Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yaQ6nrtbyEqrCZnIa44NUQOqN8Y.roa
File:                     yaQ6nrtbyEqrCZnIa44NUQOqN8Y.roa (raw, json)
Hash identifier:          yB0JtLgAV4DUYa5STFRcm3PfZUtAuY3uVKOArVWI6AU=
Subject key identifier:   C9:A4:3A:9E:BB:5B:C8:4A:AB:09:99:C8:6B:8E:0D:51:03:AA:37:C6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183666AA8E8D5B6EE4A069339D2B12E156B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yaQ6nrtbyEqrCZnIa44NUQOqN8Y.roa
Signing time:             Thu 22 Sep 2022 18:16:49 +0000
ROA not before:           Thu 22 Sep 2022 18:16:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213327
IP address blocks:        2a06:a005:1272::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:66:6a:a8:e8:d5:b6:ee:4a:06:93:39:d2:b1:2e:15:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 22 18:16:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c9a43a9ebb5bc84aab0999c86b8e0d5103aa37c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:1c:fc:61:b8:e3:52:48:cb:70:2b:a5:7e:
                    85:81:84:bd:0c:93:0a:34:1c:92:87:5d:0d:e1:87:
                    f2:4f:d5:ba:7e:7a:3e:c2:d2:68:fd:65:01:d4:90:
                    1d:56:70:26:87:70:39:6d:f9:0a:6c:e2:5f:73:64:
                    e0:51:19:a1:38:c9:69:49:49:08:d4:2f:0a:66:07:
                    37:89:be:7e:b0:5b:92:44:91:93:49:46:d0:c0:8c:
                    47:cb:07:07:03:f9:d3:6e:8f:c0:c2:11:0d:c7:68:
                    2e:45:b9:96:05:b0:c6:9d:7c:6e:30:cc:24:7a:ae:
                    c9:af:a0:00:51:76:1b:91:bd:b8:b9:3b:16:71:e5:
                    dd:5d:71:33:87:71:c7:1b:bb:ac:7a:3d:81:eb:bf:
                    46:5c:be:6e:2b:d7:96:75:15:73:c9:13:87:0f:86:
                    7f:c5:ca:c8:41:f6:5a:5e:1e:fe:ab:5a:3f:ec:96:
                    b2:5d:67:c4:79:0a:1b:37:bd:48:db:53:1f:8e:99:
                    eb:ef:98:d6:a6:e6:7d:af:6f:48:70:68:8b:22:8b:
                    26:11:76:03:d8:36:c4:b0:df:fe:9c:33:78:51:7b:
                    81:a5:9f:42:93:de:f0:9a:53:74:3b:b8:34:42:f0:
                    46:5f:17:28:0c:a5:7f:f9:2f:b6:10:ad:fa:f3:47:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A4:3A:9E:BB:5B:C8:4A:AB:09:99:C8:6B:8E:0D:51:03:AA:37:C6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yaQ6nrtbyEqrCZnIa44NUQOqN8Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1272::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:f6:7e:9d:2a:ac:6e:de:b5:83:44:d1:c8:db:e1:54:76:8e:
         04:d6:82:14:bd:cf:84:b4:ae:58:40:b8:9b:59:30:61:f1:60:
         92:22:86:cb:40:27:0f:90:8f:ed:bd:37:be:57:2f:2f:8f:42:
         3c:48:83:14:61:7e:dc:33:80:33:3f:27:b2:d4:d0:a7:7a:5a:
         7a:fc:ac:ea:db:4b:20:e2:be:a1:a6:33:7a:70:84:b1:8d:ea:
         c6:a4:e9:e4:16:58:75:c0:36:5d:e6:66:c0:e4:0a:b6:4c:39:
         46:b0:b6:66:8b:bc:df:7e:f5:12:cc:ae:c5:2c:be:1d:47:6e:
         ae:0d:dd:79:0d:3a:66:8d:2b:ff:1d:52:b6:a9:13:8d:c4:16:
         01:d8:94:66:2e:05:f9:8d:03:77:fa:93:9e:23:20:f5:e0:e9:
         50:43:29:74:fc:9b:e1:21:c5:48:d8:51:72:11:fe:fb:bd:3c:
         27:67:c0:1e:e0:80:aa:20:4f:fb:71:42:e3:f3:27:7f:03:7a:
         fc:d8:93:13:c3:92:9c:a4:b1:6e:d8:35:1e:1a:8c:00:c0:8b:
         45:d0:70:98:b2:fd:0e:3f:6d:79:9c:73:49:b8:0a:0f:2b:f1:
         05:0e:8b:af:e7:26:f0:a3:72:b4:1b:f9:e8:2a:c2:0d:2a:c5:
         48:5e:90:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----