Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yf--XwIGI6BUigN31YQ5jsaSLro.roa
File:                     yf--XwIGI6BUigN31YQ5jsaSLro.roa (raw, json)
Hash identifier:          pVlmvIGTNYLhCDllK1Itonk9FLWU1xYzZefIjCKcU7w=
Subject key identifier:   C9:FF:BE:5F:02:06:23:A0:54:8A:03:77:D5:84:39:8E:C6:92:2E:BA
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184F2A136AE8B87B65581479B10EFB4110B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yf--XwIGI6BUigN31YQ5jsaSLro.roa
Signing time:             Thu 08 Dec 2022 16:46:02 +0000
ROA not before:           Thu 08 Dec 2022 16:46:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200732
IP address blocks:        2a0a:6040:b600::/40 maxlen: 48
                          2a06:a005:d26::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f2:a1:36:ae:8b:87:b6:55:81:47:9b:10:ef:b4:11:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  8 16:46:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c9ffbe5f020623a0548a0377d584398ec6922eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3d:7d:e3:d1:45:50:84:ff:49:6a:a9:d0:d3:
                    eb:82:8f:b6:4a:45:8e:87:e3:28:46:7d:10:34:5c:
                    59:97:50:25:4d:c6:e1:2f:c1:e2:65:34:5c:15:c2:
                    0d:ea:a5:d6:90:a8:fc:9f:76:2f:40:e2:5f:50:7e:
                    ff:bc:ef:44:40:af:36:a2:0e:76:22:db:e1:2e:6f:
                    1a:47:09:c1:fc:0a:07:b0:4e:17:b6:40:18:fc:84:
                    be:ab:23:e6:b0:31:e1:0b:87:f7:fa:30:2d:ff:38:
                    2f:c5:b0:e3:3d:90:cb:3d:9e:7b:b9:6a:7d:29:6e:
                    7b:62:de:19:f6:1f:93:0c:50:93:b1:e2:0f:d2:b8:
                    8a:66:4d:aa:a1:60:ba:bf:4d:9d:6b:ac:2e:16:99:
                    6d:ef:3c:57:8a:6e:61:5d:0e:56:a0:d6:3a:d0:c5:
                    37:ed:c0:35:66:27:cb:bc:ae:a4:5c:b0:35:56:54:
                    fc:6f:b6:e1:a8:1a:c3:ce:7d:29:b5:66:14:1d:bc:
                    9a:f2:6c:e2:b7:ac:94:fe:61:7c:43:50:9b:ef:20:
                    0b:e4:19:11:ab:87:11:94:3b:10:00:71:81:13:27:
                    e0:c1:1d:74:76:b3:69:1b:46:84:ef:83:ff:b2:c4:
                    7c:a0:3f:88:cd:3c:24:ef:be:4b:b9:d7:c8:c9:b5:
                    c6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FF:BE:5F:02:06:23:A0:54:8A:03:77:D5:84:39:8E:C6:92:2E:BA
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yf--XwIGI6BUigN31YQ5jsaSLro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d26::/48
                  2a0a:6040:b600::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:b1:63:5e:54:8a:7c:51:8e:c9:fe:80:bd:d1:0e:c6:b5:6e:
         02:a6:53:63:5b:38:61:aa:cb:94:51:4c:76:5a:f8:1f:fc:11:
         17:57:17:f5:93:3e:a7:c9:2e:0d:55:8f:7f:fc:89:76:67:80:
         57:6d:24:10:2f:0c:88:f1:dc:53:62:5f:bd:12:fc:60:2a:ab:
         8c:6e:e5:9c:34:08:83:1e:ac:36:e5:87:cf:c2:e4:8a:e5:b4:
         14:55:62:f4:de:de:38:a9:56:1b:ef:d1:ec:19:45:ce:5c:37:
         64:4c:9f:11:56:a2:c9:9e:4e:b5:a6:ed:57:1a:6c:35:31:33:
         55:50:03:a8:83:ca:90:ee:99:2b:c6:40:4f:52:4d:0e:50:f3:
         7c:50:4a:79:71:ac:15:d4:6a:5c:63:44:a4:ca:76:f5:00:0b:
         18:9a:b8:f2:3c:4b:3f:6a:15:65:bf:f8:de:70:ee:f7:8d:5e:
         9a:1d:9b:d8:20:a8:7e:d6:34:04:67:38:fa:50:ab:ca:bd:8f:
         cf:1a:3c:44:f0:cd:b4:6b:05:08:ba:15:b3:78:7b:d9:1e:59:
         27:5c:79:f5:5f:b5:3d:10:76:a2:2b:cf:df:37:eb:fc:65:1c:
         6f:22:42:38:ed:8b:b6:c7:18:22:d7:09:6c:c1:fe:83:06:a6:
         b2:41:4a:a2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAYTyoTaui4e2VYFHmxDvtBELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjA4MTY0NjAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWZmYmU1ZjAyMDYyM2EwNTQ4YTAzNzdkNTg0Mzk4ZWM2OTIyZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj1949FFUIT/SWqp0NPrgo+2SkWO
h+MoRn0QNFxZl1AlTcbhL8HiZTRcFcIN6qXWkKj8n3YvQOJfUH7/vO9EQK82og52
ItvhLm8aRwnB/AoHsE4XtkAY/IS+qyPmsDHhC4f3+jAt/zgvxbDjPZDLPZ57uWp9
KW57Yt4Z9h+TDFCTseIP0riKZk2qoWC6v02da6wuFplt7zxXim5hXQ5WoNY60MU3
7cA1ZifLvK6kXLA1VlT8b7bhqBrDzn0ptWYUHbya8mzit6yU/mF8Q1Cb7yAL5BkR
q4cRlDsQAHGBEyfgwR10drNpG0aE74P/ssR8oD+IzTwk775LudfIybXGBQIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFMn/vl8CBiOgVIoDd9WEOY7Gki66MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEveWYtLVh3SUdJNkJVaWdOMzFZUTVqc2FTTHJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKgagBQ0m
AwYAKgpgQLYwDQYJKoZIhvcNAQELBQADggEBACSxY15UinxRjsn+gL3RDsa1bgKm
U2NbOGGqy5RRTHZa+B/8ERdXF/WTPqfJLg1Vj3/8iXZngFdtJBAvDIjx3FNiX70S
/GAqq4xu5Zw0CIMerDblh8/C5IrltBRVYvTe3jipVhvv0ewZRc5cN2RMnxFWosme
TrWm7VcabDUxM1VQA6iDypDumSvGQE9STQ5Q83xQSnlxrBXUalxjRKTKdvUACxia
uPI8Sz9qFWW/+N5w7veNXpodm9ggqH7WNARnOPpQq8q9j88aPETwzbRrBQi6FbN4
e9keWSdcefVftT0QdqIrz9836/xlHG8iQjjti7bHGCLXCWzB/oMGprJBSqI=
-----END CERTIFICATE-----