Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BaJyD5nfi9LZ0sSQaoFGZhQzRVo.roa
File:                     BaJyD5nfi9LZ0sSQaoFGZhQzRVo.roa (raw, json)
Hash identifier:          d9p/chvxGdIdRNjp5jVvj0wJGIgKD1PX0WbnLYBCvo8=
Subject key identifier:   05:A2:72:0F:99:DF:8B:D2:D9:D2:C4:90:6A:81:46:66:14:33:45:5A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183C4D1A751DF4C11A511B82BC1F43AE084
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BaJyD5nfi9LZ0sSQaoFGZhQzRVo.roa
Signing time:             Tue 11 Oct 2022 02:13:37 +0000
ROA not before:           Tue 11 Oct 2022 02:13:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51930
IP address blocks:        2a06:a005:1d10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c4:d1:a7:51:df:4c:11:a5:11:b8:2b:c1:f4:3a:e0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 11 02:13:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05a2720f99df8bd2d9d2c4906a8146661433455a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:0d:33:7a:43:15:10:69:08:88:02:a7:f9:
                    91:64:e0:c5:24:e1:15:3d:ec:76:db:c5:7a:75:be:
                    3a:2d:f4:35:e1:d9:55:81:fa:94:a3:2f:8a:a2:00:
                    c7:26:67:ef:9c:aa:b6:15:92:17:45:05:d5:6e:3c:
                    13:39:97:08:13:04:29:ff:45:7f:0d:ba:73:f2:0b:
                    ab:95:ae:d9:d7:8e:41:38:0b:d6:b0:a4:70:8f:9b:
                    f8:c1:a3:de:56:cf:13:f8:22:cb:e9:04:9b:b2:8c:
                    3c:2a:6e:ce:83:a6:62:32:9f:78:b1:d0:96:be:52:
                    c5:66:f4:54:ac:75:05:13:1d:a2:68:05:7b:2e:08:
                    f1:87:82:50:2c:3e:86:88:02:7c:39:47:f8:97:65:
                    57:8e:af:64:79:5f:52:37:6b:1e:87:e8:fb:93:65:
                    95:41:88:f2:bc:6d:ad:d0:3c:f6:02:88:e7:40:88:
                    22:d1:be:58:27:1c:d2:ec:f0:fc:d1:c1:e5:29:82:
                    ae:00:23:6b:21:38:79:dd:d2:34:db:96:b7:b5:2f:
                    04:39:74:24:89:68:7c:0b:1b:74:c8:b2:0b:00:09:
                    3c:d6:6c:cc:55:e1:0d:6c:ad:c8:8a:3e:2a:30:a4:
                    8e:8a:6e:30:41:85:7c:d7:9b:f0:cc:60:2b:fa:68:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A2:72:0F:99:DF:8B:D2:D9:D2:C4:90:6A:81:46:66:14:33:45:5A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BaJyD5nfi9LZ0sSQaoFGZhQzRVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1d10::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:d5:08:44:14:d3:81:aa:b7:03:67:ef:26:d7:a6:dc:e7:f5:
         9d:34:7c:fa:57:82:12:68:12:66:62:df:3d:44:e7:8a:2d:26:
         d7:bf:b5:2f:85:b0:c0:cc:c9:81:c9:3d:2f:50:73:05:8d:8c:
         c3:3d:de:db:2c:08:dc:16:05:1a:cf:eb:63:23:6a:24:38:3c:
         65:6c:9d:84:04:06:88:9e:ee:fb:3b:b9:80:ce:f0:89:de:b9:
         13:38:87:44:9a:cf:3e:de:8f:44:d2:7a:35:1d:05:8a:f3:b8:
         14:d4:b1:67:43:c9:70:ab:e6:bc:e5:18:70:a5:c8:7f:af:a2:
         e6:56:53:b8:b8:2d:c6:51:9a:97:c1:0c:0f:41:6f:91:79:7e:
         ad:ec:66:09:44:fd:4d:e1:51:04:58:75:ee:95:0e:b7:ba:9b:
         82:d7:10:dd:d7:8c:d8:26:9b:25:22:06:0c:55:34:f5:5d:09:
         10:2b:04:d4:2e:8b:f8:c5:e3:d6:a5:af:fd:2a:1f:e3:4c:3c:
         1d:0a:b2:e4:8a:da:da:8e:3c:03:43:ed:45:5c:7b:59:ff:88:
         33:78:a0:5d:7a:3f:11:bc:49:f9:86:59:98:05:99:26:66:d3:
         8a:2a:e8:a9:98:11:ea:c1:2e:09:61:db:96:93:6d:44:ea:0f:
         39:5b:58:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----