Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PhlPvxgl9RsMzlgGJ6hdpVGwe2I.roa
File:                     PhlPvxgl9RsMzlgGJ6hdpVGwe2I.roa (raw, json)
Hash identifier:          f9G8s5NwMT/b5D6+pUXnqnFXgEySc1BorBZ0b5BkiFg=
Subject key identifier:   3E:19:4F:BF:18:25:F5:1B:0C:CE:58:06:27:A8:5D:A5:51:B0:7B:62
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19CF45C0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PhlPvxgl9RsMzlgGJ6hdpVGwe2I.roa
Signing time:             Sun 15 May 2022 01:56:41 +0000
ROA not before:           Sun 15 May 2022 01:56:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134478
IP address blocks:        2a06:a005:580::/44 maxlen: 48
                          2a06:a005:950::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433014208 (0x19cf45c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 15 01:56:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3e194fbf1825f51b0cce580627a85da551b07b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:36:0d:5a:e3:fe:44:1e:88:e4:98:c9:62:
                    f4:f8:e4:32:c3:e2:8a:92:ee:5a:d9:49:e3:79:a8:
                    31:8c:90:8c:39:3c:f7:63:b1:f9:9f:26:c6:37:de:
                    70:b2:59:89:7c:18:9a:68:49:84:d1:e4:74:6e:8e:
                    b0:b5:67:cb:0d:0d:02:d7:7b:dc:11:4a:47:28:7d:
                    75:f2:bc:16:25:ac:6d:95:c4:48:cf:ce:0d:49:c3:
                    ba:71:6b:b7:22:11:a7:a5:f7:35:6f:2f:a0:38:e7:
                    0e:d8:36:cf:91:c6:48:3a:03:dc:ed:34:55:2e:75:
                    61:f9:1a:a1:90:dd:9f:20:2d:19:1f:c3:dc:03:70:
                    8c:1d:43:8d:f4:58:8c:c9:66:95:45:77:f8:71:1b:
                    73:7e:56:9d:bf:58:af:53:df:48:0a:2d:10:b7:a2:
                    07:44:d6:38:44:ce:11:dd:ce:f4:71:ab:90:03:51:
                    7e:8e:cd:a0:02:db:2c:d2:cb:51:0e:79:a0:50:b8:
                    89:29:1a:d3:21:77:df:ae:84:05:c8:c5:b5:21:29:
                    e7:1a:99:51:3c:db:2b:7c:22:4c:f7:ee:32:e3:a8:
                    7d:d2:0b:16:77:3c:d3:50:a1:98:68:64:67:d4:e7:
                    6c:a7:b3:24:fc:23:aa:e3:00:b7:f7:fb:94:e9:33:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:19:4F:BF:18:25:F5:1B:0C:CE:58:06:27:A8:5D:A5:51:B0:7B:62
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PhlPvxgl9RsMzlgGJ6hdpVGwe2I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:580::/44
                  2a06:a005:950::/44

    Signature Algorithm: sha256WithRSAEncryption
         8a:4c:65:26:cb:65:99:ff:2a:48:67:65:f1:9e:73:68:9c:01:
         fb:60:38:1a:43:f7:54:6e:8c:b3:30:e9:73:4f:74:7a:03:9b:
         79:8e:a2:19:22:a2:9e:4e:bf:05:15:35:e4:9d:9c:62:d7:9f:
         e0:d5:31:5b:b9:7f:a3:e2:2a:d8:a4:a2:c8:47:b7:95:a8:f0:
         0f:03:b4:0b:2f:03:e4:de:d6:bf:06:c6:1e:dd:13:88:02:6f:
         fd:02:79:50:6d:75:59:fc:b0:8a:e5:ab:a9:1d:42:2d:15:da:
         1f:f5:5d:1a:20:63:0c:fd:ad:3e:f7:63:76:ba:80:a4:a2:12:
         fd:e8:da:74:c8:10:2a:e3:ac:33:7a:6a:4c:69:41:27:0b:d8:
         d0:f6:6c:a3:5c:00:61:e8:db:96:6d:03:93:f0:f9:b5:5d:d6:
         62:7d:69:d1:6a:6b:5e:5b:a3:da:83:fb:a6:18:21:fb:cc:72:
         b2:59:71:c1:de:99:59:cf:28:52:d3:6d:d7:10:02:12:8a:f5:
         ee:70:89:74:5e:78:32:80:66:88:61:99:39:66:0a:fd:47:11:
         ff:b8:1d:67:49:fe:50:82:3e:07:47:66:8a:2b:88:25:99:eb:
         63:1e:88:76:65:cd:d4:c5:44:b7:a1:e7:ab:91:00:32:3c:39:
         c7:43:10:57
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEGc9FwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUx
NTAxNTY0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2UxOTRmYmYxODI1
ZjUxYjBjY2U1ODA2MjdhODVkYTU1MWIwN2I2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJlFNg1a4/5EHojkmMli9PjkMsPiipLuWtlJ43moMYyQjDk8
92Ox+Z8mxjfecLJZiXwYmmhJhNHkdG6OsLVnyw0NAtd73BFKRyh9dfK8FiWsbZXE
SM/ODUnDunFrtyIRp6X3NW8voDjnDtg2z5HGSDoD3O00VS51YfkaoZDdnyAtGR/D
3ANwjB1DjfRYjMlmlUV3+HEbc35Wnb9Yr1PfSAotELeiB0TWOETOEd3O9HGrkANR
fo7NoALbLNLLUQ55oFC4iSka0yF3366EBcjFtSEp5xqZUTzbK3wiTPfuMuOofdIL
Fnc801ChmGhkZ9TnbKezJPwjquMAt/f7lOkzLcUCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQ+GU+/GCX1GwzOWAYnqF2lUbB7YjAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L1BobFB2eGdsOVJzTXpsZ0dKNmhkcFZHd2UySS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCoGoAUFgAMHBCoGoAUJUDANBgkq
hkiG9w0BAQsFAAOCAQEAikxlJstlmf8qSGdl8Z5zaJwB+2A4GkP3VG6MszDpc090
egObeY6iGSKink6/BRU15J2cYtef4NUxW7l/o+Iq2KSiyEe3lajwDwO0Cy8D5N7W
vwbGHt0TiAJv/QJ5UG11WfywiuWrqR1CLRXaH/VdGiBjDP2tPvdjdrqApKIS/eja
dMgQKuOsM3pqTGlBJwvY0PZso1wAYejblm0Dk/D5tV3WYn1p0WprXluj2oP7phgh
+8xysllxwd6ZWc8oUtNt1xACEor17nCJdF54MoBmiGGZOWYK/UcR/7gdZ0n+UII+
B0dmiiuIJZnrYx6IdmXN1MVEt6Hnq5EAMjw5x0MQVw==
-----END CERTIFICATE-----