Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AqdvzJZ3HorTGEArQp3nZcIsV8o.roa
File:                     AqdvzJZ3HorTGEArQp3nZcIsV8o.roa (raw, json)
Hash identifier:          lnpFIJsPKS3DohQJp0zDtjX7/tF1Vw410qOzD5eV41w=
Subject key identifier:   02:A7:6F:CC:96:77:1E:8A:D3:18:40:2B:42:9D:E7:65:C2:2C:57:CA
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183F18C880B78E1319FE63DD490B47CA2A2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AqdvzJZ3HorTGEArQp3nZcIsV8o.roa
Signing time:             Wed 19 Oct 2022 18:41:02 +0000
ROA not before:           Wed 19 Oct 2022 18:41:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203913
IP address blocks:        2a06:1287:1600::/40 maxlen: 48
                          2a06:a005:a16::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f1:8c:88:0b:78:e1:31:9f:e6:3d:d4:90:b4:7c:a2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 19 18:41:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02a76fcc96771e8ad318402b429de765c22c57ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2a:94:78:72:71:d9:21:f2:60:0c:ce:29:ab:
                    8a:7e:bf:b1:36:f4:b8:5b:56:5f:33:89:95:ad:9a:
                    db:d7:77:ea:e4:6c:b6:ad:8f:de:5c:21:dd:a7:a1:
                    cd:73:58:28:c8:d5:48:86:a9:e1:40:13:b3:02:77:
                    0c:31:8c:a7:84:bb:e8:19:e1:a7:42:e6:5f:49:cb:
                    ac:fd:3e:eb:44:02:bf:5a:f0:18:8b:2f:0c:66:5c:
                    cc:82:3f:4d:7c:84:87:c9:40:41:67:5c:da:1c:81:
                    d7:24:1f:0b:20:ec:a4:ab:fa:4a:4c:1d:e6:b7:c0:
                    f1:23:d2:02:1b:26:31:e0:7f:c8:0d:b5:4a:e7:fe:
                    b1:53:3b:e1:8e:c6:05:3a:6c:5d:d1:b2:19:60:9d:
                    da:cb:e5:a0:36:a0:bb:78:76:f2:95:90:cd:27:86:
                    a4:6c:98:a6:65:33:04:b5:d1:6c:88:84:97:db:fc:
                    e8:e0:46:58:05:af:77:67:53:24:96:38:2d:b1:2e:
                    ba:76:74:87:62:08:b7:b8:e9:b7:42:65:ba:6c:c3:
                    32:d1:07:33:11:35:ba:fe:a7:24:fc:f2:a4:4d:7d:
                    5e:63:da:8b:5f:82:b6:3e:00:dc:2b:33:9e:56:85:
                    cd:d0:8e:06:22:23:88:41:4f:e1:cc:1b:8e:93:cd:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A7:6F:CC:96:77:1E:8A:D3:18:40:2B:42:9D:E7:65:C2:2C:57:CA
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AqdvzJZ3HorTGEArQp3nZcIsV8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1600::/40
                  2a06:a005:a16::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:ef:06:9c:a4:32:88:da:7e:e7:b4:a4:f4:8d:46:35:dc:09:
         30:c8:ac:9c:49:27:17:b3:c3:09:33:77:f5:b2:f8:be:81:92:
         29:c6:c6:f2:64:17:81:1c:96:28:51:38:71:7a:f7:e2:47:dc:
         80:21:ed:55:c1:04:a6:1a:9d:85:3b:fc:e8:02:7e:c1:9f:2f:
         2a:ae:60:bf:d8:fa:f8:6e:3d:be:db:11:02:54:74:32:7d:1a:
         6e:58:80:24:68:ea:38:7f:d9:e3:a0:3d:f6:d9:30:bd:b1:fc:
         f7:19:b7:32:4a:d9:ad:9e:0d:ff:08:31:64:36:7a:ac:c6:b0:
         0e:60:20:cc:38:fb:9c:6a:46:14:e0:48:9b:ad:0d:f8:1c:3e:
         f5:73:0e:c4:cf:c5:2c:56:0b:b4:d0:53:06:3c:93:ed:22:2c:
         30:a1:82:5d:f3:78:a1:f7:2a:09:e7:da:32:61:48:0b:c8:dc:
         b9:a5:e9:fd:11:c6:ad:a4:34:bc:c6:74:6f:e2:c1:fe:c9:3b:
         14:6b:a8:a1:27:5b:c8:2f:1a:f7:2c:2f:2e:a6:ab:b7:45:68:
         ad:be:8f:52:d5:24:fc:fc:fd:a1:14:ec:4e:cb:bf:7b:a5:16:
         71:15:1f:a6:b5:37:fc:9f:c8:f2:36:cb:61:1a:4e:90:a0:a9:
         1d:2c:6e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----