Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/L5vz3Mn9E6ftB1XRcJG0vym-Hb8.roa
File:                     L5vz3Mn9E6ftB1XRcJG0vym-Hb8.roa (raw, json)
Hash identifier:          OCYxPpbWL+91uVDBjPUxdLd1NQ8d3SiQgZyYDMUMdYE=
Subject key identifier:   2F:9B:F3:DC:C9:FD:13:A7:ED:07:55:D1:70:91:B4:BF:29:BE:1D:BF
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01822A21F1DFAA2DC9E8E9199E7579ABEE27
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/L5vz3Mn9E6ftB1XRcJG0vym-Hb8.roa
Signing time:             Sat 23 Jul 2022 08:17:23 +0000
ROA not before:           Sat 23 Jul 2022 08:17:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208679
IP address blocks:        2a06:a005:9a0::/44 maxlen: 48
                          2a06:a005:8d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:2a:21:f1:df:aa:2d:c9:e8:e9:19:9e:75:79:ab:ee:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 23 08:17:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f9bf3dcc9fd13a7ed0755d17091b4bf29be1dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:15:57:8a:79:a3:a9:51:99:77:ac:0d:ed:3e:
                    d6:11:5c:48:50:d9:c1:cb:77:5b:f6:3c:19:cd:d5:
                    3c:e0:5a:23:e6:8b:bf:05:60:fb:ce:0f:ed:aa:0c:
                    9c:26:38:1e:bd:0b:7d:ac:35:ec:32:a7:82:e1:e0:
                    52:87:76:40:dd:34:6a:84:14:27:ee:12:ff:ff:eb:
                    1b:c1:3c:0e:e8:7a:f1:91:a9:48:ac:1e:85:fe:91:
                    7d:78:65:c3:d3:4b:01:9b:48:a2:d3:62:a6:48:84:
                    c3:a3:1d:96:34:d7:da:e4:22:44:1a:be:73:01:b3:
                    22:f7:3e:79:ea:eb:2e:77:9a:5f:e3:34:fd:19:c8:
                    06:2c:9d:5d:3e:2e:b5:6f:0c:41:5c:b9:a3:5e:10:
                    b3:26:b8:30:bd:cf:26:51:cb:f7:99:8f:cf:d5:9d:
                    80:c3:64:cf:12:08:1f:08:c6:a2:e1:5f:8c:5a:34:
                    89:1e:2e:22:1a:88:7d:74:bb:63:30:de:41:aa:13:
                    bf:96:3c:73:33:0f:8a:82:99:70:02:54:32:67:de:
                    e2:97:50:b3:d3:ad:e7:95:30:91:8f:31:ef:15:15:
                    45:69:6a:9f:ca:fc:b7:a4:98:02:4d:39:be:a9:7d:
                    73:36:a8:be:91:ef:11:d6:55:dd:3a:aa:b9:c9:26:
                    1f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9B:F3:DC:C9:FD:13:A7:ED:07:55:D1:70:91:B4:BF:29:BE:1D:BF
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/L5vz3Mn9E6ftB1XRcJG0vym-Hb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:8d0::/44
                  2a06:a005:9a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:f9:dd:70:a5:a5:87:4b:47:83:f9:b6:a5:d4:20:22:5f:1d:
         e9:e3:02:be:11:c5:2e:77:ec:41:76:9c:dd:11:73:9d:e2:aa:
         4c:8c:84:db:4c:a4:1c:89:ef:ba:b6:2b:9f:9c:08:68:fe:8a:
         7b:3f:9c:3a:c0:bb:88:f3:82:47:a5:b5:fa:a2:2c:2c:8d:1b:
         7c:57:63:37:d1:cd:9c:02:72:29:11:4b:02:01:e0:b9:3e:4f:
         fa:a6:cd:83:da:44:c9:9a:38:6e:ac:64:b9:85:db:ef:33:53:
         7a:07:a0:20:98:37:6f:62:c6:81:b3:7c:c3:7e:7f:c0:39:66:
         fa:e2:38:e2:69:23:05:4d:58:d3:49:23:5c:5b:da:d7:25:5b:
         a1:20:99:93:c2:92:92:c7:78:01:e9:ac:1c:b1:ab:74:b6:20:
         94:43:fa:3b:2e:b6:49:8e:a4:7b:b6:ce:e8:a6:d7:19:63:5c:
         2b:1d:b7:24:fd:32:d7:32:05:2d:89:08:4c:4d:03:c1:e3:49:
         38:d0:73:4c:48:fc:a6:0b:36:2e:d6:43:99:6d:34:bc:4c:f5:
         fa:86:93:4f:29:d4:f9:29:b0:94:9d:0c:2b:e7:5f:b9:bf:3b:
         e5:a7:2d:98:32:70:65:55:2c:3a:22:be:a9:9f:96:61:e2:f0:
         cd:07:7f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----