Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/K9qXcwLNEr90Wph0Aw5b_1UGq6s.roa
File:                     K9qXcwLNEr90Wph0Aw5b_1UGq6s.roa (raw, json)
Hash identifier:          C60m399HGvJfVLuU6x5sU/mSbSUcDN8snCQYOSQn2es=
Subject key identifier:   2B:DA:97:73:02:CD:12:BF:74:5A:98:74:03:0E:5B:FF:55:06:AB:AB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184ECCCE81D61A20430CE756B4D1702A30E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/K9qXcwLNEr90Wph0Aw5b_1UGq6s.roa
Signing time:             Wed 07 Dec 2022 13:36:02 +0000
ROA not before:           Wed 07 Dec 2022 13:36:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60391
IP address blocks:        2a06:a005:da0::/44 maxlen: 48
                          2a06:a005:25d0::/44 maxlen: 48
                          2a06:a005:2300::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ec:cc:e8:1d:61:a2:04:30:ce:75:6b:4d:17:02:a3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  7 13:36:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2bda977302cd12bf745a9874030e5bff5506abab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:85:16:14:12:38:07:76:e0:b5:09:e1:0a:d7:
                    df:f5:d8:21:6c:a1:40:52:67:bf:70:74:09:c8:af:
                    3d:ed:83:db:82:b0:9c:1d:8e:37:2f:78:e1:bf:ed:
                    0e:b4:24:54:b6:51:0c:e1:cc:c4:e2:f0:6b:c1:f2:
                    9e:12:14:a5:3f:6e:af:1a:7a:ff:f3:ae:be:dd:41:
                    bf:c9:df:31:7a:bb:d9:d5:f4:42:d5:3e:81:83:12:
                    28:a8:1e:b6:69:09:b8:c8:7d:d0:0c:4f:5d:ba:49:
                    be:e4:36:02:0b:8f:c0:06:70:f5:dc:a8:75:b1:2d:
                    a7:54:c6:dc:50:66:ee:fe:56:c7:c1:81:70:0b:4a:
                    4c:74:ee:4e:96:69:07:aa:d3:18:db:9f:d5:c5:fd:
                    17:e9:dd:bc:ec:ec:8f:a7:d0:c6:c2:b0:e8:d3:d7:
                    41:b5:c3:db:2d:9f:e9:ee:79:8a:e6:80:e3:d6:26:
                    8d:ac:df:2c:5d:05:f2:ce:18:48:b7:51:e9:2e:f9:
                    07:ac:6d:67:2d:b2:f9:88:db:1e:63:ae:5a:e0:d5:
                    6d:ff:73:d8:c8:9d:67:04:6d:e0:e0:30:c2:14:23:
                    ae:a2:d6:08:14:0a:3f:49:be:38:ce:e6:b4:3c:25:
                    53:31:bf:ab:53:42:59:06:9e:08:d2:6f:f2:f3:93:
                    17:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DA:97:73:02:CD:12:BF:74:5A:98:74:03:0E:5B:FF:55:06:AB:AB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/K9qXcwLNEr90Wph0Aw5b_1UGq6s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:da0::/44
                  2a06:a005:2300::/44
                  2a06:a005:25d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:94:0b:c0:94:dc:2a:ab:01:38:d2:4a:da:3d:90:e4:0e:3e:
         2a:84:fc:71:8f:7e:11:5f:47:6c:91:96:6c:be:e0:62:00:48:
         89:da:5a:5d:af:8a:20:58:72:bf:3e:7d:75:63:16:62:85:46:
         fa:50:d5:a6:ee:ff:50:a6:af:9e:a1:73:b0:8a:6c:7d:d2:41:
         58:31:64:a4:62:d7:80:0b:d0:5e:e1:9f:7a:85:0b:c5:f1:bf:
         a2:0b:b2:5d:75:65:a7:2c:1d:84:62:b4:3f:d8:ad:62:92:67:
         13:86:23:f3:e7:81:9e:a2:de:da:04:6a:5c:1a:68:2d:fe:83:
         db:e1:18:96:43:25:e9:5c:12:ef:dd:44:24:d5:09:4f:6c:28:
         ad:5d:88:09:cf:61:db:7f:5c:1a:75:e5:3a:0c:50:e4:f8:6b:
         4b:87:ed:50:93:4a:db:91:64:d3:30:41:e2:db:c0:14:06:f5:
         24:59:8c:3e:df:9d:51:cc:4b:7c:fb:6a:bb:a4:3a:89:93:ca:
         cc:fd:81:dc:b0:56:dd:9d:69:ac:96:13:30:69:d7:f7:d1:75:
         3b:53:94:47:80:32:22:5b:9f:58:0a:92:5f:af:d0:e4:0b:10:
         d2:e1:be:cf:0a:a1:d7:2a:e1:19:74:96:4e:2f:a8:cf:2c:47:
         46:c0:11:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----