Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/av5SyjSK0KA4DxWSaHgSVNOeTDA.roa
File:                     av5SyjSK0KA4DxWSaHgSVNOeTDA.roa (raw, json)
Hash identifier:          VOTcDvRW97/qXBbxtuFtu7z336ZvVAS+c+RmlWhcIC8=
Subject key identifier:   6A:FE:52:CA:34:8A:D0:A0:38:0F:15:92:68:78:12:54:D3:9E:4C:30
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184BB54933AFE9B2C0DA551244D83168EFB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/av5SyjSK0KA4DxWSaHgSVNOeTDA.roa
Signing time:             Sun 27 Nov 2022 23:03:12 +0000
ROA not before:           Sun 27 Nov 2022 23:03:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202559
IP address blocks:        2a06:a005:1940::/44 maxlen: 48
                          2a05:dfc7:5000::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:bb:54:93:3a:fe:9b:2c:0d:a5:51:24:4d:83:16:8e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 27 23:03:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6afe52ca348ad0a0380f159268781254d39e4c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fa:6b:94:78:12:04:5d:6d:d5:ad:24:d8:fd:
                    05:3d:8b:10:3e:31:c3:d4:4a:fd:59:b6:00:fb:52:
                    71:a9:d1:43:4f:69:f4:da:31:05:25:19:41:4c:ba:
                    81:34:6c:b4:23:ee:29:29:87:3a:38:55:81:7b:cb:
                    3b:00:c9:34:b1:5f:9a:04:db:48:c2:a1:40:76:65:
                    d7:04:f9:e7:50:fd:2b:08:75:08:7f:be:f6:3f:15:
                    70:db:82:f0:51:50:3d:a2:5c:53:48:32:c4:48:50:
                    6a:a3:4a:ec:a9:1a:6a:a0:c7:18:80:09:0d:82:6a:
                    d9:fa:f6:9c:5d:c3:c0:d1:83:dc:bb:b3:a4:c2:d6:
                    07:8e:d7:f6:1b:26:b9:61:2f:c9:a8:4a:4a:06:c9:
                    63:97:c7:05:79:14:58:b3:3b:0a:ed:a9:eb:bb:8d:
                    17:b7:06:88:b7:18:ab:d6:9a:c2:34:8c:2e:da:52:
                    b7:1b:e6:0c:2a:66:e6:25:d2:5f:ef:39:8b:50:b1:
                    99:f5:d0:0f:be:d1:03:a5:5f:77:df:6e:bf:84:16:
                    a3:54:25:99:bd:02:5c:bd:92:5a:81:f4:33:c6:c5:
                    22:29:0b:9f:48:07:b0:ec:1d:bb:7d:da:6c:cf:52:
                    ea:9f:06:76:9b:05:59:b2:84:a1:6e:87:12:42:4a:
                    c1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FE:52:CA:34:8A:D0:A0:38:0F:15:92:68:78:12:54:D3:9E:4C:30
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/av5SyjSK0KA4DxWSaHgSVNOeTDA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:5000::/39
                  2a06:a005:1940::/44

    Signature Algorithm: sha256WithRSAEncryption
         50:f1:31:11:b7:6b:1d:0d:f8:32:62:46:66:ce:b9:1e:b7:41:
         a6:b7:86:a0:db:cf:74:85:a9:fa:ea:3c:17:6b:8a:e9:65:41:
         5e:81:0d:02:d1:20:e9:17:3d:bf:ac:60:94:d1:82:52:f8:c4:
         fc:19:9c:91:28:49:36:7f:f0:ad:7b:e7:bf:17:fd:8d:0e:33:
         eb:da:9b:b8:f4:0e:83:bd:5b:7b:09:38:8e:50:73:75:bb:46:
         18:12:e3:ad:b9:48:11:0d:2e:bf:84:c6:cb:a9:d8:a7:10:76:
         bb:89:16:73:7a:3c:43:64:77:68:e8:c7:9f:6b:51:93:79:b3:
         9d:88:1a:69:11:fa:44:34:cc:c8:84:60:77:ed:d0:3e:6c:14:
         f3:29:73:ef:47:0c:be:c6:12:98:74:54:5a:66:cd:86:d9:0a:
         32:c1:06:ea:ff:9f:90:f5:92:ac:84:af:d5:d0:b2:76:2d:63:
         3b:e0:40:dd:56:10:8c:ef:d5:85:f9:06:4c:a1:01:82:85:1c:
         5c:27:f7:1c:07:ea:c0:01:a6:d8:29:c4:4d:52:d2:77:77:f2:
         88:95:44:26:80:b4:e3:80:ad:f9:5d:b8:7e:5e:73:a7:de:89:
         9f:69:09:27:89:3b:26:93:49:17:57:65:ce:5d:d7:8f:15:5d:
         3c:b0:5c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----