Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/J-qRVpJwTU_98JQWElhHcYbtgP0.roa
File:                     J-qRVpJwTU_98JQWElhHcYbtgP0.roa (raw, json)
Hash identifier:          H3WHLgwVXKa3LADradYRbeiB/f5ePbw4mMD49AQJRdg=
Subject key identifier:   27:EA:91:56:92:70:4D:4F:FD:F0:94:16:12:58:47:71:86:ED:80:FD
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B9271A0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/J-qRVpJwTU_98JQWElhHcYbtgP0.roa
Signing time:             Wed 29 Jun 2022 16:09:02 +0000
ROA not before:           Wed 29 Jun 2022 16:09:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204268
IP address blocks:        2a06:a005:1000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462582176 (0x1b9271a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 29 16:09:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=27ea915692704d4ffdf094161258477186ed80fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:74:f8:bb:1a:23:34:35:86:22:6d:c3:93:
                    6f:21:bb:61:e5:0a:aa:cd:3d:26:e4:15:de:88:27:
                    9e:8c:d2:be:53:30:47:f2:0b:27:d5:5a:ca:a4:60:
                    cd:1e:d3:e1:fe:6f:e9:4b:e6:50:bb:d5:8a:78:0c:
                    39:93:ff:c2:f8:64:19:30:c2:60:9c:20:fe:92:65:
                    b2:f4:45:2b:34:b0:f7:6f:9c:cc:ba:fd:f8:52:41:
                    77:08:79:f4:51:d0:9c:b3:a1:af:40:25:d1:67:59:
                    fa:eb:0b:32:db:cc:70:ef:46:18:47:eb:85:ab:64:
                    62:1d:d7:99:cb:4f:68:08:2c:28:28:e7:a6:23:3c:
                    42:61:c8:3e:cc:ad:70:e1:ab:bd:8a:16:72:b2:10:
                    98:62:15:cf:de:26:90:72:6a:8d:62:59:d6:f0:07:
                    0f:16:74:31:6a:7b:f0:dd:e5:98:aa:03:bd:6b:92:
                    ec:1f:ef:ec:22:0c:41:63:3a:37:f4:98:24:38:82:
                    6a:c5:d9:68:35:21:f8:5c:92:3b:03:83:2c:32:5c:
                    7d:fd:4d:82:e9:38:11:c8:22:34:ff:87:38:33:4e:
                    c5:ef:0a:07:ee:81:b1:4d:e7:98:dd:27:ab:d0:3d:
                    c6:8e:f9:7a:76:10:a7:a0:25:71:af:6c:42:a5:27:
                    7e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EA:91:56:92:70:4D:4F:FD:F0:94:16:12:58:47:71:86:ED:80:FD
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/J-qRVpJwTU_98JQWElhHcYbtgP0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1000::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:2a:09:51:f2:c1:54:d8:80:8b:08:c2:b6:b1:b2:77:65:a3:
         0a:29:2c:2c:7c:cd:0f:4c:72:b1:51:4a:df:29:0b:25:84:3e:
         c1:8d:97:cf:37:e8:6b:be:dc:c0:6d:92:c3:53:62:e3:11:4d:
         b9:4d:30:3e:a8:5a:11:0d:29:df:13:03:ca:3e:ef:bc:f1:ae:
         d2:d3:dc:9a:d0:cc:46:c0:78:4d:c0:52:0e:e2:64:0e:2e:0c:
         f8:b1:51:20:d5:df:f5:48:68:01:f1:d6:14:a6:0f:df:fc:57:
         74:0a:94:74:72:0b:ae:15:60:cc:b0:3d:37:1e:5d:ed:d3:a0:
         6d:a0:3f:dd:01:fb:a3:5a:a9:76:6c:e5:8e:b0:3a:16:aa:b8:
         f4:29:f1:2b:8d:62:84:98:8d:a9:cd:2f:a3:6a:e2:72:c7:5b:
         6f:c8:c7:33:29:7b:bf:7e:c8:1c:5c:ad:a7:29:fa:05:5b:bf:
         1c:7a:9b:09:b1:e8:6d:63:39:e3:0c:d1:38:a0:f3:73:43:c6:
         dd:2c:86:a0:07:6f:a1:bb:52:0d:d4:8a:2a:28:0c:a2:5c:6b:
         18:a3:42:57:8f:d3:e4:27:19:67:5b:9b:3e:5a:76:8e:1a:b0:
         58:09:25:eb:51:e8:a0:21:65:83:26:c4:49:94:d8:35:61:dd:
         d3:8c:88:25
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEG5JxoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYy
OTE2MDkwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjdlYTkxNTY5Mjcw
NGQ0ZmZkZjA5NDE2MTI1ODQ3NzE4NmVkODBmZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK2KdPi7GiM0NYYibcOTbyG7YeUKqs09JuQV3ognnozSvlMw
R/ILJ9VayqRgzR7T4f5v6UvmULvVingMOZP/wvhkGTDCYJwg/pJlsvRFKzSw92+c
zLr9+FJBdwh59FHQnLOhr0Al0WdZ+usLMtvMcO9GGEfrhatkYh3XmctPaAgsKCjn
piM8QmHIPsytcOGrvYoWcrIQmGIVz94mkHJqjWJZ1vAHDxZ0MWp78N3lmKoDvWuS
7B/v7CIMQWM6N/SYJDiCasXZaDUh+FySOwODLDJcff1Nguk4EcgiNP+HODNOxe8K
B+6BsU3nmN0nq9A9xo75enYQp6Alca9sQqUnfgkCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQn6pFWknBNT/3wlBYSWEdxhu2A/TAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L0otcVJWcEp3VFVfOThKUVdFbGhIY1lidGdQMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGoAUQADANBgkqhkiG9w0BAQsF
AAOCAQEAQSoJUfLBVNiAiwjCtrGyd2WjCiksLHzND0xysVFK3ykLJYQ+wY2Xzzfo
a77cwG2Sw1Ni4xFNuU0wPqhaEQ0p3xMDyj7vvPGu0tPcmtDMRsB4TcBSDuJkDi4M
+LFRINXf9UhoAfHWFKYP3/xXdAqUdHILrhVgzLA9Nx5d7dOgbaA/3QH7o1qpdmzl
jrA6Fqq49CnxK41ihJiNqc0vo2ricsdbb8jHMyl7v37IHFytpyn6BVu/HHqbCbHo
bWM54wzROKDzc0PG3SyGoAdvobtSDdSKKigMolxrGKNCV4/T5CcZZ1ubPlp2jhqw
WAkl61HooCFlgybESZTYNWHd04yIJQ==
-----END CERTIFICATE-----