Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AngMTqNoMGTw9-b-iVbXwsTfGDw.roa
File:                     AngMTqNoMGTw9-b-iVbXwsTfGDw.roa (raw, json)
Hash identifier:          CL/iQfC7Dr76cCGwMTGSraDN4s5bs6Qm8Lp9is02GiE=
Subject key identifier:   02:78:0C:4E:A3:68:30:64:F0:F7:E6:FE:89:56:D7:C2:C4:DF:18:3C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1AB2FEA9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AngMTqNoMGTw9-b-iVbXwsTfGDw.roa
Signing time:             Thu 09 Jun 2022 01:02:04 +0000
ROA not before:           Thu 09 Jun 2022 01:02:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204829
IP address blocks:        2a06:a005:9e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447938217 (0x1ab2fea9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun  9 01:02:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02780c4ea3683064f0f7e6fe8956d7c2c4df183c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:35:cb:b8:f5:14:1a:c6:ea:d3:42:c8:bd:
                    6c:55:8a:3c:04:b1:fa:cf:35:5a:9c:f9:fc:d3:4e:
                    b9:a3:87:d0:8c:f3:fe:94:80:f6:5d:fd:70:85:41:
                    39:11:e4:b3:39:cc:4b:48:e8:43:d6:e3:85:cf:e5:
                    8e:53:f4:49:44:c5:ad:0c:23:01:62:fe:12:ab:c9:
                    50:d8:e5:1b:ee:97:76:69:02:36:64:6a:66:d8:f2:
                    8b:1f:59:8b:4d:11:b2:a6:5b:01:15:b9:2c:35:ca:
                    1c:f6:8c:08:0e:98:39:9c:5c:72:72:50:4e:5a:19:
                    d3:a6:d0:15:52:0a:48:09:be:b0:ae:32:47:fd:38:
                    74:ea:09:79:83:d5:52:64:99:cb:37:66:83:b5:3a:
                    0b:fd:e2:e6:8c:18:88:13:15:2a:9b:86:5e:7a:7b:
                    04:8f:c3:27:51:29:53:63:12:79:5e:f2:ac:1d:31:
                    4f:7a:b7:1a:c8:46:bb:52:ff:cd:39:dd:fd:ba:56:
                    a9:aa:84:58:cd:f9:3c:ec:b4:7f:c5:69:a9:96:8f:
                    9f:0e:06:b5:e5:48:a1:91:9a:a6:01:c1:64:15:ae:
                    6d:5c:bc:1c:ad:7e:57:da:b8:4f:03:52:7d:7c:64:
                    dc:90:58:e7:91:65:58:e5:b5:b8:9e:8d:e3:53:89:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:78:0C:4E:A3:68:30:64:F0:F7:E6:FE:89:56:D7:C2:C4:DF:18:3C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AngMTqNoMGTw9-b-iVbXwsTfGDw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:9e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         58:8f:54:bd:d9:c2:5b:e7:59:7c:3c:07:e0:eb:47:6a:d3:ee:
         54:dc:f6:2b:f3:13:d2:0d:da:59:86:a4:f2:3c:08:a0:94:5b:
         6c:b2:44:a5:11:39:f9:c9:07:7c:3c:eb:6c:c5:e3:24:a9:d3:
         fb:4b:8c:f3:51:0a:6e:46:4f:99:e8:a8:b6:e1:e4:2d:59:55:
         c3:ea:74:e5:b0:ee:26:ce:68:3d:52:9f:20:ba:f8:4d:ae:71:
         fe:f4:e0:95:63:e0:3c:80:c6:6f:09:b1:e1:f5:4a:ff:23:05:
         bf:83:40:6f:c4:58:b6:0b:c3:d7:f8:9a:5a:15:46:5c:96:2d:
         82:24:92:c8:b4:80:2e:11:4f:cc:7c:ea:d4:2c:02:49:65:4e:
         3f:74:d0:3a:0e:37:a6:28:61:86:f0:d1:70:40:11:ca:70:0e:
         98:e5:00:8e:7d:0b:12:ab:93:0d:54:8a:19:0f:6c:50:50:e7:
         a4:8c:ac:ad:a4:9c:ef:bb:9c:c9:78:73:44:a8:e9:ec:c1:df:
         94:8a:3d:62:cd:c0:f4:b6:c5:6a:d8:2a:8b:d7:53:d3:b3:1f:
         b0:c3:cd:71:60:ff:8a:bb:fb:d9:ec:39:67:f1:0a:77:d9:65:
         d6:f0:aa:cc:11:31:d0:be:09:bf:39:ff:b3:bf:1d:f0:a8:41:
         33:45:e7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----