Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IIava-UjjY9EU77O-9FRMbOYrn4.roa
File:                     IIava-UjjY9EU77O-9FRMbOYrn4.roa (raw, json)
Hash identifier:          80yCfu9ilwiZVAwtHmhNFqsdjKJ2p0P4Rat9HNEW5Hs=
Subject key identifier:   20:86:AF:6B:E5:23:8D:8F:44:53:BE:CE:FB:D1:51:31:B3:98:AE:7E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018256490BABABD69A3611272CE0010B5D8F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IIava-UjjY9EU77O-9FRMbOYrn4.roa
Signing time:             Sun 31 Jul 2022 22:03:23 +0000
ROA not before:           Sun 31 Jul 2022 22:03:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208548
IP address blocks:        2a06:a000:300::/40 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:56:49:0b:ab:ab:d6:9a:36:11:27:2c:e0:01:0b:5d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 31 22:03:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2086af6be5238d8f4453becefbd15131b398ae7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:bc:94:85:aa:86:ce:f9:ac:ad:aa:96:fe:
                    b5:95:31:06:66:7b:49:94:45:0b:d0:ea:59:8a:ef:
                    dc:31:3c:b5:be:47:dd:8b:6a:3e:b5:1c:ed:b9:ab:
                    6d:44:27:87:a2:4f:d4:a9:dd:e7:e8:80:94:58:8c:
                    17:37:98:fd:e5:6b:f7:1c:01:8a:12:be:b2:79:f4:
                    ff:3b:e3:50:bf:be:f9:d8:5f:19:d0:3a:14:af:a2:
                    be:f7:46:a9:6f:2a:d0:a6:76:73:3c:d9:19:44:1e:
                    4d:5f:c3:93:3e:62:7d:3f:d7:6a:26:28:1d:39:f6:
                    41:01:b2:b7:17:36:4c:d7:9b:7e:dd:da:dd:4e:29:
                    a0:e0:c3:bb:50:ab:4b:37:f2:7d:65:a5:15:2c:13:
                    4b:b0:94:1f:c8:f3:ac:52:6e:d9:83:6e:43:6e:38:
                    a0:20:c2:50:09:37:50:d4:57:08:2b:6c:d6:fc:d0:
                    b4:f1:f5:b6:38:22:b1:8c:0e:ca:e7:fd:d3:76:f3:
                    32:02:0a:44:82:4f:8d:0b:9d:bc:b3:2f:ba:b6:a8:
                    e8:b9:ed:37:bc:9f:5d:91:b3:b0:60:65:a7:9d:10:
                    3a:c7:7d:8d:14:e0:8f:b5:b4:a1:76:01:73:15:15:
                    55:a5:6c:97:fd:71:59:e4:04:ea:52:86:78:65:47:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:86:AF:6B:E5:23:8D:8F:44:53:BE:CE:FB:D1:51:31:B3:98:AE:7E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IIava-UjjY9EU77O-9FRMbOYrn4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a000:300::/40
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:10:96:af:e1:ac:7a:33:6b:1c:de:72:c8:3a:a9:78:e1:55:
         bd:fb:e7:e2:9f:b8:06:94:45:7f:5e:64:ed:26:4d:bc:de:e1:
         e7:4c:68:7a:ea:1c:69:24:56:e5:90:24:66:b4:5a:1a:cb:fd:
         66:a7:93:78:16:e3:bd:03:3d:c6:b5:96:63:6c:4c:6b:d1:84:
         a7:28:9b:01:6e:32:3f:7e:91:4a:20:54:a0:92:9e:bf:63:a1:
         69:01:1b:cd:4e:e0:18:ba:e7:d9:ad:de:42:1a:db:85:cc:8e:
         78:c8:e3:6b:3d:f2:11:5d:23:81:5b:06:b3:8f:f7:2d:bb:76:
         82:49:68:52:23:9b:d3:0a:03:2a:bf:89:fe:0c:4f:98:d2:13:
         d9:af:df:dd:8e:c3:39:27:56:7a:19:d1:3d:51:64:d4:c8:05:
         f3:96:35:3f:26:74:4e:01:15:88:0f:93:06:6d:07:d0:8d:d2:
         18:05:8a:53:d5:bd:88:20:2c:7c:b4:db:70:11:52:25:f5:68:
         e2:d0:32:93:6c:9f:c3:97:73:d7:5f:b8:c7:72:01:63:5a:db:
         fd:81:4a:15:aa:c0:3f:63:3b:6e:d0:6f:d6:42:7b:b0:38:c4:
         a2:5c:4f:d8:45:42:01:48:78:d0:bf:e9:af:ff:dc:9c:33:c5:
         e6:64:e1:82
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAYJWSQurq9aaNhEnLOABC12PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzMxMjIwMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDg2YWY2YmU1MjM4ZDhmNDQ1M2JlY2VmYmQxNTEzMWIzOThhZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRK8lIWqhs75rK2qlv61lTEGZntJ
lEUL0OpZiu/cMTy1vkfdi2o+tRztuattRCeHok/Uqd3n6ICUWIwXN5j95Wv3HAGK
Er6yefT/O+NQv7752F8Z0DoUr6K+90apbyrQpnZzPNkZRB5NX8OTPmJ9P9dqJigd
OfZBAbK3FzZM15t+3drdTimg4MO7UKtLN/J9ZaUVLBNLsJQfyPOsUm7Zg25Dbjig
IMJQCTdQ1FcIK2zW/NC08fW2OCKxjA7K5/3TdvMyAgpEgk+NC528sy+6tqjoue03
vJ9dkbOwYGWnnRA6x32NFOCPtbShdgFzFRVVpWyX/XFZ5ATqUoZ4ZUcFcQIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFCCGr2vlI42PRFO+zvvRUTGzmK5+MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvSUlhdmEtVWpqWTlFVTc3Ty05RlJNYk9Zcm40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKgagAAMD
BwAqB1TCsAswDQYJKoZIhvcNAQELBQADggEBAKAQlq/hrHozaxzecsg6qXjhVb37
5+KfuAaURX9eZO0mTbze4edMaHrqHGkkVuWQJGa0WhrL/Wank3gW470DPca1lmNs
TGvRhKcomwFuMj9+kUogVKCSnr9joWkBG81O4Bi659mt3kIa24XMjnjI42s98hFd
I4FbBrOP9y27doJJaFIjm9MKAyq/if4MT5jSE9mv392OwzknVnoZ0T1RZNTIBfOW
NT8mdE4BFYgPkwZtB9CN0hgFilPVvYggLHy023ARUiX1aOLQMpNsn8OXc9dfuMdy
AWNa2/2BShWqwD9jO27Qb9ZCe7A4xKJcT9hFQgFIeNC/6a//3JwzxeZk4YI=
-----END CERTIFICATE-----