Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JvRR9SgWzAx768zGAPYEh7Je1VI.roa
File:                     JvRR9SgWzAx768zGAPYEh7Je1VI.roa (raw, json)
Hash identifier:          AFXhM0zWHB9BJMgvC37mZJiTDQFd6g3Mw72GgwthwRA=
Subject key identifier:   26:F4:51:F5:28:16:CC:0C:7B:EB:CC:C6:00:F6:04:87:B2:5E:D5:52
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       17D28956
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JvRR9SgWzAx768zGAPYEh7Je1VI.roa
Signing time:             Fri 08 Apr 2022 06:23:01 +0000
ROA not before:           Fri 08 Apr 2022 06:23:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48741
IP address blocks:        2a06:a001:a020::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399673686 (0x17d28956)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr  8 06:23:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=26f451f52816cc0c7bebccc600f60487b25ed552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:94:d5:37:68:1b:2d:a5:7d:99:43:0e:d7:
                    1a:e0:7a:35:5c:ef:2c:e6:61:bb:81:c6:05:c2:4b:
                    3b:b4:76:2d:22:96:3e:d4:95:60:51:b1:63:8a:45:
                    92:10:43:fa:9d:f2:4c:b9:ff:e9:1a:02:df:3d:8b:
                    92:75:07:ee:9d:36:12:b7:12:c0:52:60:bf:bb:8c:
                    fa:a9:ad:58:d2:94:43:93:9b:fe:2f:6a:ee:42:09:
                    60:81:96:c9:00:f4:35:46:33:bd:a5:6b:43:4b:e5:
                    5d:83:96:2a:e0:77:49:3b:7b:53:dd:be:c4:e6:22:
                    3f:6c:d3:5f:45:91:fb:6e:88:1c:eb:43:1a:a1:86:
                    3f:a1:ed:85:07:1a:61:a2:8a:a6:dc:13:62:7b:8a:
                    38:17:2e:72:7e:23:10:b0:da:f7:52:5a:27:76:2e:
                    45:56:c8:96:cd:57:e4:b2:1e:df:07:65:69:84:ec:
                    0f:cf:53:89:55:5e:1f:1f:20:87:f8:45:f2:3e:76:
                    43:7f:18:48:80:14:0a:66:18:e9:a2:d5:11:20:7d:
                    ce:ba:4c:34:e2:45:a3:70:1f:98:19:70:fd:3f:36:
                    21:21:e5:9d:5e:d7:fa:a6:b2:9c:16:3a:1a:89:83:
                    3f:e9:c9:31:83:e7:bf:36:a8:1d:5a:0f:ff:31:ef:
                    ba:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F4:51:F5:28:16:CC:0C:7B:EB:CC:C6:00:F6:04:87:B2:5E:D5:52
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JvRR9SgWzAx768zGAPYEh7Je1VI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a020::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:8e:bd:c1:c2:81:65:6d:8a:e3:22:bc:e6:7b:d5:22:e8:04:
         1b:3d:de:7d:31:9e:f4:3e:6c:ee:57:83:99:c4:f4:73:58:59:
         71:65:9f:52:eb:44:91:05:fb:96:bd:86:f9:3f:d4:a4:56:c7:
         d4:d6:5c:1a:b1:a2:4d:48:6c:06:3a:0a:fc:f4:14:ac:20:c1:
         c2:a7:c7:8e:26:c0:33:c0:c8:0e:76:65:34:f6:81:d1:9f:7a:
         dc:e6:0f:8e:87:c7:57:27:29:cd:7a:2b:bc:d8:2c:d6:1a:fd:
         f0:e7:7e:3b:8a:31:60:f6:31:51:30:71:1b:eb:f7:8a:68:c3:
         fe:3e:e4:7b:f1:d6:ba:2d:0d:ad:a0:04:b6:d9:40:4c:34:ae:
         b8:63:a2:bf:13:ad:71:af:7d:8f:91:b7:09:c8:c4:2d:f4:78:
         20:ef:8c:78:0f:ae:4c:96:fd:2f:49:64:49:13:d4:87:d8:f4:
         15:d2:7f:c8:0e:c2:61:05:30:83:d1:50:cc:00:7d:80:3a:2e:
         6f:75:35:d9:c2:b0:43:07:5b:7a:ce:52:ba:45:a5:32:32:90:
         5a:30:fb:ca:b0:1d:b7:93:55:66:0a:a0:40:12:65:58:eb:b4:
         01:f6:84:42:43:86:4e:89:8c:a0:74:d0:86:f1:61:e2:eb:9d:
         bf:92:ed:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----