Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/alPPeBjfqJHb-CdFLjNaosGp3p4.roa
File:                     alPPeBjfqJHb-CdFLjNaosGp3p4.roa (raw, json)
Hash identifier:          DmXao89e+IeXQOmVe/ozxYhw2Y0QhJ0lo3sdIcYB5/w=
Subject key identifier:   6A:53:CF:78:18:DF:A8:91:DB:F8:27:45:2E:33:5A:A2:C1:A9:DE:9E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183681636075833E85BAE0FF1DFD06D4274
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/alPPeBjfqJHb-CdFLjNaosGp3p4.roa
Signing time:             Fri 23 Sep 2022 02:03:49 +0000
ROA not before:           Fri 23 Sep 2022 02:03:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44570
IP address blocks:        2a06:a004::/32 maxlen: 48
                          2a06:a000::/32 maxlen: 48
                          2a06:1280:1000::/36 maxlen: 48
                          2a06:a003::/32 maxlen: 48
                          2a06:a005:1730::/44 maxlen: 48
                          2a06:a005::/32 maxlen: 48
                          2a06:a005:1b40::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a06:a005:5ae::/48 maxlen: 48
                          2a05:dfc7:1300::/40 maxlen: 48
                          2a06:a005:5ab::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:68:16:36:07:58:33:e8:5b:ae:0f:f1:df:d0:6d:42:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 23 02:03:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6a53cf7818dfa891dbf827452e335aa2c1a9de9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:a4:12:f6:c0:d0:c2:f6:32:cd:0f:9c:56:
                    c8:cd:b6:af:b1:3a:42:29:00:ed:02:71:26:9c:95:
                    af:16:59:25:b0:01:62:02:25:91:37:d6:4f:e9:9b:
                    8b:0f:a7:6b:fa:43:d2:1f:37:e7:e1:7e:dd:fa:56:
                    99:68:7d:1f:32:77:33:dc:ed:ca:2f:28:52:40:14:
                    25:44:b8:8e:64:92:24:d8:f6:61:fb:7f:5a:83:8d:
                    9d:b9:79:3b:2e:c8:86:cb:e3:a2:48:47:42:e0:ec:
                    94:32:88:94:d6:73:96:58:70:0d:1d:00:72:e6:d4:
                    9a:f8:83:42:c3:83:9d:09:25:d3:8a:02:39:3b:f5:
                    50:aa:72:7b:7f:ff:0d:34:1d:4b:b2:13:32:90:de:
                    9f:3e:af:7d:c7:08:fd:4f:d0:3e:e8:bf:ae:11:8b:
                    c4:4b:ac:ba:c6:ab:9d:2b:fb:53:52:40:92:59:88:
                    fe:7f:8c:4e:39:cb:aa:55:c7:75:23:1b:39:34:ef:
                    3f:4c:06:1c:2d:a7:ef:1e:5b:92:56:82:62:3e:47:
                    e0:37:c8:5d:cf:10:d2:3a:8c:c7:b1:81:86:df:0c:
                    85:b7:2d:76:d8:a2:71:d7:54:49:a7:85:0d:5d:d7:
                    d7:79:c3:56:d4:36:e3:c8:55:45:95:07:46:5a:16:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:53:CF:78:18:DF:A8:91:DB:F8:27:45:2E:33:5A:A2:C1:A9:DE:9E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/alPPeBjfqJHb-CdFLjNaosGp3p4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1300::/40
                  2a06:1280:1000::/36
                  2a06:a000::/32
                  2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:44:92:91:72:cd:a3:34:b5:c6:43:b9:bd:19:e0:88:69:9c:
         ea:83:4f:c8:f8:f1:84:0b:2b:f2:2d:92:80:f4:4e:3b:0b:e3:
         b3:88:9d:e4:d6:a5:59:55:d7:fe:ff:6f:02:44:59:04:86:87:
         c8:d3:ba:2f:dc:32:85:99:1b:77:88:13:19:9e:a3:fa:71:f4:
         82:50:e7:49:fa:64:3e:9c:5a:7b:40:5f:a2:69:b3:e3:81:30:
         e9:2a:f3:56:4a:17:94:29:bb:83:e3:45:39:09:68:ba:4f:85:
         92:09:0e:ef:1f:68:44:7f:39:15:80:fb:15:e5:f2:0e:97:d0:
         55:fe:96:b9:19:e1:a2:06:9c:65:b6:db:bb:1f:ce:c2:53:a8:
         da:48:30:b9:a0:b3:c8:49:be:0d:72:5e:66:90:e2:6e:ce:c3:
         f8:c6:6a:8c:a8:63:0d:d5:45:18:08:ee:5f:ab:3e:8b:30:4f:
         f0:d0:cc:07:75:72:3f:3a:e5:c0:dd:e4:7c:99:dd:87:7d:a0:
         8a:98:e7:7b:13:ab:89:ec:2a:ce:3b:0d:fd:e3:2a:29:6e:a0:
         d8:f5:a6:bb:5d:b2:19:d8:bf:73:01:2d:d3:b6:ce:60:28:d1:
         ee:bd:d0:87:fb:10:56:67:84:a4:c1:41:16:05:1c:75:ca:73:
         05:e1:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----