Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MYsNkb52Qy2hmn91JUNDknzLnPU.roa
File:                     MYsNkb52Qy2hmn91JUNDknzLnPU.roa (raw, json)
Hash identifier:          fpRwuqmTn9lLQlcTBhN7g3bvRfwXNd9sK8PjLrpdyB0=
Subject key identifier:   31:8B:0D:91:BE:76:43:2D:A1:9A:7F:75:25:43:43:92:7C:CB:9C:F5
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184CFCAC0F09AA5458EABDBDC5D8A528179
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MYsNkb52Qy2hmn91JUNDknzLnPU.roa
Signing time:             Thu 01 Dec 2022 22:24:42 +0000
ROA not before:           Thu 01 Dec 2022 22:24:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200993
IP address blocks:        2a06:a005:1d52::/48 maxlen: 48
                          2a06:a005:855::/48 maxlen: 48
                          2a06:a005:1d53::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:cf:ca:c0:f0:9a:a5:45:8e:ab:db:dc:5d:8a:52:81:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  1 22:24:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=318b0d91be76432da19a7f75254343927ccb9cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:ae:71:5d:36:2b:df:46:ec:a7:83:9f:81:
                    89:07:31:9e:8d:3f:07:e8:9d:24:be:c3:f3:d3:45:
                    73:57:d5:10:0b:56:73:2c:e4:d1:28:73:ec:b1:dd:
                    8a:83:64:dc:e0:1a:6f:11:10:4b:20:f5:08:0c:61:
                    68:cf:5c:10:49:10:3b:0c:9b:35:df:26:e8:39:b8:
                    77:fb:48:50:aa:97:a8:45:36:63:cc:1e:38:41:cb:
                    59:31:a5:39:54:d7:70:31:1e:d9:a9:f7:25:35:2b:
                    08:91:14:31:8c:0a:9c:5f:fc:c4:be:f6:ac:e3:72:
                    3d:4c:c1:12:45:21:65:ac:ee:b0:5d:fe:13:c8:b0:
                    6a:5a:2e:72:e0:8e:2f:72:b5:b9:0e:ec:c9:27:a4:
                    17:ac:7a:a1:50:f5:d5:5f:cb:ec:b7:11:e5:13:f8:
                    29:dd:d9:f5:e4:70:48:a6:98:27:1b:d6:c9:84:e5:
                    b5:ce:9f:62:b5:f6:40:7e:1e:6e:d7:81:3e:28:38:
                    98:5e:7d:bc:d9:2d:4a:b4:07:0a:fa:55:77:77:5d:
                    44:3d:d5:9f:8a:f3:0b:a2:fe:38:76:13:01:b5:1f:
                    bf:cc:e8:84:1a:d3:54:74:64:4c:e0:53:f1:c6:bb:
                    2a:0d:d3:49:15:77:34:7e:78:b5:2d:02:8c:61:23:
                    79:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8B:0D:91:BE:76:43:2D:A1:9A:7F:75:25:43:43:92:7C:CB:9C:F5
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MYsNkb52Qy2hmn91JUNDknzLnPU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:855::/48
                  2a06:a005:1d52::/47

    Signature Algorithm: sha256WithRSAEncryption
         30:92:09:3f:7e:5a:f6:db:1f:a2:d8:fa:26:ce:4d:82:56:91:
         69:21:06:69:a4:fb:cf:7a:64:6c:95:1b:c1:05:fa:53:29:83:
         86:2a:3b:5e:12:2f:f3:0c:61:d3:c5:33:cd:75:cc:e7:1d:8c:
         74:07:b7:63:72:2e:a6:2e:78:b7:4f:9c:f7:bf:81:c2:9c:de:
         c1:00:45:c2:07:de:6f:fe:9e:d1:06:61:d4:66:f6:b5:27:df:
         dd:80:2a:a9:97:ea:46:9c:05:33:d1:54:60:f0:80:03:a7:8c:
         e9:60:36:2f:49:ed:b0:3b:18:32:0f:2b:08:c1:5a:56:40:5d:
         89:8d:d3:88:af:e9:bf:1d:67:2d:5d:4b:c1:9e:35:a0:12:4c:
         cc:c8:7c:30:5d:27:f9:e7:f3:67:d6:eb:7a:1f:af:c8:2e:e4:
         5b:c3:4d:8f:b2:67:99:6f:db:64:ec:ee:f5:67:8f:e2:38:0b:
         3c:6b:47:cc:4a:6a:e6:55:e0:25:f0:f6:fb:c3:aa:ef:8d:a9:
         98:ae:45:65:05:76:89:3f:c2:f8:37:8e:66:96:00:d7:d1:c3:
         cc:c5:f0:d8:4c:a2:25:72:6b:af:30:5c:b8:ed:25:f9:29:49:
         95:65:9f:d8:56:4b:66:a2:f1:4a:51:b6:5f:5e:a3:64:59:51:
         54:81:a7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----