Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zWJ4sqpZo0xEJ2DwEktsUgA-d3U.roa
File:                     zWJ4sqpZo0xEJ2DwEktsUgA-d3U.roa (raw, json)
Hash identifier:          1+N3yyG0yJDbp/aOLKPQLbpKfW99WvIurNB8qjb5kNA=
Subject key identifier:   CD:62:78:B2:AA:59:A3:4C:44:27:60:F0:12:4B:6C:52:00:3E:77:75
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184EE8E7248DA5297ED225ACF7627A8B35D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zWJ4sqpZo0xEJ2DwEktsUgA-d3U.roa
Signing time:             Wed 07 Dec 2022 21:47:03 +0000
ROA not before:           Wed 07 Dec 2022 21:47:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200879
IP address blocks:        2a0a:6040:f200::/40 maxlen: 48
                          2a06:a005:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ee:8e:72:48:da:52:97:ed:22:5a:cf:76:27:a8:b3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  7 21:47:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cd6278b2aa59a34c442760f0124b6c52003e7775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bb:e7:43:76:0a:31:37:e0:c2:ed:fd:c6:f1:
                    74:3c:31:cc:43:97:5b:96:3e:b1:d7:e9:32:a7:de:
                    2f:bd:9e:f9:cd:da:55:76:ac:0d:6b:df:10:1b:03:
                    3c:b5:b5:2f:90:22:f8:10:12:97:fb:2a:aa:c3:45:
                    b8:4b:df:bd:f0:e6:4c:c3:d8:24:84:51:d3:d5:b5:
                    d6:63:3a:0f:75:b7:da:1b:a9:44:9c:a1:32:57:32:
                    19:0d:d4:15:95:ec:48:90:e6:8d:af:12:78:1c:ac:
                    85:ad:c3:f8:59:2c:52:2c:fd:ab:ae:54:cb:4d:cb:
                    f3:bf:18:8c:f4:e2:95:f0:f8:41:23:01:51:ea:b3:
                    56:4d:e9:5e:ff:de:4e:3d:ad:24:06:f2:dd:6f:05:
                    55:f5:ab:dc:39:a7:45:00:4b:21:13:a3:8c:fd:94:
                    f9:56:7e:97:cd:a8:e8:f4:7d:61:73:98:95:01:1d:
                    b4:ee:db:11:05:c6:a6:fd:44:d0:47:cc:a0:bf:b4:
                    e8:9e:9a:0e:ee:fc:1d:7f:9f:ae:5f:46:79:96:c6:
                    ca:88:eb:c5:8a:8a:b1:96:80:13:a2:bc:5a:59:7c:
                    c1:a3:d7:1e:81:e5:d2:75:57:3d:28:f0:67:b8:33:
                    23:65:05:67:1c:75:eb:cc:7d:7b:99:64:5c:8c:8f:
                    8c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:62:78:B2:AA:59:A3:4C:44:27:60:F0:12:4B:6C:52:00:3E:77:75
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zWJ4sqpZo0xEJ2DwEktsUgA-d3U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:6::/48
                  2a0a:6040:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:2f:31:4f:85:6d:04:a7:0d:09:83:39:5d:bf:98:39:64:39:
         3f:c7:69:c6:b6:c4:8f:74:8d:96:28:02:49:be:0e:89:ed:ac:
         0e:4b:ac:19:6c:61:e3:4c:ec:e9:51:1d:f7:d1:8d:e9:4f:8f:
         48:c6:2f:c0:a1:fa:f5:de:41:11:5a:3d:56:00:84:1c:73:45:
         df:4e:db:8a:7d:e8:98:4a:88:54:79:73:ec:b6:6c:22:d3:0a:
         bc:38:d4:22:4f:ba:06:dd:a9:74:73:78:9d:7f:c0:e6:92:a1:
         54:da:67:9a:b0:9d:42:eb:e3:0f:9b:49:d3:62:73:c7:39:ed:
         9b:a8:03:49:4a:9f:a7:5f:2d:df:fa:16:73:59:7c:f0:63:30:
         f0:a6:d3:73:ca:08:b0:65:f8:73:70:0d:98:19:96:43:dc:e6:
         db:46:7a:46:9c:3d:cf:39:10:ff:3b:43:ff:1a:3e:d9:11:eb:
         a6:74:e1:4c:f5:69:f7:06:3a:3b:89:44:e2:c5:19:d9:74:f6:
         e9:73:11:ee:e3:34:05:c0:63:78:6f:7a:b0:5f:64:83:17:80:
         c3:4f:71:7a:52:ae:69:5f:d4:6e:2a:14:6d:ac:b7:5f:36:09:
         2b:06:71:2e:d4:5c:28:12:96:43:97:bf:0f:d1:7f:d4:8a:ba:
         0b:33:61:ff
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAYTujnJI2lKX7SJaz3YnqLNdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjA3MjE0NzAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDYyNzhiMmFhNTlhMzRjNDQyNzYwZjAxMjRiNmM1MjAwM2U3Nzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrvnQ3YKMTfgwu39xvF0PDHMQ5db
lj6x1+kyp94vvZ75zdpVdqwNa98QGwM8tbUvkCL4EBKX+yqqw0W4S9+98OZMw9gk
hFHT1bXWYzoPdbfaG6lEnKEyVzIZDdQVlexIkOaNrxJ4HKyFrcP4WSxSLP2rrlTL
TcvzvxiM9OKV8PhBIwFR6rNWTele/95OPa0kBvLdbwVV9avcOadFAEshE6OM/ZT5
Vn6Xzajo9H1hc5iVAR207tsRBcam/UTQR8ygv7TonpoO7vwdf5+uX0Z5lsbKiOvF
ioqxloATorxaWXzBo9cegeXSdVc9KPBnuDMjZQVnHHXrzH17mWRcjI+MoQIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFM1ieLKqWaNMRCdg8BJLbFIAPnd1MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEveldKNHNxcFpvMHhFSjJEd0VrdHNVZ0EtZDNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKgagBQAG
AwYAKgpgQPIwDQYJKoZIhvcNAQELBQADggEBAJUvMU+FbQSnDQmDOV2/mDlkOT/H
aca2xI90jZYoAkm+DontrA5LrBlsYeNM7OlRHffRjelPj0jGL8Ch+vXeQRFaPVYA
hBxzRd9O24p96JhKiFR5c+y2bCLTCrw41CJPugbdqXRzeJ1/wOaSoVTaZ5qwnULr
4w+bSdNic8c57ZuoA0lKn6dfLd/6FnNZfPBjMPCm03PKCLBl+HNwDZgZlkPc5ttG
ekacPc85EP87Q/8aPtkR66Z04Uz1afcGOjuJROLFGdl09ulzEe7jNAXAY3hverBf
ZIMXgMNPcXpSrmlf1G4qFG2st182CSsGcS7UXCgSlkOXvw/Rf9SKugszYf8=
-----END CERTIFICATE-----