Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/71Tj2jeiqNhLDu3r3irDN4UVQM4.roa
File:                     71Tj2jeiqNhLDu3r3irDN4UVQM4.roa (raw, json)
Hash identifier:          bJA+DNfCzP4MYKbpVhftaxXZ1O4j2Fu2a2PaVQOk2V4=
Subject key identifier:   EF:54:E3:DA:37:A2:A8:D8:4B:0E:ED:EB:DE:2A:C3:37:85:15:40:CE
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183DC5C9017E7BCDE0B5000F02ED4F64CBA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/71Tj2jeiqNhLDu3r3irDN4UVQM4.roa
Signing time:             Sat 15 Oct 2022 15:56:37 +0000
ROA not before:           Sat 15 Oct 2022 15:56:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209391
IP address blocks:        2a06:a005:1d70::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:dc:5c:90:17:e7:bc:de:0b:50:00:f0:2e:d4:f6:4c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 15 15:56:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef54e3da37a2a8d84b0eedebde2ac337851540ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:48:96:f8:9f:a4:00:d6:5c:de:ce:c1:f5:35:
                    37:b9:bf:0f:d7:ec:ab:96:4e:08:8d:1d:54:97:74:
                    9e:e8:50:8b:c2:0f:3b:f5:e3:41:b1:0b:aa:7e:93:
                    a1:3f:66:5e:21:83:8c:83:d2:7f:df:82:fe:32:2d:
                    df:46:83:fa:d2:9d:ca:6f:69:2f:5b:fc:0f:e7:a8:
                    ec:7f:ab:d2:c7:bb:67:f2:e8:52:9d:eb:d7:8d:9a:
                    cc:39:b5:84:19:24:f8:63:51:81:9c:a0:af:39:ba:
                    ff:11:3a:90:4c:70:39:2f:d4:ee:61:e2:1a:11:3f:
                    8c:0c:89:f1:4d:07:40:8e:68:e1:5a:43:e4:ee:28:
                    0d:bf:1e:8a:d6:fd:cc:4f:0d:a9:97:18:40:15:e7:
                    9a:d9:f5:50:0d:bf:07:54:5c:1d:f6:65:8f:a5:90:
                    d3:d6:ba:31:ca:16:fb:2d:a4:37:d5:62:37:43:a4:
                    20:bb:1c:d0:05:38:f9:1c:33:22:95:a3:bc:6f:3a:
                    a3:fa:95:7a:72:28:dd:87:54:a2:67:d5:da:2a:ac:
                    36:31:5a:39:6b:28:37:4e:30:f0:c4:27:bd:01:c6:
                    42:43:1b:dd:4f:e0:f4:1a:ec:4f:d0:43:44:a0:27:
                    0a:4a:f5:0f:fd:e2:1d:31:a7:2f:11:ed:50:c4:1e:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:54:E3:DA:37:A2:A8:D8:4B:0E:ED:EB:DE:2A:C3:37:85:15:40:CE
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/71Tj2jeiqNhLDu3r3irDN4UVQM4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1d70::/44

    Signature Algorithm: sha256WithRSAEncryption
         6e:9e:8d:4b:ab:48:39:80:24:28:92:09:d2:ae:5c:1d:bf:e8:
         f9:c7:de:53:88:f0:9b:59:07:2c:51:10:5c:71:59:c9:71:e6:
         c3:a7:d1:71:6b:d9:22:1c:c6:2e:d7:4d:7c:9b:37:20:c2:39:
         99:d0:45:6f:38:26:87:01:24:e9:df:75:27:f7:02:08:d9:28:
         97:91:3d:06:d6:49:a6:84:b2:5b:e3:db:22:ed:27:7e:9c:d3:
         ff:7b:52:79:3b:c3:bb:b9:b2:b8:18:4e:72:0b:29:23:9c:7e:
         3a:0e:e5:19:0e:f0:be:05:d3:b1:ed:33:1f:ac:7d:fe:70:e0:
         53:3b:64:f0:ba:1c:86:6c:cf:14:c9:b5:cc:18:5b:0b:a7:a2:
         5c:4c:8c:9c:93:1b:72:16:1c:0e:61:ce:eb:79:78:77:0b:fe:
         9d:38:25:a0:48:17:2e:22:9b:43:58:d1:89:07:e3:8a:7f:05:
         2a:7e:c7:e8:75:e1:5d:00:c8:68:98:6b:e4:be:28:05:38:71:
         5b:03:34:84:a3:54:cc:44:fa:db:53:f3:0a:ac:51:cd:75:2b:
         da:e3:87:c5:48:ab:63:b4:7b:c4:20:a8:ee:99:b7:5a:4d:d2:
         93:45:71:32:ae:6b:c6:f9:26:5c:36:ac:df:9b:00:8b:46:d3:
         90:6d:56:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----