Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OGo4IkFgb0u1JL1mk_tkKTV8X8s.roa
File:                     OGo4IkFgb0u1JL1mk_tkKTV8X8s.roa (raw, json)
Hash identifier:          VZQ8Kq4ku+pGNk3l8BAcpVuobv+n2sKU8sInEMEGJRE=
Subject key identifier:   38:6A:38:22:41:60:6F:4B:B5:24:BD:66:93:FB:64:29:35:7C:5F:CB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182FDCD41D4CA056C36C1E6B708286605F8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OGo4IkFgb0u1JL1mk_tkKTV8X8s.roa
Signing time:             Fri 02 Sep 2022 10:44:23 +0000
ROA not before:           Fri 02 Sep 2022 10:44:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203040
IP address blocks:        2a06:a005:18e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:fd:cd:41:d4:ca:05:6c:36:c1:e6:b7:08:28:66:05:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  2 10:44:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=386a382241606f4bb524bd6693fb6429357c5fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:2d:52:e8:f0:d2:19:77:b5:5a:3b:db:91:
                    c5:84:a0:f0:ab:e1:cc:eb:8c:36:3b:75:c3:bd:c3:
                    ab:a2:a1:d9:b5:09:9c:86:e3:1a:12:44:56:6b:05:
                    88:5f:f8:bb:10:f0:97:1e:8c:f7:b4:93:79:30:83:
                    7e:64:68:42:17:b4:fa:29:c6:f1:aa:a8:1f:b7:ec:
                    90:7f:ab:44:e0:ee:98:d0:54:5d:f4:b3:a6:32:e2:
                    c6:c9:fc:8a:e4:6c:d4:99:4d:14:ae:ac:3f:f6:ae:
                    95:f1:2e:b6:d3:e9:6e:bc:16:53:d0:e2:a8:3f:3b:
                    2b:ec:70:33:f3:39:f8:b6:c9:2a:00:dd:97:88:9b:
                    2e:7d:33:c8:48:6a:52:5b:54:82:25:9d:4c:5e:9b:
                    e6:f1:61:6b:3a:62:f6:27:49:d3:36:d6:69:c6:8e:
                    2d:eb:68:a5:6a:9f:2f:91:ec:f2:1e:fe:a3:22:c8:
                    87:3b:b1:28:57:3e:91:55:32:88:f5:8f:af:fb:ae:
                    78:7e:d0:24:14:45:0b:a6:10:79:43:32:f0:da:3d:
                    57:18:c6:cd:93:10:89:b2:ba:81:b0:f4:12:83:bb:
                    13:94:31:d2:d9:67:a2:f9:68:e3:f0:b0:4a:f4:f2:
                    8a:49:fd:02:cc:57:68:f3:80:3c:61:fe:40:00:1c:
                    3e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6A:38:22:41:60:6F:4B:B5:24:BD:66:93:FB:64:29:35:7C:5F:CB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OGo4IkFgb0u1JL1mk_tkKTV8X8s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:b5:40:d3:f9:2d:15:4e:5d:2c:cc:e7:e6:75:43:7f:44:51:
         e7:7c:45:87:0f:20:c1:c7:47:93:df:4e:e6:e1:ce:24:eb:8a:
         d4:a6:4b:9e:d0:5c:e2:49:26:06:ab:02:2c:9f:7e:38:06:13:
         31:74:7c:85:15:6b:89:81:29:aa:c0:81:d6:b2:e4:82:77:8e:
         6f:98:c6:5f:6b:f9:c4:85:50:84:99:6d:d9:9c:ab:ee:a5:ca:
         6c:97:c0:f8:cf:9a:8a:d2:c7:6b:8e:40:7a:e1:3b:68:72:fb:
         c9:df:22:bd:4e:5b:ee:62:f8:00:38:5c:ab:c1:81:24:c6:dc:
         88:ae:5e:e8:c6:85:95:a4:ea:eb:33:fa:3a:7a:1b:36:fa:6e:
         63:2a:cc:8e:96:e8:35:eb:d2:35:04:0d:d9:f4:f7:36:1e:e8:
         d2:5e:74:0d:a9:20:e0:21:07:f2:4e:76:0a:db:1f:71:5f:99:
         a2:71:0d:2a:62:35:e2:db:79:b6:fc:2d:6c:2e:0c:21:a2:f6:
         5d:1d:ae:3a:9c:19:af:f0:f0:15:3b:7a:fc:34:f8:7e:dc:b1:
         b8:5d:ac:46:8d:13:24:ac:c9:ff:dc:55:15:7a:09:7f:42:08:
         60:3a:2f:3b:01:da:6d:bb:68:58:26:bf:7d:20:1e:40:8c:89:
         d7:66:d6:3b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYL9zUHUygVsNsHmtwgoZgX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTAyMTA0NDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODZhMzgyMjQxNjA2ZjRiYjUyNGJkNjY5M2ZiNjQyOTM1N2M1ZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6MtUujw0hl3tVo725HFhKDwq+HM
64w2O3XDvcOroqHZtQmchuMaEkRWawWIX/i7EPCXHoz3tJN5MIN+ZGhCF7T6Kcbx
qqgft+yQf6tE4O6Y0FRd9LOmMuLGyfyK5GzUmU0Urqw/9q6V8S620+luvBZT0OKo
Pzsr7HAz8zn4tskqAN2XiJsufTPISGpSW1SCJZ1MXpvm8WFrOmL2J0nTNtZpxo4t
62ilap8vkezyHv6jIsiHO7EoVz6RVTKI9Y+v+654ftAkFEULphB5QzLw2j1XGMbN
kxCJsrqBsPQSg7sTlDHS2Wei+Wjj8LBK9PKKSf0CzFdo84A8Yf5AABw+RQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDhqOCJBYG9LtSS9ZpP7ZCk1fF/LMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvT0dvNElrRmdiMHUxSkwxbWtfdGtLVFY4WDhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBRjg
MA0GCSqGSIb3DQEBCwUAA4IBAQBatUDT+S0VTl0szOfmdUN/RFHnfEWHDyDBx0eT
307m4c4k64rUpkue0FziSSYGqwIsn344BhMxdHyFFWuJgSmqwIHWsuSCd45vmMZf
a/nEhVCEmW3ZnKvupcpsl8D4z5qK0sdrjkB64TtocvvJ3yK9TlvuYvgAOFyrwYEk
xtyIrl7oxoWVpOrrM/o6ehs2+m5jKsyOlug169I1BA3Z9Pc2HujSXnQNqSDgIQfy
TnYK2x9xX5micQ0qYjXi23m2/C1sLgwhovZdHa46nBmv8PAVO3r8NPh+3LG4XaxG
jRMkrMn/3FUVegl/QghgOi87Adptu2hYJr99IB5AjInXZtY7
-----END CERTIFICATE-----