Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/41R7IyzwmzK7HsL-Pc_ZrP_iFuY.roa
File:                     41R7IyzwmzK7HsL-Pc_ZrP_iFuY.roa (raw, json)
Hash identifier:          ozy0n46tBFj3cHK2TTxzpZqTpoawxt9h6/WmHr8ZQeU=
Subject key identifier:   E3:54:7B:23:2C:F0:9B:32:BB:1E:C2:FE:3D:CF:D9:AC:FF:E2:16:E6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01845FFF69608D9C2057F63F4A9C694DB83D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/41R7IyzwmzK7HsL-Pc_ZrP_iFuY.roa
Signing time:             Thu 10 Nov 2022 05:24:44 +0000
ROA not before:           Thu 10 Nov 2022 05:24:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201445
IP address blocks:        2a06:a005:150f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5f:ff:69:60:8d:9c:20:57:f6:3f:4a:9c:69:4d:b8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 10 05:24:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e3547b232cf09b32bb1ec2fe3dcfd9acffe216e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:00:2f:a2:03:3e:d0:50:7c:ea:20:af:19:54:
                    ac:c3:14:b7:cc:0b:c1:e0:2b:0d:20:5e:81:d5:98:
                    18:aa:7d:17:35:e0:7e:36:6a:fb:e4:c6:2e:96:10:
                    cd:a8:61:8f:af:70:59:5a:61:36:90:1e:e9:82:c4:
                    1a:d7:65:22:bc:02:b8:85:71:b2:01:49:b3:37:3d:
                    e2:3d:a9:bf:5d:4c:8d:92:33:df:b0:4a:10:c7:dd:
                    33:e1:63:0a:c8:49:69:c9:5f:9c:b5:d5:f4:ce:88:
                    c9:57:73:d0:ba:bb:75:5f:05:ea:f7:80:81:73:17:
                    ea:50:71:3e:78:26:bb:1d:96:65:9c:d0:f1:37:bc:
                    92:62:b7:e2:0d:18:30:26:61:32:cf:99:82:9c:42:
                    00:5f:12:e4:58:c6:2e:0d:7c:62:f1:4d:6c:17:66:
                    89:2c:7d:85:11:88:08:33:5a:cd:0e:aa:bf:8a:6e:
                    62:40:89:b5:fe:ff:46:f2:5f:2d:c0:5d:79:84:53:
                    c6:2f:24:05:19:de:df:f1:ce:4e:b3:ad:d8:ac:b4:
                    1f:e4:a1:75:27:ad:4d:ce:5a:23:c2:51:38:2c:c4:
                    1c:77:d6:a3:3f:29:9e:82:1c:a5:1e:3b:a3:60:f9:
                    e2:47:73:b9:62:3e:d4:e5:df:dd:73:a4:01:89:f1:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:54:7B:23:2C:F0:9B:32:BB:1E:C2:FE:3D:CF:D9:AC:FF:E2:16:E6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/41R7IyzwmzK7HsL-Pc_ZrP_iFuY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:150f::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:97:59:57:4f:19:3b:53:ee:31:a4:bd:6d:b1:1b:a5:19:09:
         e9:e3:78:c2:b2:1c:c8:9e:f4:19:56:5c:3a:1c:a3:c5:b1:25:
         3d:9d:c8:fa:d8:23:de:54:ec:74:65:34:27:c3:e5:dc:44:95:
         6b:2c:b7:5c:79:ac:66:dc:d3:ee:a6:0f:e5:a7:a2:5c:aa:48:
         76:d4:dd:fc:90:fe:05:85:c3:a3:ef:be:0c:09:a1:d7:cf:c4:
         95:fc:5e:ee:6a:af:0d:ce:41:16:8c:b5:5f:a0:bf:af:86:22:
         d4:40:8e:0e:52:3c:8a:3a:2f:aa:31:84:bc:bf:87:c0:90:5b:
         e4:fb:37:78:fd:ec:90:48:c3:05:74:ac:4a:06:16:0d:75:f0:
         a2:b8:94:0f:76:c1:b9:6b:93:74:d5:92:8c:09:2f:db:b0:30:
         e4:4c:8d:37:07:40:8c:57:80:f0:17:90:6a:10:5b:2f:bf:a5:
         d1:2e:7c:27:f6:54:82:e7:7c:6f:a1:a2:87:f6:79:2c:12:31:
         f0:90:d2:3d:47:f9:fa:7c:b0:17:6b:1f:ae:f5:79:f0:41:ae:
         c3:b9:0f:0f:a0:9f:de:8f:33:38:71:2a:d6:92:b3:30:eb:da:
         4e:45:a7:86:8f:6a:cb:ae:d3:e8:53:63:96:8a:d4:f3:a9:f8:
         14:c3:a7:8b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYRf/2lgjZwgV/Y/SpxpTbg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTEwMDUyNDQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzU0N2IyMzJjZjA5YjMyYmIxZWMyZmUzZGNmZDlhY2ZmZTIxNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQAvogM+0FB86iCvGVSswxS3zAvB
4CsNIF6B1ZgYqn0XNeB+Nmr75MYulhDNqGGPr3BZWmE2kB7pgsQa12UivAK4hXGy
AUmzNz3iPam/XUyNkjPfsEoQx90z4WMKyElpyV+ctdX0zojJV3PQurt1XwXq94CB
cxfqUHE+eCa7HZZlnNDxN7ySYrfiDRgwJmEyz5mCnEIAXxLkWMYuDXxi8U1sF2aJ
LH2FEYgIM1rNDqq/im5iQIm1/v9G8l8twF15hFPGLyQFGd7f8c5Os63YrLQf5KF1
J61NzlojwlE4LMQcd9ajPymeghylHjujYPniR3O5Yj7U5d/dc6QBifGhcQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFONUeyMs8Jsyux7C/j3P2az/4hbmMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvNDFSN0l5endteks3SHNMLVBjX1pyUF9pRnVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBRUP
MA0GCSqGSIb3DQEBCwUAA4IBAQCLl1lXTxk7U+4xpL1tsRulGQnp43jCshzInvQZ
Vlw6HKPFsSU9ncj62CPeVOx0ZTQnw+XcRJVrLLdceaxm3NPupg/lp6Jcqkh21N38
kP4FhcOj774MCaHXz8SV/F7uaq8NzkEWjLVfoL+vhiLUQI4OUjyKOi+qMYS8v4fA
kFvk+zd4/eyQSMMFdKxKBhYNdfCiuJQPdsG5a5N01ZKMCS/bsDDkTI03B0CMV4Dw
F5BqEFsvv6XRLnwn9lSC53xvoaKH9nksEjHwkNI9R/n6fLAXax+u9XnwQa7DuQ8P
oJ/ejzM4cSrWkrMw69pORaeGj2rLrtPoU2OWitTzqfgUw6eL
-----END CERTIFICATE-----