Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vlT8wCcyAa8Y2V5rAXcB3Egy-Ds.roa
File:                     vlT8wCcyAa8Y2V5rAXcB3Egy-Ds.roa (raw, json)
Hash identifier:          UkgL8Dj5iqHhvwq4D3QqB7vdRm3u77ad44482BGUU8k=
Subject key identifier:   BE:54:FC:C0:27:32:01:AF:18:D9:5E:6B:01:77:01:DC:48:32:F8:3B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A507D62
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vlT8wCcyAa8Y2V5rAXcB3Egy-Ds.roa
Signing time:             Mon 30 May 2022 21:29:14 +0000
ROA not before:           Mon 30 May 2022 21:29:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211139
IP address blocks:        2a06:a005:2c0::/44 maxlen: 48
                          2a06:a005:2d6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441482594 (0x1a507d62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 30 21:29:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be54fcc0273201af18d95e6b017701dc4832f83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:55:15:dc:27:dc:0f:9e:3a:bc:cc:3b:bd:7d:
                    ea:2c:b4:68:48:6f:e0:62:fa:ac:07:9d:bd:d7:08:
                    8f:98:4c:5e:72:ec:56:5a:d6:bd:39:18:db:7b:6d:
                    d0:6c:51:c4:a4:c0:7c:db:25:78:b1:26:dd:4a:f0:
                    bd:ab:6f:43:99:45:61:47:d1:5b:60:cc:04:6e:dc:
                    f5:e6:87:88:20:3d:43:dd:6a:b8:f2:cc:76:3f:90:
                    61:23:78:d9:4d:2e:85:c3:7c:f0:be:1c:11:af:71:
                    64:b0:50:00:55:13:af:60:81:00:6e:84:ee:58:5b:
                    a5:f7:c0:b9:9b:1c:04:d9:63:e8:ee:a9:53:2c:76:
                    c0:52:e8:31:0d:32:79:83:2d:d9:d6:1a:69:57:29:
                    bd:b4:f1:c3:2d:11:ff:c6:b6:03:c7:17:9b:d4:d4:
                    70:68:a1:10:8e:fc:ac:de:28:5a:9e:90:de:9d:90:
                    24:e5:74:ad:b1:80:51:71:bb:70:eb:fe:15:34:ad:
                    1e:3b:4c:b7:23:dd:7c:66:7b:51:8b:a7:57:ab:2e:
                    e6:f8:cb:22:2b:b6:6b:80:b8:26:f2:80:0e:da:f7:
                    e5:51:01:59:ee:22:2f:0c:a7:cb:83:be:48:4c:d9:
                    08:7c:f4:fc:b4:53:05:f1:d6:02:41:ea:5b:1d:09:
                    c6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:54:FC:C0:27:32:01:AF:18:D9:5E:6B:01:77:01:DC:48:32:F8:3B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vlT8wCcyAa8Y2V5rAXcB3Egy-Ds.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2c0::/44
                  2a06:a005:2d6::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:20:26:01:65:3f:dc:59:a7:10:43:92:9c:21:d7:ff:89:0c:
         7f:d7:50:57:11:2c:d1:2f:89:82:b1:b2:d1:bf:68:6c:99:ad:
         66:25:a0:a5:64:7c:1b:33:81:90:38:c3:09:62:cb:6f:cb:5c:
         62:39:20:d4:b0:47:bb:dd:bb:64:8b:81:0f:81:b8:07:31:28:
         22:83:5e:36:03:55:6b:30:3a:86:6b:83:fd:42:b7:18:7b:c1:
         50:fb:cf:3d:ac:bd:20:7a:ad:1a:21:7a:ce:bd:fa:09:38:1b:
         8d:fe:2c:8c:af:12:64:db:40:f8:e1:0e:9f:34:de:cb:65:7b:
         b5:73:cc:17:49:16:75:cc:e0:80:37:14:52:1e:52:71:84:b5:
         41:15:b4:c3:63:e6:d1:18:76:9e:b8:e8:1f:26:0b:c6:e0:fc:
         ff:3c:93:a4:26:08:85:95:14:d6:bb:49:93:5d:0b:d1:bd:db:
         8d:76:99:08:04:b5:bf:89:c8:66:f8:4c:03:3d:6b:67:cd:be:
         8f:bc:f8:f4:9f:b9:8f:05:a4:5a:8a:d6:a0:87:c0:32:ad:4f:
         12:a4:4b:1d:03:40:b6:19:50:c3:49:1d:7e:da:f3:a0:e4:10:
         d3:5e:a8:18:41:6c:eb:59:3b:2d:cd:14:07:07:00:6e:d6:39:
         77:e6:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----