Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LR7s7ozFpg4x-PEiWp0WdCnufIs.roa
File:                     LR7s7ozFpg4x-PEiWp0WdCnufIs.roa (raw, json)
Hash identifier:          +NYzhU/3ay9mpimriR3YTBfrWavQMfkjn9ipeHHMvjs=
Subject key identifier:   2D:1E:EC:EE:8C:C5:A6:0E:31:F8:F1:22:5A:9D:16:74:29:EE:7C:8B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A560EB7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LR7s7ozFpg4x-PEiWp0WdCnufIs.roa
Signing time:             Tue 31 May 2022 02:11:14 +0000
ROA not before:           Tue 31 May 2022 02:11:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     394414
IP address blocks:        2a06:a005:ae0::/44 maxlen: 48
                          2a06:a005:2d8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441847479 (0x1a560eb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 31 02:11:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d1eecee8cc5a60e31f8f1225a9d167429ee7c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:d1:45:03:2d:d2:06:94:b7:f7:8c:f2:58:
                    fc:ec:2e:94:b6:50:0f:16:3f:64:79:fe:c5:1a:0b:
                    2e:ad:e5:45:c3:5e:36:e6:7e:37:f5:c1:5d:9e:9f:
                    7c:69:bc:e0:7e:1e:f8:f0:e4:c6:ac:47:09:c4:8e:
                    3e:a3:6f:98:4c:17:f7:2b:1f:c7:c0:10:07:ec:ef:
                    64:14:67:c7:02:08:c7:c8:27:a0:48:8e:87:14:31:
                    87:e7:82:fb:b3:f5:c5:0f:87:00:cd:8b:e9:16:c6:
                    64:d8:26:4e:75:91:ce:af:25:43:5d:c1:fa:96:d6:
                    fe:6e:df:a6:01:29:7b:9c:97:6b:58:85:5a:6e:d5:
                    d7:4f:8d:40:4f:c8:7c:a3:d8:f9:7c:d9:5d:38:94:
                    5d:bf:fe:0f:b3:80:87:a4:2a:22:df:49:f8:41:ce:
                    3a:6b:e3:44:b0:b9:c3:af:9b:95:1e:9a:f0:e1:eb:
                    9e:ea:e2:5f:69:03:85:42:fd:3b:85:2d:2a:cb:0d:
                    8f:9f:1c:2c:66:ea:b5:91:fa:57:64:7c:0d:d9:6b:
                    19:00:26:df:d6:ea:1c:82:a8:76:24:97:36:59:0e:
                    31:12:b5:f2:cc:29:e5:eb:46:7f:58:a9:d0:75:70:
                    fc:69:00:7d:35:7e:f9:bb:b9:b2:1b:7d:55:c1:aa:
                    1a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1E:EC:EE:8C:C5:A6:0E:31:F8:F1:22:5A:9D:16:74:29:EE:7C:8B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LR7s7ozFpg4x-PEiWp0WdCnufIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2d8::/48
                  2a06:a005:ae0::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:09:b3:81:d7:97:6f:da:19:72:5f:cd:30:eb:e6:eb:f4:e3:
         e6:5a:cd:35:80:e9:89:9d:49:c7:60:70:ac:ea:d8:c1:58:9a:
         c2:87:62:cc:9d:3a:95:03:d1:d5:f1:bb:e9:c4:2b:6c:56:ce:
         02:bc:dd:13:b7:e6:c7:93:7d:d9:04:79:b1:7b:c3:d5:7d:b6:
         43:73:55:48:5d:53:16:df:a3:4b:28:86:d7:95:bf:36:a8:2b:
         97:40:06:3f:ae:15:f1:b7:38:ff:9d:c0:79:6d:d2:22:8b:ff:
         4f:6c:8b:23:61:ad:a8:f3:a1:20:fc:b3:c0:ef:a6:69:05:a4:
         cc:00:be:7a:51:80:28:b8:d2:8f:25:92:b9:e4:e2:cf:12:c0:
         d9:b3:da:5b:86:bb:11:63:19:8e:20:ca:f3:6a:1c:a6:a5:f8:
         79:ed:be:30:ae:62:6b:cd:e4:9d:f7:05:3b:1a:50:d8:4b:bd:
         4a:3a:34:83:3a:eb:49:16:a7:c4:be:0f:7c:cf:2f:3d:b2:c0:
         36:78:dd:1d:d2:9f:a9:2d:b4:9d:85:6b:21:7b:70:01:d3:50:
         a6:e0:7f:94:c8:9c:b5:46:d6:81:72:b4:47:50:21:19:32:b9:
         30:08:46:fe:78:25:6d:7b:75:63:9b:9a:96:89:ad:46:48:ec:
         55:ee:2a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----