Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zH4OeGUa7zqWSK00R2PTTXzq8nc.roa
File:                     zH4OeGUa7zqWSK00R2PTTXzq8nc.roa (raw, json)
Hash identifier:          VDCLrJdG062UVLTw47rAp2G8msVZ21qorOkALGjLswQ=
Subject key identifier:   CC:7E:0E:78:65:1A:EF:3A:96:48:AD:34:47:63:D3:4D:7C:EA:F2:77
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018256652D979CC081F442AE05F053929432
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zH4OeGUa7zqWSK00R2PTTXzq8nc.roa
Signing time:             Sun 31 Jul 2022 22:34:07 +0000
ROA not before:           Sun 31 Jul 2022 22:34:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209018
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:56:65:2d:97:9c:c0:81:f4:42:ae:05:f0:53:92:94:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 31 22:34:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc7e0e78651aef3a9648ad344763d34d7ceaf277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:70:4b:ff:62:09:f9:81:4c:5a:ea:4b:3e:64:
                    7f:f5:67:18:4c:cb:0b:4d:1f:76:fd:c6:7c:72:f4:
                    d2:3f:ea:d3:8b:44:1e:09:be:7e:83:76:f4:ee:c1:
                    18:2b:fb:8b:d2:ee:e3:05:ea:24:da:53:a8:fa:6e:
                    51:fd:0c:7b:ec:fd:ff:78:70:f5:a7:e9:f3:f4:28:
                    ac:1f:26:66:16:cf:da:d4:2d:13:56:e1:ab:63:cb:
                    9d:8f:e5:78:76:e7:42:25:4a:eb:6e:13:e1:fb:a1:
                    2f:14:16:32:5b:56:27:5b:d8:04:c9:2c:eb:cb:b1:
                    c2:60:c1:f6:8a:b7:cf:0c:46:0a:1d:51:b2:ce:fa:
                    98:76:0d:16:ee:76:86:3a:bd:45:95:9b:b0:26:b4:
                    ab:61:5a:f1:86:ec:1a:96:ad:c9:ee:71:c7:c7:5d:
                    d6:e3:56:e1:6b:45:a1:b8:e9:03:6b:86:54:f7:2a:
                    4f:42:5d:ba:4e:e7:f6:16:af:c3:5d:8f:7f:a0:d3:
                    26:c5:45:71:4b:64:a1:3a:bb:a7:b9:f7:b3:80:a2:
                    4a:97:b4:e3:0b:85:01:33:49:2c:47:1a:23:34:34:
                    dc:3f:47:cd:ac:e6:9e:e9:61:27:7e:af:e4:9c:52:
                    45:64:55:8d:51:31:4b:35:6b:a6:19:13:cf:a4:55:
                    15:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7E:0E:78:65:1A:EF:3A:96:48:AD:34:47:63:D3:4D:7C:EA:F2:77
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zH4OeGUa7zqWSK00R2PTTXzq8nc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:23:eb:91:61:46:77:3b:40:14:f8:51:48:90:ab:72:52:00:
         3e:26:47:4e:7b:0c:fa:f1:55:41:07:8b:5f:35:0a:b8:fa:3c:
         fc:c7:ef:47:06:11:16:43:68:ea:15:3e:a5:4f:83:f5:4e:1c:
         96:77:5a:77:d4:fd:38:ac:4a:b5:da:1b:65:76:fc:ee:66:5c:
         5b:4f:7f:0a:4c:91:e7:00:48:7a:0a:71:00:49:6b:8e:ca:11:
         21:f7:a2:c8:43:78:7b:5d:88:d4:e8:11:4d:eb:73:24:45:82:
         03:d1:8e:45:dc:8a:27:e7:f9:3e:4c:a0:d7:3d:11:00:7d:b2:
         00:a9:5a:3c:3b:2d:5e:69:f6:ec:61:65:c2:78:fc:8d:fd:88:
         33:fb:a2:0b:b3:73:71:49:69:d5:a5:dd:a4:83:16:6d:39:24:
         01:ec:a4:ce:e0:ba:3e:7f:e9:49:c4:35:6f:9a:d6:af:50:82:
         6f:7f:db:a3:1f:07:fc:53:bc:bd:fd:2f:ca:ac:f1:a5:e4:ae:
         34:24:f3:50:74:9f:69:0c:67:1f:9d:fd:5d:9f:b6:50:c5:6d:
         b7:6e:22:16:a8:d2:fc:aa:f5:7c:56:86:6d:ea:17:9d:60:36:
         5d:da:17:4a:e1:33:93:89:da:fc:1d:1f:7f:e1:c5:d0:18:9f:
         d2:9c:d4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----