Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LP5vYWWZiCsveasagnxImOAnRHY.roa
File:                     LP5vYWWZiCsveasagnxImOAnRHY.roa (raw, json)
Hash identifier:          uYVhAgG2T1dqY1cgBx0ZLw/YH0WRTwAQvTWgfPdvUlE=
Subject key identifier:   2C:FE:6F:61:65:99:88:2B:2F:79:AB:1A:82:7C:48:98:E0:27:44:76
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018382ED3E117933F781A1F6FA4951A5E096
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LP5vYWWZiCsveasagnxImOAnRHY.roa
Signing time:             Wed 28 Sep 2022 07:08:49 +0000
ROA not before:           Wed 28 Sep 2022 07:08:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     45772
IP address blocks:        2a06:a005:1ee0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:82:ed:3e:11:79:33:f7:81:a1:f6:fa:49:51:a5:e0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 28 07:08:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2cfe6f616599882b2f79ab1a827c4898e0274476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e0:e4:65:58:59:6e:42:7e:f0:63:14:2f:b6:
                    45:a8:46:59:6a:cc:fb:b6:10:9e:79:c1:92:42:c8:
                    4f:1d:07:f0:93:18:ec:ff:f6:25:fc:77:a9:d3:7b:
                    c7:e9:91:4c:d9:77:98:0c:4f:cc:eb:58:69:b6:51:
                    8f:d3:4e:d0:83:d6:6e:32:cb:ee:dd:97:e3:5d:8e:
                    4d:17:09:03:3d:1e:6c:12:9d:38:2e:2e:47:da:f0:
                    b4:8e:64:1b:f2:67:4e:0b:99:c0:1d:d3:13:0c:1b:
                    57:1b:e1:61:d8:3b:d3:78:e6:6d:9e:44:1e:d8:37:
                    67:94:6a:22:62:f9:d5:a0:b7:60:eb:ea:cc:24:86:
                    b8:92:f1:01:a1:dc:93:3d:df:a7:4e:1a:35:b0:4e:
                    ce:8b:a1:29:5a:51:77:71:74:04:7e:12:7d:f1:c2:
                    b0:ee:76:6b:b2:d0:cc:9c:a1:2f:88:4d:3f:65:68:
                    01:bd:dd:e3:b2:fa:bc:59:7a:3b:f2:27:98:02:f4:
                    e1:35:18:e7:b0:82:a6:d9:72:b4:2d:7d:ca:c7:08:
                    4b:6f:8c:f7:6f:e2:b9:db:ed:63:b6:bc:2d:85:01:
                    d5:04:57:29:e0:1a:94:5f:1c:62:a2:5d:e7:7b:16:
                    13:d6:5b:c3:e7:a8:bb:d7:77:14:3a:56:c3:7a:22:
                    e0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FE:6F:61:65:99:88:2B:2F:79:AB:1A:82:7C:48:98:E0:27:44:76
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LP5vYWWZiCsveasagnxImOAnRHY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1ee0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:41:f7:ae:13:69:9d:af:df:7a:5a:98:ca:dd:db:c6:80:c9:
         75:1e:07:75:52:be:24:15:1b:c2:00:61:57:31:0e:4d:30:18:
         8b:3f:90:eb:75:fb:ce:aa:57:fa:69:13:2a:24:ed:d6:3e:9e:
         ff:3e:7a:af:c8:26:6e:92:95:97:8d:0b:3e:e1:3e:4d:e4:d6:
         3b:96:b8:9a:42:ae:63:49:f8:45:35:fe:27:9d:18:33:f8:3c:
         ec:8f:93:48:56:23:79:24:95:0b:c5:26:5e:9f:a0:e7:1a:3a:
         b4:97:50:1c:b1:70:8e:35:e6:ea:f2:cc:44:bc:6e:f7:51:b1:
         87:41:b6:a7:0c:6f:bc:a2:b5:6e:0e:2f:fd:b2:7b:31:ac:61:
         99:82:ac:eb:f7:47:17:1b:b7:71:a1:26:fa:76:b7:d9:ac:9c:
         f1:10:e3:f2:0d:51:2d:b5:80:67:94:a0:ae:3b:ef:08:bb:5f:
         26:10:83:e8:1f:71:b6:f8:93:5b:1b:a3:ec:fc:fa:a8:88:42:
         b9:5b:ea:8a:ac:2b:e7:5b:e8:9a:65:a2:28:d9:ed:a2:37:ef:
         40:44:b4:fd:da:d6:d4:9d:3a:59:ef:a0:3c:ba:eb:17:aa:0f:
         f0:fc:06:a2:b8:7e:82:24:b3:71:38:5e:4f:c2:e6:f3:25:20:
         f5:0e:62:48
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYOC7T4ReTP3gaH2+klRpeCWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTI4MDcwODQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2ZlNmY2MTY1OTk4ODJiMmY3OWFiMWE4MjdjNDg5OGUwMjc0NDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiODkZVhZbkJ+8GMUL7ZFqEZZasz7
thCeecGSQshPHQfwkxjs//Yl/Hep03vH6ZFM2XeYDE/M61hptlGP007Qg9ZuMsvu
3ZfjXY5NFwkDPR5sEp04Li5H2vC0jmQb8mdOC5nAHdMTDBtXG+Fh2DvTeOZtnkQe
2DdnlGoiYvnVoLdg6+rMJIa4kvEBodyTPd+nTho1sE7Oi6EpWlF3cXQEfhJ98cKw
7nZrstDMnKEviE0/ZWgBvd3jsvq8WXo78ieYAvThNRjnsIKm2XK0LX3KxwhLb4z3
b+K52+1jtrwthQHVBFcp4BqUXxxiol3nexYT1lvD56i713cUOlbDeiLgrwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCz+b2FlmYgrL3mrGoJ8SJjgJ0R2MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvTFA1dllXV1ppQ3N2ZWFzYWdueEltT0FuUkhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBR7g
MA0GCSqGSIb3DQEBCwUAA4IBAQB9QfeuE2mdr996WpjK3dvGgMl1Hgd1Ur4kFRvC
AGFXMQ5NMBiLP5DrdfvOqlf6aRMqJO3WPp7/PnqvyCZukpWXjQs+4T5N5NY7lria
Qq5jSfhFNf4nnRgz+Dzsj5NIViN5JJULxSZen6DnGjq0l1AcsXCONebq8sxEvG73
UbGHQbanDG+8orVuDi/9snsxrGGZgqzr90cXG7dxoSb6drfZrJzxEOPyDVEttYBn
lKCuO+8Iu18mEIPoH3G2+JNbG6Ps/PqoiEK5W+qKrCvnW+iaZaIo2e2iN+9ARLT9
2tbUnTpZ76A8uusXqg/w/AaiuH6CJLNxOF5PwubzJSD1DmJI
-----END CERTIFICATE-----