PzeO3QcuB6+lrKErEwjHwNHdLBWCFquQMIbcTW24xwD3W
5inHBG8WeJZmdbrnCf6eGsnV90AitygsH7JHmbQqxvxAyAlp5/e/4BcX5enMwDYj
JuVTzmCUCAeEwETHWFLzVKxnncBFa9pbRt+XBujpMXzobaSCVjUgsgiP05jYqAhy
+5z/xufC8XXWrSV0LxzyZnhAaTaxiw==
-----END CERTIFICATE-----