Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/J1oMvPQsNEQHdSpiLjknz_UoyNg.roa
File:                     J1oMvPQsNEQHdSpiLjknz_UoyNg.roa (raw, json)
Hash identifier:          6pN/OB7LCn+P5k8ZUGzHgmHCrzIqTqdS2mET2Lv9P5A=
Subject key identifier:   27:5A:0C:BC:F4:2C:34:44:07:75:2A:62:2E:39:27:CF:F5:28:C8:D8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184F0155AC6CF4F420526BDF46F916C6677
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/J1oMvPQsNEQHdSpiLjknz_UoyNg.roa
Signing time:             Thu 08 Dec 2022 04:54:02 +0000
ROA not before:           Thu 08 Dec 2022 04:54:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200754
IP address blocks:        2a0a:6040:c300::/40 maxlen: 48
                          2a06:a005:24a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f0:15:5a:c6:cf:4f:42:05:26:bd:f4:6f:91:6c:66:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  8 04:54:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=275a0cbcf42c344407752a622e3927cff528c8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c8:06:87:cf:97:a8:07:88:bb:36:aa:38:aa:
                    a4:76:24:53:75:a8:d7:14:b2:f1:37:5b:e8:6d:fc:
                    4a:d1:07:8a:0d:b4:32:80:bc:93:6a:77:dd:d1:da:
                    49:be:a0:f9:a3:8b:5d:e0:14:43:0b:f5:2d:6d:13:
                    df:c5:17:1a:13:28:27:34:17:18:f4:99:e7:11:98:
                    9b:f2:c9:cf:e2:71:f0:6a:92:17:d4:df:98:e1:25:
                    15:e4:73:88:58:9f:5a:53:2d:91:61:ad:ea:a9:67:
                    de:ad:de:7a:47:21:47:74:68:0b:fc:24:2e:23:1b:
                    6f:ea:74:a8:21:cb:db:07:7a:bd:02:bf:c4:d2:ae:
                    4d:d6:e6:9c:10:b2:4c:8c:a5:47:cc:fb:9f:ba:11:
                    f6:10:5c:f8:ec:0d:c1:99:26:6e:4d:ea:d0:ec:12:
                    e6:a3:91:a9:4e:a9:be:e7:56:e4:f2:ea:b7:83:4c:
                    be:c6:1e:4a:e4:c3:4c:b1:fb:c0:2f:74:e0:7a:00:
                    05:3a:cf:99:48:05:95:1e:39:67:e9:50:6a:97:bc:
                    90:6b:66:85:58:f0:20:b5:d2:dd:a2:8a:b3:ed:aa:
                    ac:b1:db:57:4e:6c:db:35:8b:2d:a4:e4:af:eb:0a:
                    e5:0d:06:d6:28:d1:ba:00:fa:ef:aa:7f:ea:94:90:
                    d3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5A:0C:BC:F4:2C:34:44:07:75:2A:62:2E:39:27:CF:F5:28:C8:D8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/J1oMvPQsNEQHdSpiLjknz_UoyNg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:24a0::/44
                  2a0a:6040:c300::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:7f:df:e7:25:15:04:b1:6f:73:c4:71:8b:e3:97:7c:11:d6:
         1d:16:39:d9:07:9a:ac:aa:63:56:60:41:b7:91:51:28:67:91:
         b3:4b:61:04:85:4c:1c:32:42:b2:4e:a0:71:ef:bd:f9:f9:1c:
         fc:41:10:2f:d8:39:f2:c0:14:e4:9d:a7:fd:30:1d:57:f4:a5:
         08:a7:3e:38:35:76:e8:b6:51:55:10:e6:2a:47:1f:f6:2a:7b:
         3c:6a:5a:31:66:62:f4:af:24:f5:2c:6a:ef:55:a3:e7:e9:87:
         d7:de:9b:35:91:85:5f:e4:ec:21:ba:8b:af:8e:32:a9:52:de:
         e6:be:92:ed:2f:be:46:6b:e6:d5:f5:6e:1e:ca:50:ff:91:cb:
         07:66:42:b5:b3:10:4f:da:fe:29:9d:0c:3b:29:0c:ba:5e:8c:
         49:0a:43:23:11:bb:fb:0b:c0:d0:e7:01:6c:09:89:44:5b:22:
         ab:33:ea:1b:b9:b6:40:26:00:ac:dd:1f:a4:d5:e3:f0:f3:ef:
         24:85:8f:f2:70:2b:fc:28:e3:00:39:b2:a7:1b:e8:e2:a4:26:
         86:76:d2:74:95:1c:18:6f:ee:2d:6e:7b:8c:e3:6e:bf:e0:fa:
         05:31:79:95:fe:fe:01:e2:77:33:c7:ce:a4:3c:5c:17:7a:f0:
         fc:74:43:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----