Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B_3_LIxWZRqvIA6vGaNbH63sKLI.roa
File:                     B_3_LIxWZRqvIA6vGaNbH63sKLI.roa (raw, json)
Hash identifier:          0iu6Yg17SJq4puwZ1tVG6RYuSFp+zsqBby5uPbrXl/k=
Subject key identifier:   07:FD:FF:2C:8C:56:65:1A:AF:20:0E:AF:19:A3:5B:1F:AD:EC:28:B2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181DC2F1C80F5675A8D807BCA1DB1D4A8D0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B_3_LIxWZRqvIA6vGaNbH63sKLI.roa
Signing time:             Fri 08 Jul 2022 05:01:23 +0000
ROA not before:           Fri 08 Jul 2022 05:01:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204992
IP address blocks:        2a06:a005:a11::/48 maxlen: 48
                          2a06:a005:5f3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:dc:2f:1c:80:f5:67:5a:8d:80:7b:ca:1d:b1:d4:a8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  8 05:01:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=07fdff2c8c56651aaf200eaf19a35b1fadec28b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:88:39:99:c7:05:dc:69:5c:96:92:92:83:ee:
                    d0:d2:7b:a0:9b:a3:39:71:f8:d2:79:22:68:f5:bf:
                    f5:a5:fc:5a:00:d0:b2:a3:64:18:4f:29:a9:41:28:
                    71:a1:22:d6:45:e3:06:45:a4:50:1f:b9:8f:76:62:
                    70:cf:d9:5f:eb:be:32:67:9c:fe:26:c0:fa:07:53:
                    ba:75:24:69:b1:8e:8c:8e:96:92:75:b6:37:cf:76:
                    75:fd:a1:ff:26:2f:fd:63:6c:7c:2d:e8:53:b3:a8:
                    ee:a1:97:9d:90:77:d4:85:18:fa:97:19:5e:7f:e9:
                    60:6c:e7:86:25:d4:aa:4b:e3:5c:a4:89:d2:a7:c9:
                    b4:a4:5c:70:d0:2e:d4:80:04:79:70:3d:d6:05:35:
                    32:19:91:a8:7d:5c:80:2a:6e:1e:92:84:9b:fc:38:
                    3e:f9:37:aa:5c:12:64:90:fd:b3:ce:6d:02:48:cb:
                    83:ab:6e:db:e8:25:17:8e:0b:8f:a0:46:fd:45:27:
                    1a:34:c0:34:3a:67:f0:af:f7:5c:f0:27:ef:d1:e2:
                    0a:3e:10:fc:5a:8a:04:59:ba:d4:38:7e:ce:15:7e:
                    20:31:a9:08:0b:b5:23:f6:f4:b1:6b:31:6c:74:1c:
                    f6:8e:39:30:bf:52:87:72:72:30:22:ba:76:22:7f:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FD:FF:2C:8C:56:65:1A:AF:20:0E:AF:19:A3:5B:1F:AD:EC:28:B2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B_3_LIxWZRqvIA6vGaNbH63sKLI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5f3::/48
                  2a06:a005:a11::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:d8:2f:68:85:c1:30:b4:17:8c:5a:67:21:d7:8a:e2:40:1f:
         5f:a9:8a:cb:b5:59:e3:32:17:9a:79:93:15:75:8e:c4:56:01:
         99:b4:fe:6f:f5:f7:74:f4:cd:50:30:7c:0f:b7:8e:8e:91:a7:
         07:59:d7:9c:9e:92:13:e4:b7:b6:b3:d3:40:f9:a5:1f:d3:81:
         07:e5:9a:1b:d7:3e:4f:3c:e0:8a:7d:25:50:16:97:fa:ae:09:
         34:a4:1c:10:62:b6:5e:04:40:50:2f:c7:0f:7e:8e:ee:77:e8:
         f6:c5:99:96:ff:b0:7b:27:71:df:cc:3d:4f:72:df:df:e9:31:
         e3:e9:77:12:6e:58:cc:d0:63:35:b0:05:29:03:a4:55:b2:12:
         77:7e:81:ff:97:08:57:73:74:08:db:3b:95:9d:3f:ef:af:25:
         a1:17:7f:e6:ef:d9:69:fb:ac:6f:60:ed:f1:6e:aa:51:53:23:
         23:f6:83:01:51:9f:26:5e:f7:9c:75:a3:b9:62:40:6a:24:d0:
         80:62:5b:4f:92:d5:58:65:87:45:7b:d7:dc:52:10:71:69:c5:
         3d:a4:d6:7f:f7:ff:cc:a8:11:ba:39:54:ca:62:8f:24:8d:fe:
         33:f6:62:64:2d:78:1d:01:76:eb:93:f7:99:e7:93:c2:63:fa:
         5e:b2:3a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----