Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/qm4NTTqTheAZ1SeTMJRpkh4ZN7E.roa
File:                     qm4NTTqTheAZ1SeTMJRpkh4ZN7E.roa (raw, json)
Hash identifier:          imUp5qecFlXaQDg/JMunF2LkfwOPjMb/trA6hafSmaQ=
Subject key identifier:   AA:6E:0D:4D:3A:93:85:E0:19:D5:27:93:30:94:69:92:1E:19:37:B1
Certificate issuer:       /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial:       09E4FF19
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/qm4NTTqTheAZ1SeTMJRpkh4ZN7E.roa
Signing time:             Sat 01 Jan 2022 04:56:12 +0000
ROA not before:           Sat 01 Jan 2022 04:56:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     138987
IP address blocks:        2a0d:1a40:faf::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166002457 (0x9e4ff19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
        Validity
            Not Before: Jan  1 04:56:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa6e0d4d3a9385e019d52793309469921e1937b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:e9:15:55:d7:90:f6:11:ff:4a:20:0d:91:
                    dc:35:53:06:25:57:72:bb:2b:1d:55:43:9b:1f:5d:
                    6f:98:e8:e5:f1:84:e7:1e:12:7f:1a:dc:a6:01:dd:
                    e3:1e:91:86:e6:c9:65:75:f9:0a:c7:84:79:84:43:
                    ef:59:97:0c:dd:a1:d9:c5:37:af:57:6d:f7:06:cd:
                    5d:ec:73:56:b8:33:5b:76:cb:cf:d6:f2:b4:c9:3d:
                    a4:53:d5:f5:f6:bd:5b:57:95:70:45:ea:50:5b:b0:
                    46:b1:28:d3:ed:00:49:11:40:87:3b:b5:f1:f7:a8:
                    0c:9f:98:50:61:bb:f9:46:39:17:38:ae:1e:db:a8:
                    43:57:82:53:07:3f:29:50:0c:4d:d5:83:ee:19:6f:
                    1d:1e:05:14:0a:87:6a:0b:5a:cb:0f:60:81:23:49:
                    09:e2:58:4c:39:b7:ac:2f:3c:32:8e:ac:32:61:80:
                    09:1b:9f:3b:3f:45:67:48:7d:16:6c:7e:d6:48:7e:
                    8d:7f:99:7a:56:8d:13:d4:3c:3e:d4:7a:17:92:1d:
                    24:f4:aa:4f:2b:5b:dd:cd:9d:79:ab:58:35:83:59:
                    59:0f:fb:fd:53:13:24:36:3b:6a:78:d6:31:4f:37:
                    29:be:63:a7:60:ec:f5:5b:fb:be:83:b0:7f:ef:4a:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6E:0D:4D:3A:93:85:E0:19:D5:27:93:30:94:69:92:1E:19:37:B1
            X509v3 Authority Key Identifier:
                keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/qm4NTTqTheAZ1SeTMJRpkh4ZN7E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:1a40:faf::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:6c:7c:93:42:f8:18:89:66:54:f6:95:da:6e:5b:c5:16:e3:
         8a:a4:85:c6:62:74:70:d6:d7:2c:d2:cd:57:06:07:74:21:6d:
         d2:65:7b:ff:36:f0:12:cd:e1:90:65:a8:59:23:66:f9:5c:97:
         7f:79:e4:4c:83:76:f2:55:d0:6d:69:9d:57:07:01:16:2f:f6:
         17:c7:20:2c:2f:9e:0d:78:09:3c:26:20:83:7e:f5:fa:57:6a:
         79:4a:97:ed:37:53:89:27:98:bb:b1:00:4f:9e:2a:62:65:1e:
         ed:24:71:68:f0:e2:bb:37:20:67:ce:bc:e1:c5:53:af:d5:c7:
         12:ee:d8:a7:5e:cb:dc:45:ee:5b:00:95:17:95:9c:48:55:f3:
         58:94:a1:2d:92:ad:4f:a1:91:b9:81:2b:c5:e3:de:d4:e6:1b:
         34:46:e5:66:23:92:60:7c:c8:d6:cc:73:ce:9f:73:1f:2d:90:
         5c:ef:8b:42:ee:62:8f:55:1f:2b:b2:f4:c2:a0:1d:84:88:2a:
         d5:dc:c0:f5:df:94:6e:60:5f:66:5e:41:09:0e:b8:3d:a4:b4:
         51:33:6f:82:47:c8:f2:ad:f4:31:81:e0:c0:99:66:94:0e:cb:
         6f:84:d6:d2:39:d1:06:e2:11:96:b9:fc:ec:a2:51:26:da:c9:
         08:b2:c4:de
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECeT/GTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
N2M4ZDhiYmYwNTc5N2E3NWE0OWM1ZDcwZjU5NzFlY2RlYzZkZDkzMB4XDTIyMDEw
MTA0NTYxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWE2ZTBkNGQzYTkz
ODVlMDE5ZDUyNzkzMzA5NDY5OTIxZTE5MzdiMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMN96RVV15D2Ef9KIA2R3DVTBiVXcrsrHVVDmx9db5jo5fGE
5x4SfxrcpgHd4x6RhubJZXX5CseEeYRD71mXDN2h2cU3r1dt9wbNXexzVrgzW3bL
z9bytMk9pFPV9fa9W1eVcEXqUFuwRrEo0+0ASRFAhzu18feoDJ+YUGG7+UY5Fziu
HtuoQ1eCUwc/KVAMTdWD7hlvHR4FFAqHagtayw9ggSNJCeJYTDm3rC88Mo6sMmGA
CRufOz9FZ0h9Fmx+1kh+jX+ZelaNE9Q8PtR6F5IdJPSqTytb3c2deatYNYNZWQ/7
/VMTJDY7anjWMU83Kb5jp2Ds9Vv7voOwf+9KjgcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSqbg1NOpOF4BnVJ5MwlGmSHhk3sTAfBgNVHSMEGDAWgBR3yNi78FeXp1pJ
xdcPWXHs3sbdkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Q4all1X0JYbDZkYVNjWFhEMWx4N043RzNaTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTQvNDVhYmRlLTViNDQtNDcxYS05M2Q5LTUzNDVmN2U3NDA4My8x
L3FtNE5UVHFUaGVBWjFTZVRNSlJwa2g0Wk43RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQv
NDVhYmRlLTViNDQtNDcxYS05M2Q5LTUzNDVmN2U3NDA4My8xL2Q4all1X0JYbDZk
YVNjWFhEMWx4N043RzNaTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoNGkAPrzANBgkqhkiG9w0BAQsF
AAOCAQEAPGx8k0L4GIlmVPaV2m5bxRbjiqSFxmJ0cNbXLNLNVwYHdCFt0mV7/zbw
Es3hkGWoWSNm+VyXf3nkTIN28lXQbWmdVwcBFi/2F8cgLC+eDXgJPCYgg371+ldq
eUqX7TdTiSeYu7EAT54qYmUe7SRxaPDiuzcgZ8684cVTr9XHEu7Yp17L3EXuWwCV
F5WcSFXzWJShLZKtT6GRuYErxePe1OYbNEblZiOSYHzI1sxzzp9zHy2QXO+LQu5i
j1UfK7L0wqAdhIgq1dzA9d+UbmBfZl5BCQ64PaS0UTNvgkfI8q30MYHgwJlmlA7L
b4TW0jnRBuIRlrn87KJRJtrJCLLE3g==
-----END CERTIFICATE-----