Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1QwreUfI93pBoUVXHv-2scwADHE.roa
File:                     1QwreUfI93pBoUVXHv-2scwADHE.roa (raw, json)
Hash identifier:          dejfaHXp3xHon6a97EFh1TgHxNfRTMs8AfaulP29xWk=
Subject key identifier:   D5:0C:2B:79:47:C8:F7:7A:41:A1:45:57:1E:FF:B6:B1:CC:00:0C:71
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01828749A1CDFA3652DF7AC7D3F124D1EF26
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1QwreUfI93pBoUVXHv-2scwADHE.roa
Signing time:             Wed 10 Aug 2022 10:25:25 +0000
ROA not before:           Wed 10 Aug 2022 10:25:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211431
IP address blocks:        2a06:a005:5ab::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:87:49:a1:cd:fa:36:52:df:7a:c7:d3:f1:24:d1:ef:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 10 10:25:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d50c2b7947c8f77a41a145571effb6b1cc000c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:92:d4:82:2b:83:6e:14:ad:33:5b:95:11:
                    e2:f8:3d:9e:eb:0e:24:10:c8:ad:ca:51:bf:71:13:
                    fb:ac:22:48:42:2a:07:59:7d:8b:6e:79:5a:d9:45:
                    cf:26:16:24:fe:e3:aa:b0:74:93:86:81:2d:60:4d:
                    4e:38:5e:d0:78:69:6e:a2:bd:d8:f9:4f:29:5b:e7:
                    3f:7c:85:2a:3d:db:ff:90:45:4c:7d:94:46:4d:b1:
                    41:49:ba:34:9f:4e:ad:b0:a7:6a:e0:26:41:fd:8e:
                    56:4a:e2:a3:2e:5d:43:7e:6e:c8:9b:8e:58:fe:c8:
                    1e:85:2a:42:25:74:c1:ae:59:90:a6:ed:a1:67:53:
                    3c:a6:0f:c9:25:86:aa:a8:a8:8c:b7:c1:59:0f:01:
                    bc:2b:de:6e:7d:8b:42:44:9a:f1:82:e0:00:54:54:
                    67:1d:aa:d1:02:5a:76:d5:86:52:fe:de:16:39:e5:
                    04:63:82:e8:93:49:34:5d:b0:59:dc:aa:bb:dd:a1:
                    72:e6:fc:2e:a9:4a:2e:de:dc:0e:45:81:86:c8:45:
                    73:af:59:92:8e:68:97:0c:0d:7b:21:9b:d0:7a:ca:
                    9f:94:35:cb:d1:13:3a:ef:64:af:cf:00:ea:53:42:
                    d7:69:78:60:ab:df:4a:61:32:24:18:9e:4f:88:bd:
                    90:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0C:2B:79:47:C8:F7:7A:41:A1:45:57:1E:FF:B6:B1:CC:00:0C:71
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1QwreUfI93pBoUVXHv-2scwADHE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5ab::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:67:df:90:1c:dc:ba:36:ef:37:01:b9:ee:9a:be:7e:55:31:
         00:d0:66:48:df:6b:b8:72:75:e6:09:f6:56:15:81:ea:8a:0a:
         7d:bd:e5:fa:0a:bc:16:62:47:a2:d9:33:94:fe:95:b5:d9:8c:
         47:e1:ba:5c:d8:83:62:a6:39:0c:11:d9:99:30:f5:a9:de:57:
         93:73:ef:af:72:3b:80:b7:73:ba:0f:f2:66:16:4c:31:6f:01:
         16:68:cc:82:39:1a:ff:e9:88:89:4e:e3:cf:d3:5c:fe:28:13:
         e1:dd:72:09:cd:14:a8:88:29:91:db:69:04:10:dc:a6:60:44:
         0d:4b:6f:58:f6:79:44:63:d0:f9:fa:0a:67:ee:d2:81:4e:bb:
         08:34:84:07:cf:e1:67:2f:26:1b:24:2e:b8:52:38:62:39:07:
         85:3c:6c:e9:08:73:a9:76:32:f2:1e:a6:ee:cd:59:84:ef:18:
         91:a2:a0:98:3f:62:af:6d:51:52:9f:23:d1:e3:f1:a2:f5:0f:
         10:52:d8:d7:2d:1e:01:42:01:3d:2a:67:c0:28:dc:e1:9c:43:
         c8:ea:40:ac:4b:c6:f8:c0:59:05:63:e1:7e:18:9c:40:c1:01:
         4f:9a:06:78:7a:e9:aa:c7:8c:b3:18:1f:b4:23:ee:7f:52:b1:
         1d:8b:3d:cd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYKHSaHN+jZS33rH0/Ek0e8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODEwMTAyNTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTBjMmI3OTQ3YzhmNzdhNDFhMTQ1NTcxZWZmYjZiMWNjMDAwYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVuS1IIrg24UrTNblRHi+D2e6w4k
EMitylG/cRP7rCJIQioHWX2Lbnla2UXPJhYk/uOqsHSThoEtYE1OOF7QeGluor3Y
+U8pW+c/fIUqPdv/kEVMfZRGTbFBSbo0n06tsKdq4CZB/Y5WSuKjLl1Dfm7Im45Y
/sgehSpCJXTBrlmQpu2hZ1M8pg/JJYaqqKiMt8FZDwG8K95ufYtCRJrxguAAVFRn
HarRAlp21YZS/t4WOeUEY4Lok0k0XbBZ3Kq73aFy5vwuqUou3twORYGGyEVzr1mS
jmiXDA17IZvQesqflDXL0RM672SvzwDqU0LXaXhgq99KYTIkGJ5PiL2QNwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNUMK3lHyPd6QaFFVx7/trHMAAxxMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvMVF3cmVVZkk5M3BCb1VWWEh2LTJzY3dBREhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQWr
MA0GCSqGSIb3DQEBCwUAA4IBAQB1Z9+QHNy6Nu83Abnumr5+VTEA0GZI32u4cnXm
CfZWFYHqigp9veX6CrwWYkei2TOU/pW12YxH4bpc2INipjkMEdmZMPWp3leTc++v
cjuAt3O6D/JmFkwxbwEWaMyCORr/6YiJTuPP01z+KBPh3XIJzRSoiCmR22kEENym
YEQNS29Y9nlEY9D5+gpn7tKBTrsINIQHz+FnLyYbJC64UjhiOQeFPGzpCHOpdjLy
HqbuzVmE7xiRoqCYP2KvbVFSnyPR4/Gi9Q8QUtjXLR4BQgE9KmfAKNzhnEPI6kCs
S8b4wFkFY+F+GJxAwQFPmgZ4eumqx4yzGB+0I+5/UrEdiz3N
-----END CERTIFICATE-----