Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/A3ifdb3PEai8oVZEWb0mgQTGfjo.roa
File:                     A3ifdb3PEai8oVZEWb0mgQTGfjo.roa (raw, json)
Hash identifier:          Lyl4uhrO3F0heBQOgJFbg4ilh991Nj7uVzux6tRwsuw=
Subject key identifier:   03:78:9F:75:BD:CF:11:A8:BC:A1:56:44:59:BD:26:81:04:C6:7E:3A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15B8D3B2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/A3ifdb3PEai8oVZEWb0mgQTGfjo.roa
Signing time:             Sat 01 Jan 2022 05:59:04 +0000
ROA not before:           Sat 01 Jan 2022 05:59:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     141694
IP address blocks:        2a06:a001:a0c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364434354 (0x15b8d3b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:59:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=03789f75bdcf11a8bca1564459bd268104c67e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:68:27:0a:ee:34:8d:fc:72:ca:20:5c:16:5d:
                    c1:c3:5b:28:47:ce:e3:b1:ff:bf:ff:b2:59:23:31:
                    24:61:7f:0f:37:88:52:b9:55:89:4e:2b:db:c8:8b:
                    7a:7d:51:9e:d1:ba:6b:6d:cc:86:02:e5:f3:e6:0f:
                    d6:86:1b:17:8a:3b:63:c9:88:73:ca:8d:b6:40:37:
                    9d:b4:e9:41:23:9d:0b:0e:35:2d:a3:58:3b:fa:ac:
                    37:3d:8a:71:ca:ba:d3:0b:2b:63:b6:34:46:ba:98:
                    f6:c8:2f:2e:c4:ae:5e:9c:db:c4:9e:fe:7c:d3:2d:
                    45:c6:2e:ee:f0:ad:8a:ae:07:2d:09:f9:e5:5d:cf:
                    04:e9:6d:2c:5d:8a:d8:56:02:04:f5:07:b9:0d:79:
                    a8:b5:3e:43:c3:d3:c9:30:89:c5:05:d2:d4:05:91:
                    a7:45:56:3a:6d:a2:d6:ee:df:75:6e:f4:79:f7:ef:
                    88:0f:97:98:42:38:e8:35:6e:e4:46:9e:51:f5:c9:
                    c0:c7:6e:7c:f2:17:28:8e:76:dc:1d:4d:5b:63:ff:
                    c1:8f:75:d3:c8:7d:91:c4:73:d8:61:86:26:2d:08:
                    38:5b:fc:d2:0c:74:39:5f:b8:23:aa:7d:4f:69:f1:
                    73:97:03:1a:a8:0e:c2:23:2f:22:6c:f1:24:a9:82:
                    fe:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:78:9F:75:BD:CF:11:A8:BC:A1:56:44:59:BD:26:81:04:C6:7E:3A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/A3ifdb3PEai8oVZEWb0mgQTGfjo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a0c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:09:4c:d6:8c:54:64:ea:39:56:a4:5b:3f:17:c5:e1:6a:54:
         a1:f8:f5:85:ec:24:2a:26:1d:1a:7e:55:dd:db:99:6a:b4:1a:
         39:d0:e1:28:53:93:f3:09:f8:7c:ac:a6:1e:e1:da:e2:33:9f:
         26:4e:7d:fd:0b:6f:f7:71:d8:a6:64:a1:0f:10:2d:e9:b1:a7:
         23:e9:14:43:67:a8:5d:df:61:c0:0f:52:38:a6:ef:dd:70:cc:
         80:43:b4:f9:a1:47:ae:8b:ab:ff:62:96:28:0c:ee:84:e3:ad:
         71:40:18:d6:64:25:a1:92:18:b4:96:63:e8:c8:80:d0:27:8c:
         fd:73:9f:e1:93:8a:36:ea:34:04:7e:a3:d9:83:f2:c8:ac:42:
         ca:74:7d:b5:71:2e:4d:0b:84:89:74:18:02:b3:1a:73:e9:fd:
         a6:19:ef:69:77:bd:26:ef:c9:c6:22:a9:ae:1b:88:76:b0:34:
         4e:5c:2f:41:69:b3:98:e3:f9:49:8d:c8:bd:fc:10:47:4c:39:
         7d:2a:3f:64:53:51:b1:10:ea:3f:2f:52:3b:8a:04:ff:cb:29:
         75:df:65:d3:0a:c3:b0:f7:f2:b2:ea:52:c9:ff:cc:72:32:e5:
         c9:dc:b1:8b:51:19:08:83:f2:4f:ed:4d:25:53:b5:0f:59:2f:
         aa:14:43:4c
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEFbjTsjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDEw
MTA1NTkwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDM3ODlmNzViZGNm
MTFhOGJjYTE1NjQ0NTliZDI2ODEwNGM2N2UzYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANdoJwruNI38csogXBZdwcNbKEfO47H/v/+yWSMxJGF/DzeI
UrlViU4r28iLen1RntG6a23MhgLl8+YP1oYbF4o7Y8mIc8qNtkA3nbTpQSOdCw41
LaNYO/qsNz2Kccq60wsrY7Y0RrqY9sgvLsSuXpzbxJ7+fNMtRcYu7vCtiq4HLQn5
5V3PBOltLF2K2FYCBPUHuQ15qLU+Q8PTyTCJxQXS1AWRp0VWOm2i1u7fdW70effv
iA+XmEI46DVu5EaeUfXJwMdufPIXKI523B1NW2P/wY9108h9kcRz2GGGJi0IOFv8
0gx0OV+4I6p9T2nxc5cDGqgOwiMvImzxJKmC/jsCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQDeJ91vc8RqLyhVkRZvSaBBMZ+OjAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L0EzaWZkYjNQRWFpOG9WWkVXYjBtZ1FUR2Zqby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGoAGgwDANBgkqhkiG9w0BAQsF
AAOCAQEAdAlM1oxUZOo5VqRbPxfF4WpUofj1hewkKiYdGn5V3duZarQaOdDhKFOT
8wn4fKymHuHa4jOfJk59/Qtv93HYpmShDxAt6bGnI+kUQ2eoXd9hwA9SOKbv3XDM
gEO0+aFHrour/2KWKAzuhOOtcUAY1mQloZIYtJZj6MiA0CeM/XOf4ZOKNuo0BH6j
2YPyyKxCynR9tXEuTQuEiXQYArMac+n9phnvaXe9Ju/JxiKprhuIdrA0TlwvQWmz
mOP5SY3IvfwQR0w5fSo/ZFNRsRDqPy9SO4oE/8spdd9l0wrDsPfysupSyf/McjLl
ydyxi1EZCIPyT+1NJVO1D1kvqhRDTA==
-----END CERTIFICATE-----