Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3zdRODTIMH0GopPV6dqJ8HTGLSU.roa
File:                     3zdRODTIMH0GopPV6dqJ8HTGLSU.roa (raw, json)
Hash identifier:          R2l1BkiElC7u+DSQS7NFb4m/cU0w7bpGBDpOCczaXaE=
Subject key identifier:   DF:37:51:38:34:C8:30:7D:06:A2:93:D5:E9:DA:89:F0:74:C6:2D:25
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184CF785B45FD9B0BA0F737F53E5487A0BA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3zdRODTIMH0GopPV6dqJ8HTGLSU.roa
Signing time:             Thu 01 Dec 2022 20:54:42 +0000
ROA not before:           Thu 01 Dec 2022 20:54:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200993
IP address blocks:        2a06:a005:855::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:cf:78:5b:45:fd:9b:0b:a0:f7:37:f5:3e:54:87:a0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  1 20:54:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=df37513834c8307d06a293d5e9da89f074c62d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:ee:b7:34:6c:57:40:69:61:df:9d:06:f5:
                    b5:49:1f:16:55:fc:3d:43:11:bb:b1:82:55:88:c1:
                    9d:ad:18:bd:71:f9:d5:21:06:45:a5:58:b1:3c:76:
                    05:5f:b0:f9:41:c5:b8:e3:8b:3e:aa:69:b8:03:8b:
                    7a:b4:9d:c2:57:b4:bd:d3:48:e6:b6:21:a7:35:03:
                    aa:2d:5f:11:52:0b:0a:46:37:50:c3:d8:50:9f:db:
                    14:8b:5c:25:f0:36:9b:10:ca:37:b6:1e:bb:13:56:
                    0e:ee:2c:f0:a0:4b:c0:5f:ee:50:86:a7:29:99:bb:
                    88:b0:61:2a:3b:79:db:7e:b4:4f:7e:f4:e2:4a:7f:
                    d2:41:de:24:23:01:96:39:ec:5c:e2:ab:ec:28:84:
                    d5:f2:db:d4:17:96:c1:1f:d2:7c:ea:45:d3:3c:cd:
                    ed:a6:1b:78:d1:2a:59:81:ef:ca:62:56:15:06:66:
                    e5:f2:cc:32:fb:c9:f6:08:ca:1d:b2:a8:16:55:fa:
                    0b:18:55:12:85:7a:fa:b1:56:3e:62:09:d1:b7:3e:
                    0b:47:ea:c3:c3:fa:79:05:d8:5c:4b:62:a1:55:28:
                    cf:63:55:18:7a:a4:db:d4:e9:4e:4a:1c:a2:36:c3:
                    14:71:c3:1a:97:41:5c:28:81:31:72:63:3a:d6:62:
                    17:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:37:51:38:34:C8:30:7D:06:A2:93:D5:E9:DA:89:F0:74:C6:2D:25
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3zdRODTIMH0GopPV6dqJ8HTGLSU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:855::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:d3:1c:9f:59:32:86:2b:eb:96:a9:a0:cd:58:c8:57:c0:fe:
         2e:85:21:17:1b:6c:0b:46:2c:19:a3:eb:f7:11:d5:f5:d4:51:
         09:9e:90:61:1d:7c:d4:20:f4:8a:38:a1:d2:48:97:c6:57:17:
         53:6e:79:47:9d:60:ce:99:f5:51:d5:be:fe:df:bd:8e:0f:6c:
         39:ba:a6:b6:05:88:d9:13:1b:42:89:22:8e:88:d1:3b:c0:57:
         7d:6b:64:7c:a3:5f:46:c3:d9:b2:3a:95:45:52:98:f7:74:a5:
         17:99:18:7b:b8:40:10:62:ce:6b:f2:af:a3:43:f6:2c:09:b7:
         1d:36:6c:c4:2c:ef:26:27:25:7b:f7:e1:1b:2c:18:2c:56:81:
         17:16:74:25:90:d7:08:cd:5f:d1:de:1d:dc:c9:ee:83:1e:9e:
         b8:21:53:74:75:f9:af:e2:ad:95:68:15:db:89:4e:52:bc:05:
         34:35:46:25:13:0d:2c:59:dc:47:e5:d1:ca:fc:6b:59:7d:a3:
         cf:b1:5f:4a:1b:de:a5:58:89:df:21:d5:c4:9f:42:7f:e6:62:
         19:81:67:9b:48:99:c5:a0:0d:65:b9:bd:a2:78:72:60:d0:14:
         6f:bd:bd:71:1e:dc:33:e4:38:44:35:51:3d:4a:72:1a:90:05:
         9c:91:9d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----