Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R_K_rJpFHXrclB7lxVccfTpdYQo.roa
File:                     R_K_rJpFHXrclB7lxVccfTpdYQo.roa (raw, json)
Hash identifier:          12mDYtJ3J0GdF8te/TfnkgraSEVNv/+c8dkgK02NyOY=
Subject key identifier:   47:F2:BF:AC:9A:45:1D:7A:DC:94:1E:E5:C5:57:1C:7D:3A:5D:61:0A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A82FD1B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R_K_rJpFHXrclB7lxVccfTpdYQo.roa
Signing time:             Thu 02 Jun 2022 17:23:20 +0000
ROA not before:           Thu 02 Jun 2022 17:23:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204829
IP address blocks:        2a06:a005:85f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444792091 (0x1a82fd1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun  2 17:23:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=47f2bfac9a451d7adc941ee5c5571c7d3a5d610a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:fa:64:c2:46:c0:7b:58:b5:2d:15:1b:d0:
                    9f:65:a1:ca:b6:99:89:87:4f:a0:8b:0a:2d:0d:86:
                    89:70:37:74:0e:bb:06:21:58:ef:d7:a3:1b:14:4d:
                    9b:a2:80:85:6a:53:b0:0f:41:bd:ec:8a:be:85:6f:
                    f2:e1:d3:fa:9c:69:45:a2:1e:7d:cc:19:62:1e:97:
                    35:af:b1:54:62:6a:f4:50:71:b9:fb:13:5e:11:8a:
                    5a:bf:e7:65:e0:63:a1:62:88:43:45:cd:4f:5a:c5:
                    cb:4e:b0:e1:92:89:16:e5:36:3c:ed:7e:91:96:95:
                    05:73:2e:bb:38:57:ca:0a:a6:68:54:1d:36:b5:b0:
                    de:0d:91:3f:14:df:9b:82:e5:94:d1:61:c2:31:02:
                    fe:af:c1:7e:b1:a1:62:32:aa:3e:2b:e4:a4:09:46:
                    d8:69:f6:bf:5f:3c:a7:0a:2b:28:98:44:5d:ea:4a:
                    c5:9e:05:76:f1:2e:e3:b2:a0:29:aa:7b:3d:58:74:
                    fc:e4:80:2d:73:34:da:a4:01:cc:8a:89:cc:3a:18:
                    cc:59:15:a6:d1:83:d8:59:1c:b4:c1:0f:66:8d:6f:
                    8d:ae:df:75:7b:85:e3:13:2b:a4:6d:2e:3b:80:d0:
                    df:73:06:cd:30:65:15:fe:9a:03:b4:bf:7b:70:39:
                    61:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F2:BF:AC:9A:45:1D:7A:DC:94:1E:E5:C5:57:1C:7D:3A:5D:61:0A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/R_K_rJpFHXrclB7lxVccfTpdYQo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:85f::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:55:ea:d3:0e:fb:b0:db:c4:a7:51:55:52:1f:b8:fd:c2:52:
         7a:31:16:a3:97:e2:45:40:52:c4:f9:d4:99:57:d6:08:64:91:
         2a:fc:06:41:94:f8:23:ed:7b:04:4a:c3:b0:13:8d:16:16:0d:
         75:64:6f:99:b0:1c:a8:af:bb:f0:1b:5a:da:fb:c3:db:7b:bd:
         d2:eb:ac:62:41:f7:aa:ea:68:25:3a:08:48:c2:b9:27:fd:82:
         ed:03:3e:e4:76:e1:31:64:72:8c:ff:f0:82:de:6c:76:c2:19:
         f2:c4:39:b6:30:b2:9d:fe:f0:97:90:37:97:4f:41:1e:5e:32:
         b1:5c:96:88:bf:88:2b:ff:5e:3a:e7:53:9b:3c:c7:e4:cb:13:
         b4:89:51:63:a3:20:8c:db:0d:47:2e:25:58:c3:f8:cc:ae:1d:
         d1:d2:10:7d:0d:a8:97:ee:83:30:9d:e3:85:2e:89:c0:f3:8a:
         07:fa:d2:bf:c6:0e:0c:07:52:7f:67:a5:ba:24:87:a7:87:d9:
         3a:1f:b6:22:9f:bd:66:2b:1c:b0:ca:1e:7e:73:13:e1:dd:ce:
         84:ec:b8:65:37:f3:97:db:7c:0c:81:14:ed:ca:0f:6d:a4:86:
         aa:26:c8:a3:b1:01:67:64:b8:b5:b4:af:98:2d:83:3a:64:1a:
         ba:9a:77:6f
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGoL9GzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYw
MjE3MjMyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDdmMmJmYWM5YTQ1
MWQ3YWRjOTQxZWU1YzU1NzFjN2QzYTVkNjEwYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALbu+mTCRsB7WLUtFRvQn2WhyraZiYdPoIsKLQ2GiXA3dA67
BiFY79ejGxRNm6KAhWpTsA9BveyKvoVv8uHT+pxpRaIefcwZYh6XNa+xVGJq9FBx
ufsTXhGKWr/nZeBjoWKIQ0XNT1rFy06w4ZKJFuU2PO1+kZaVBXMuuzhXygqmaFQd
NrWw3g2RPxTfm4LllNFhwjEC/q/BfrGhYjKqPivkpAlG2Gn2v188pworKJhEXepK
xZ4FdvEu47KgKap7PVh0/OSALXM02qQBzIqJzDoYzFkVptGD2FkctMEPZo1vja7f
dXuF4xMrpG0uO4DQ33MGzTBlFf6aA7S/e3A5YSsCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRH8r+smkUdetyUHuXFVxx9Ol1hCjAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L1JfS19ySnBGSFhyY2xCN2x4VmNjZlRwZFlRby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGoAUIXzANBgkqhkiG9w0BAQsF
AAOCAQEAVFXq0w77sNvEp1FVUh+4/cJSejEWo5fiRUBSxPnUmVfWCGSRKvwGQZT4
I+17BErDsBONFhYNdWRvmbAcqK+78Bta2vvD23u90uusYkH3qupoJToISMK5J/2C
7QM+5HbhMWRyjP/wgt5sdsIZ8sQ5tjCynf7wl5A3l09BHl4ysVyWiL+IK/9eOudT
mzzH5MsTtIlRY6MgjNsNRy4lWMP4zK4d0dIQfQ2ol+6DMJ3jhS6JwPOKB/rSv8YO
DAdSf2eluiSHp4fZOh+2Ip+9ZiscsMoefnMT4d3OhOy4ZTfzl9t8DIEU7coPbaSG
qibIo7EBZ2S4tbSvmC2DOmQaupp3bw==
-----END CERTIFICATE-----