Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IlRLIGdwLlxicD047OYNef5Y9go.roa
File:                     IlRLIGdwLlxicD047OYNef5Y9go.roa (raw, json)
Hash identifier:          VhWCIQ6LeL2gj/LVWnuggK1PE1zv9zhOxwpd4jSrcIU=
Subject key identifier:   22:54:4B:20:67:70:2E:5C:62:70:3D:38:EC:E6:0D:79:FE:58:F6:0A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184E8088052AD29B9ACC7B3808281C77EA6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IlRLIGdwLlxicD047OYNef5Y9go.roa
Signing time:             Tue 06 Dec 2022 15:23:01 +0000
ROA not before:           Tue 06 Dec 2022 15:23:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200890
IP address blocks:        2a0a:6040:d400::/40 maxlen: 48
                          2a06:a005:1b60::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e8:08:80:52:ad:29:b9:ac:c7:b3:80:82:81:c7:7e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  6 15:23:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=22544b2067702e5c62703d38ece60d79fe58f60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d0:5d:b7:fa:e9:ba:78:e1:fb:93:18:10:e7:
                    e7:ac:8f:fd:e0:dd:27:6e:4c:2a:78:99:f1:39:f4:
                    48:d1:b8:67:14:2c:b4:54:e9:51:82:b1:86:f3:d6:
                    34:37:83:8e:f9:ab:b4:bb:f4:c1:5e:e4:58:12:24:
                    ff:53:73:3d:95:04:ee:bf:00:75:76:31:f7:93:da:
                    77:5b:9e:53:f0:19:e0:d9:e1:1e:2d:96:65:e7:92:
                    c4:0b:e9:e1:d5:04:07:b6:38:98:07:08:de:af:9c:
                    4c:75:1e:29:59:b3:2a:60:67:ad:25:af:fc:4a:b5:
                    b4:70:a9:cb:bb:70:18:ef:65:65:07:77:05:01:90:
                    8a:39:4b:7e:b4:fd:aa:cf:aa:c8:40:a6:8c:e3:a1:
                    a7:13:13:82:5b:7c:66:70:0d:7f:3f:41:7c:35:08:
                    90:25:a7:03:ce:76:ec:20:92:0a:8e:92:c7:7c:99:
                    e8:9c:6c:cf:8a:65:6f:87:16:28:35:53:3c:35:40:
                    e9:f8:d3:bb:9a:66:51:6f:92:e9:fb:f6:18:0f:3a:
                    11:60:32:e4:35:c4:43:28:14:d1:8c:1e:01:c0:b3:
                    47:16:91:8d:aa:91:7f:ae:ed:a1:8c:de:3f:f7:2f:
                    a4:89:6d:3d:52:85:14:ef:c3:c6:9b:53:ff:1c:9c:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:54:4B:20:67:70:2E:5C:62:70:3D:38:EC:E6:0D:79:FE:58:F6:0A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IlRLIGdwLlxicD047OYNef5Y9go.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1b60::/44
                  2a0a:6040:d400::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:74:5a:8a:dc:57:c9:95:d2:61:0b:c6:aa:10:12:96:7a:df:
         e0:eb:ee:69:72:d5:90:92:60:b1:88:cc:45:99:e2:82:7c:b8:
         00:8a:0a:a1:97:20:70:23:7e:50:42:2a:e3:b2:82:2a:fe:50:
         c7:fe:46:00:4f:3c:74:50:04:f6:09:dc:42:fd:4d:5f:fa:53:
         f6:9b:83:dd:89:16:af:e0:15:92:1b:8f:f1:d9:00:19:d5:da:
         93:19:4c:a7:88:53:75:24:68:b1:15:1f:02:b0:97:78:39:80:
         92:69:0e:b1:6b:d5:8d:3c:f3:72:8d:43:6b:46:3f:85:27:81:
         cf:4d:2f:e5:0d:8b:80:5e:40:3f:08:92:f5:54:51:85:c3:3d:
         9e:1d:8d:97:58:19:95:ca:1f:65:82:96:d6:b1:18:01:c0:c5:
         b0:26:d6:11:f6:bf:1f:de:d2:b2:27:80:06:9e:92:c9:0b:dc:
         83:c5:bd:d2:9d:f1:c0:46:4f:c8:0b:c6:f3:6f:2d:c8:16:76:
         45:1e:79:04:c2:d9:33:74:87:9a:17:4a:cb:0e:3d:00:7b:0e:
         96:62:ed:5e:87:38:c9:7b:64:d6:c8:af:2b:ef:e2:98:6d:55:
         e8:33:d7:eb:68:04:c3:b0:9e:c0:99:04:1a:ec:d8:45:d6:c7:
         18:04:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----