Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/En6Svb3vihUJBZL1A20KM05tEdw.roa
File:                     En6Svb3vihUJBZL1A20KM05tEdw.roa (raw, json)
Hash identifier:          ytXkRpEVF9Z7FD3aYIe6lFJlyqcwVZGKZSa/iJYvkP0=
Subject key identifier:   12:7E:92:BD:BD:EF:8A:15:09:05:92:F5:03:6D:0A:33:4E:6D:11:DC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181E4AABE699DA309E9DEBE3E4F858E363F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/En6Svb3vihUJBZL1A20KM05tEdw.roa
Signing time:             Sat 09 Jul 2022 20:33:23 +0000
ROA not before:           Sat 09 Jul 2022 20:33:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211843
IP address blocks:        2a06:a005:a13::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:e4:aa:be:69:9d:a3:09:e9:de:be:3e:4f:85:8e:36:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  9 20:33:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=127e92bdbdef8a15090592f5036d0a334e6d11dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3d:fd:6c:fe:7d:02:53:22:50:57:a3:f7:9e:
                    55:48:c0:53:a5:6a:ce:9f:8c:d0:09:b0:2c:a2:bd:
                    68:da:d8:d4:7f:c3:04:2b:a4:0a:92:d0:2f:de:d3:
                    c0:b2:33:45:06:40:6a:8c:a1:8e:f0:97:43:f0:dd:
                    54:18:03:84:1e:54:42:3a:0d:f8:75:51:61:68:25:
                    59:a5:ac:b4:5a:09:aa:1d:4c:e3:18:57:36:f0:ba:
                    be:81:d5:5a:7e:c4:9a:08:1b:8c:c6:1c:5e:05:24:
                    c1:b5:88:c8:cd:ff:08:d6:8f:84:8f:4b:d6:3c:72:
                    6f:65:e2:0c:f5:62:86:c9:72:7d:52:32:99:4d:2c:
                    7f:da:31:1a:51:22:44:c6:be:d7:c2:a8:fe:cb:f4:
                    99:a5:bd:ad:fd:94:5a:ae:21:37:8c:aa:ae:c9:23:
                    66:63:69:0a:d6:06:66:41:8a:06:4b:68:86:a5:a6:
                    99:78:87:bc:d0:96:41:fc:05:85:08:b5:59:13:83:
                    ca:0d:34:b8:d1:84:ce:c1:ae:25:f3:cc:05:fc:ff:
                    50:34:3b:bb:82:db:96:39:49:0e:38:32:4a:dc:3e:
                    8c:c1:0f:a2:7e:5e:ab:cb:e9:e8:39:83:4e:ed:01:
                    a0:1d:ba:26:f2:80:93:6d:df:0f:9f:f4:c4:2d:68:
                    ab:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7E:92:BD:BD:EF:8A:15:09:05:92:F5:03:6D:0A:33:4E:6D:11:DC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/En6Svb3vihUJBZL1A20KM05tEdw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a13::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:65:89:51:24:d0:b0:8d:01:c4:0f:fe:f1:46:35:46:51:2b:
         f3:07:a6:a2:ea:68:d9:3f:61:75:59:cf:a7:45:80:e5:9a:06:
         8a:03:81:71:b8:94:d4:8b:d2:a3:5a:67:33:a6:bf:ae:b7:c5:
         8b:91:b3:48:d7:a7:89:de:c5:c3:03:34:41:7a:b4:03:be:38:
         6c:20:b2:db:02:da:4d:df:92:e4:cd:44:c8:d6:1d:45:d3:89:
         24:5d:4e:39:d2:ec:58:ea:4a:b1:12:19:56:18:75:d1:d4:62:
         72:de:06:93:f5:6c:c7:13:9c:0c:43:a2:45:45:49:fa:f7:c4:
         df:6d:43:7e:eb:1e:06:6d:1d:5f:bd:ee:78:cf:5d:e7:7e:39:
         e0:c4:ed:1e:eb:7e:c9:a3:f2:bf:c0:d5:94:3e:6e:38:45:b5:
         f0:8f:cb:dd:1a:7b:b9:dc:72:e9:cd:18:1f:92:a7:ad:80:52:
         8a:17:01:c1:33:ad:49:64:c8:ad:4d:63:63:b1:b5:2a:99:06:
         c0:8d:b6:fa:72:7a:ad:f7:23:3a:16:ae:c4:4a:19:c5:f5:1b:
         94:84:10:96:b3:32:bd:13:72:fe:e2:79:60:cb:95:13:61:b5:
         dc:a4:9f:65:11:b4:58:75:22:59:ae:12:fb:4e:49:15:f6:c7:
         f3:d7:a7:a3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYHkqr5pnaMJ6d6+Pk+FjjY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzA5MjAzMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjdlOTJiZGJkZWY4YTE1MDkwNTkyZjUwMzZkMGEzMzRlNmQxMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T39bP59AlMiUFej955VSMBTpWrO
n4zQCbAsor1o2tjUf8MEK6QKktAv3tPAsjNFBkBqjKGO8JdD8N1UGAOEHlRCOg34
dVFhaCVZpay0WgmqHUzjGFc28Lq+gdVafsSaCBuMxhxeBSTBtYjIzf8I1o+Ej0vW
PHJvZeIM9WKGyXJ9UjKZTSx/2jEaUSJExr7Xwqj+y/SZpb2t/ZRariE3jKquySNm
Y2kK1gZmQYoGS2iGpaaZeIe80JZB/AWFCLVZE4PKDTS40YTOwa4l88wF/P9QNDu7
gtuWOUkOODJK3D6MwQ+ifl6ry+noOYNO7QGgHbom8oCTbd8Pn/TELWirqwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBJ+kr2974oVCQWS9QNtCjNObRHcMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvRW42U3ZiM3ZpaFVKQlpMMUEyMEtNMDV0RWR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQoT
MA0GCSqGSIb3DQEBCwUAA4IBAQBrZYlRJNCwjQHED/7xRjVGUSvzB6ai6mjZP2F1
Wc+nRYDlmgaKA4FxuJTUi9KjWmczpr+ut8WLkbNI16eJ3sXDAzRBerQDvjhsILLb
AtpN35LkzUTI1h1F04kkXU450uxY6kqxEhlWGHXR1GJy3gaT9WzHE5wMQ6JFRUn6
98TfbUN+6x4GbR1fve54z13nfjngxO0e637Jo/K/wNWUPm44RbXwj8vdGnu53HLp
zRgfkqetgFKKFwHBM61JZMitTWNjsbUqmQbAjbb6cnqt9yM6Fq7EShnF9RuUhBCW
szK9E3L+4nlgy5UTYbXcpJ9lEbRYdSJZrhL7TkkV9sfz16ej
-----END CERTIFICATE-----