Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B1R9QitWZxwfeAcx1a_dOrwk3I4.roa
File:                     B1R9QitWZxwfeAcx1a_dOrwk3I4.roa (raw, json)
Hash identifier:          pMEbeRch7ha+OsnDpc0OykwqiQAoiynUw/arvkVpPlY=
Subject key identifier:   07:54:7D:42:2B:56:67:1C:1F:78:07:31:D5:AF:DD:3A:BC:24:DC:8E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19F66DC3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B1R9QitWZxwfeAcx1a_dOrwk3I4.roa
Signing time:             Fri 20 May 2022 12:56:30 +0000
ROA not before:           Fri 20 May 2022 12:56:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212354
IP address blocks:        2a06:a005:a00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435580355 (0x19f66dc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 20 12:56:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=07547d422b56671c1f780731d5afdd3abc24dc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:aa:85:d4:f5:df:c2:a0:75:af:40:8c:ad:
                    b0:91:a5:78:6e:a8:eb:b7:c1:c9:fd:75:8e:94:ba:
                    f7:a7:d2:e9:ed:fa:01:59:3a:8c:24:10:95:64:ad:
                    8d:8c:1d:03:7a:df:7a:1a:ec:d2:48:bf:af:21:6b:
                    2e:73:ba:08:35:92:68:fd:9f:0b:b3:c8:e8:a4:fb:
                    14:2d:a9:1a:bf:12:1c:65:ec:c7:cd:19:b2:7a:d7:
                    91:4f:6c:85:98:44:73:a7:2b:24:97:17:81:df:fd:
                    25:86:e8:4c:dd:54:99:65:b7:cc:e0:92:91:84:8a:
                    c9:2d:88:a5:64:37:06:cf:36:b1:ee:67:27:02:63:
                    07:1c:3b:7f:cd:28:01:69:51:63:42:1c:bf:08:05:
                    02:70:a7:76:7b:b2:1c:b2:b1:56:12:b8:61:33:07:
                    7b:90:65:32:db:b5:aa:21:13:e0:68:04:14:78:7e:
                    51:13:6e:6b:b1:65:76:73:bf:4b:4e:00:5d:85:21:
                    08:f9:2d:c0:26:26:cf:af:cb:90:ea:4f:45:5a:b4:
                    34:88:ff:2f:dc:02:02:44:d7:de:1f:d9:09:2a:04:
                    bd:9b:79:bb:96:b4:8a:20:87:73:1b:59:e6:1e:e6:
                    88:90:5d:23:00:41:eb:84:64:99:0f:69:0f:34:a0:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:54:7D:42:2B:56:67:1C:1F:78:07:31:D5:AF:DD:3A:BC:24:DC:8E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B1R9QitWZxwfeAcx1a_dOrwk3I4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:c6:27:1c:e1:d1:a7:64:e2:78:e5:e0:ba:84:ea:6e:98:01:
         ec:6d:05:99:85:9b:d1:0e:ba:bd:e7:6a:04:4f:8a:5b:ea:5d:
         b1:cb:f5:27:39:ed:a6:c0:cb:ca:29:7d:3f:fd:a9:6f:03:f9:
         fc:82:32:8b:0f:46:9a:3f:61:43:8e:b1:4c:06:89:5d:1f:b4:
         d0:60:eb:60:17:6b:23:51:a4:bf:89:d4:98:52:8d:1d:23:a4:
         99:63:df:c5:ca:37:22:4a:60:fc:05:81:09:e2:1a:96:b9:11:
         2b:82:22:bd:d7:3d:ac:58:72:fe:c8:c2:27:04:5a:c1:53:18:
         1e:59:4f:76:09:8a:a1:e4:22:16:40:e2:11:83:b1:8e:f2:ae:
         24:6c:8e:f3:96:d5:82:aa:0e:00:3d:9c:1c:41:d7:ac:c6:49:
         81:26:d7:ff:d2:99:df:92:78:55:d1:63:34:64:c3:f8:bd:ee:
         0f:53:01:13:ee:3f:45:8a:2f:2c:a8:ab:1d:56:26:07:87:77:
         d5:fc:99:8c:eb:28:fc:7b:4f:7d:ba:8a:50:53:c6:31:f7:a3:
         21:03:b5:4b:2b:9d:cd:db:f1:90:fd:7b:ef:69:b5:12:8a:fe:
         ea:e4:5f:0b:b1:5a:c9:6c:d5:fb:11:77:16:b2:56:10:05:0a:
         04:a9:26:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----