Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0wlH4F-h-c0COPXDXgadTjCkLOY.roa
File:                     0wlH4F-h-c0COPXDXgadTjCkLOY.roa (raw, json)
Hash identifier:          pcfttI6wwrhK1YmbI0seRw1oHR6eLoMe6ZddO8HaLhY=
Subject key identifier:   D3:09:47:E0:5F:A1:F9:CD:02:38:F5:C3:5E:06:9D:4E:30:A4:2C:E6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181FC28A37754A8959D45C11C76FCF640A7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0wlH4F-h-c0COPXDXgadTjCkLOY.roa
Signing time:             Thu 14 Jul 2022 10:02:10 +0000
ROA not before:           Thu 14 Jul 2022 10:02:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210537
IP address blocks:        2a06:a005:1260::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:fc:28:a3:77:54:a8:95:9d:45:c1:1c:76:fc:f6:40:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 14 10:02:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d30947e05fa1f9cd0238f5c35e069d4e30a42ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:f3:cd:95:14:38:10:b1:36:c5:de:96:b5:
                    e1:f4:74:23:9f:3c:11:6d:e3:a2:ab:56:f8:90:d3:
                    49:4a:a4:9a:dc:31:09:8e:10:1d:99:58:e0:ab:08:
                    a9:a6:fc:de:40:fb:a1:90:75:20:b1:0f:ac:08:61:
                    ba:0a:ee:92:d0:61:4e:6f:8a:cd:8a:28:29:eb:c5:
                    d4:45:25:61:db:2f:b6:90:b2:46:91:73:d5:10:17:
                    09:12:86:a0:d7:9a:1b:fc:32:e7:7c:06:92:8e:4d:
                    64:0c:71:fb:a2:93:7e:d0:76:00:62:ac:a2:a5:ca:
                    f9:be:fa:8f:69:d7:c5:4c:73:2d:cf:17:4b:f6:3f:
                    53:5b:95:07:67:88:2c:15:69:31:f0:c6:10:26:86:
                    62:03:1b:13:34:71:68:c6:4b:b5:ee:98:21:1d:94:
                    51:4e:b2:38:32:10:a2:f4:34:ce:15:46:35:3f:b0:
                    a6:b1:f3:81:21:0f:f9:2d:73:d0:40:b4:85:55:e5:
                    c2:78:bc:c9:e1:06:15:db:25:fb:8a:89:58:10:c8:
                    6a:85:29:18:a7:28:c4:53:9d:eb:81:af:4a:0e:32:
                    2e:3a:34:75:1e:cc:62:78:15:dc:97:9c:bf:f1:61:
                    2e:1d:db:15:72:fe:05:cc:d0:fd:89:89:d9:57:86:
                    a7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:09:47:E0:5F:A1:F9:CD:02:38:F5:C3:5E:06:9D:4E:30:A4:2C:E6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0wlH4F-h-c0COPXDXgadTjCkLOY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1260::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:60:d1:e3:66:e4:3e:de:9e:ed:bb:75:6f:90:f8:d5:71:24:
         8d:e4:d5:25:2b:7c:98:70:df:21:6d:66:42:fb:b3:b2:5e:3b:
         51:29:4e:62:0d:db:20:52:d1:2c:77:b1:f4:b5:8e:c0:e8:2f:
         1c:ca:98:58:1e:8c:e5:b4:64:7a:ac:d7:4a:fe:2d:73:0b:77:
         93:67:23:d1:95:c4:65:f2:f1:28:7e:51:2a:26:66:04:aa:bd:
         77:77:31:48:65:89:11:ab:15:b5:46:cf:28:a4:5d:b8:48:84:
         1c:0e:ff:56:d0:62:17:94:22:e3:88:41:4a:31:c8:e4:3c:ed:
         ee:f0:9f:f7:95:c8:63:80:f3:ec:9e:35:87:d7:0b:6b:34:6c:
         ca:80:f7:cb:1e:5a:0b:6d:7d:04:48:43:13:0a:d8:15:4b:81:
         3d:55:3b:1e:f5:8b:cf:29:40:d4:df:6a:33:0e:8c:99:7e:0a:
         81:21:37:ac:55:a2:f1:33:e0:e3:4a:6f:94:1b:6a:94:62:73:
         72:c8:12:35:03:49:c3:b0:13:26:7c:d2:22:dc:e1:39:af:80:
         20:81:66:c8:86:a4:e4:23:c8:8d:c9:d1:3b:37:ae:57:77:a1:
         9e:0e:81:0a:db:b9:39:08:16:49:6b:8e:a3:07:49:ce:1d:3c:
         a5:bb:47:d3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYH8KKN3VKiVnUXBHHb89kCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzE0MTAwMjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzA5NDdlMDVmYTFmOWNkMDIzOGY1YzM1ZTA2OWQ0ZTMwYTQyY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dbzzZUUOBCxNsXelrXh9HQjnzwR
beOiq1b4kNNJSqSa3DEJjhAdmVjgqwippvzeQPuhkHUgsQ+sCGG6Cu6S0GFOb4rN
iigp68XURSVh2y+2kLJGkXPVEBcJEoag15ob/DLnfAaSjk1kDHH7opN+0HYAYqyi
pcr5vvqPadfFTHMtzxdL9j9TW5UHZ4gsFWkx8MYQJoZiAxsTNHFoxku17pghHZRR
TrI4MhCi9DTOFUY1P7CmsfOBIQ/5LXPQQLSFVeXCeLzJ4QYV2yX7iolYEMhqhSkY
pyjEU53rga9KDjIuOjR1HsxieBXcl5y/8WEuHdsVcv4FzND9iYnZV4anFwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNMJR+BfofnNAjj1w14GnU4wpCzmMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvMHdsSDRGLWgtYzBDT1BYRFhnYWRUakNrTE9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBRJg
MA0GCSqGSIb3DQEBCwUAA4IBAQB+YNHjZuQ+3p7tu3VvkPjVcSSN5NUlK3yYcN8h
bWZC+7OyXjtRKU5iDdsgUtEsd7H0tY7A6C8cyphYHozltGR6rNdK/i1zC3eTZyPR
lcRl8vEoflEqJmYEqr13dzFIZYkRqxW1Rs8opF24SIQcDv9W0GIXlCLjiEFKMcjk
PO3u8J/3lchjgPPsnjWH1wtrNGzKgPfLHloLbX0ESEMTCtgVS4E9VTse9YvPKUDU
32ozDoyZfgqBITesVaLxM+DjSm+UG2qUYnNyyBI1A0nDsBMmfNIi3OE5r4AggWbI
hqTkI8iNydE7N65Xd6GeDoEK27k5CBZJa46jB0nOHTylu0fT
-----END CERTIFICATE-----