Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xKfFr4BWOm5nTAKNJR1qGP3xWlw.roa
File:                     xKfFr4BWOm5nTAKNJR1qGP3xWlw.roa (raw, json)
Hash identifier:          H60gLm6U5avOC2WW+/Rk0czXA4OaWLP2AQN9m87nSug=
Subject key identifier:   C4:A7:C5:AF:80:56:3A:6E:67:4C:02:8D:25:1D:6A:18:FD:F1:5A:5C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01836B2326F89521E62F76F4A31101C91931
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xKfFr4BWOm5nTAKNJR1qGP3xWlw.roa
Signing time:             Fri 23 Sep 2022 16:16:49 +0000
ROA not before:           Fri 23 Sep 2022 16:16:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203236
IP address blocks:        2a06:a005:1520::/44 maxlen: 48
                          2a06:a005:486::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:6b:23:26:f8:95:21:e6:2f:76:f4:a3:11:01:c9:19:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 23 16:16:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c4a7c5af80563a6e674c028d251d6a18fdf15a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:aa:b7:16:c9:d3:a6:32:fe:30:0d:ab:54:74:
                    b8:b6:09:79:26:1f:6d:ac:77:d8:3c:95:85:b5:2a:
                    db:83:35:65:7c:93:3a:a0:13:4a:98:1b:05:fb:8c:
                    b3:2b:b1:cd:16:eb:aa:56:7a:4a:12:4e:b9:38:e9:
                    f8:d6:22:8d:f6:0d:67:e2:97:4f:39:e4:9c:f2:f4:
                    b5:79:e2:fb:c8:f4:f5:24:c0:5a:98:57:be:82:1e:
                    24:cd:b4:73:8c:68:2d:be:5e:a7:32:fd:fc:c6:8a:
                    13:dd:80:59:98:71:93:1f:44:2d:59:63:36:2d:4e:
                    f4:b9:c7:ae:aa:0d:b1:e0:5a:53:a3:98:9c:5b:10:
                    49:3c:3a:17:dc:02:d3:d9:65:d9:44:03:23:b3:98:
                    9b:e6:0c:47:d6:a8:a7:9c:b9:26:b8:48:26:6f:74:
                    d9:47:9f:9c:1f:26:43:99:e5:33:6d:51:e1:c1:44:
                    34:c8:a7:69:91:b1:65:67:2c:16:17:6b:84:e0:30:
                    f1:5e:b4:dd:70:f7:f0:e1:30:cd:83:38:23:29:54:
                    16:11:6b:e0:93:25:bb:a4:97:05:3e:10:9a:45:49:
                    c2:1c:cc:5c:f0:17:bd:39:e4:9d:e5:36:5e:01:86:
                    2e:05:ff:86:75:d2:43:dd:46:d5:24:69:71:d2:70:
                    b2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A7:C5:AF:80:56:3A:6E:67:4C:02:8D:25:1D:6A:18:FD:F1:5A:5C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xKfFr4BWOm5nTAKNJR1qGP3xWlw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:486::/48
                  2a06:a005:1520::/44

    Signature Algorithm: sha256WithRSAEncryption
         91:3c:b7:e9:82:ae:5a:b2:43:ca:00:62:4c:25:e9:cb:85:19:
         bb:cf:68:77:d8:23:1d:8c:aa:fb:ca:af:c2:5c:ce:95:27:3d:
         90:e4:3c:d7:fa:ad:03:19:72:d0:8d:d0:d3:55:12:d4:4b:dd:
         76:a6:15:85:ea:0b:65:dd:6c:9d:78:89:70:26:42:d3:1f:92:
         a0:6f:36:4a:b4:26:3b:7e:3e:d7:ae:51:02:cb:d5:85:5a:b9:
         26:d3:be:a9:d5:33:98:2a:e8:b8:a7:48:c3:2a:20:cc:76:3e:
         90:8a:88:ca:7f:c7:e7:d3:b5:c9:06:b2:1e:13:38:9c:60:b2:
         1e:ab:90:63:af:37:e7:f6:23:39:8c:38:9b:4a:1c:95:2b:f0:
         74:d6:0e:66:5c:71:32:98:8f:c0:bd:90:c3:29:b1:0e:fa:6c:
         19:23:d5:5d:52:ee:3d:3b:62:a0:19:53:06:bb:f4:57:64:7f:
         2d:4c:e3:0a:98:26:89:a0:ff:44:de:68:cc:d3:8f:da:76:36:
         bd:89:17:62:8f:5f:93:24:e3:38:77:42:09:16:bc:a4:5b:31:
         11:fd:e0:23:a3:a1:64:98:82:78:81:5b:c2:90:54:cf:f1:8c:
         66:db:68:01:60:91:77:4e:1f:39:27:32:06:66:65:0c:3e:8f:
         96:10:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----