Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bOGKbj7kKuyYm3ZOaXcCob0VHFU.roa
File:                     bOGKbj7kKuyYm3ZOaXcCob0VHFU.roa (raw, json)
Hash identifier:          bQTKrpu/AbDbZgBH42dNfFo8EKG0jthwIcIxTqiqFgI=
Subject key identifier:   6C:E1:8A:6E:3E:E4:2A:EC:98:9B:76:4E:69:77:02:A1:BD:15:1C:55
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B2347B8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bOGKbj7kKuyYm3ZOaXcCob0VHFU.roa
Signing time:             Tue 21 Jun 2022 12:54:47 +0000
ROA not before:           Tue 21 Jun 2022 12:54:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15780
IP address blocks:        2a06:a005:df0::/44 maxlen: 48
                          2a06:a005:e10::/44 maxlen: 48
                          2a06:a005:dd0::/44 maxlen: 48
                          2a06:a005:e00::/44 maxlen: 48
                          2a06:a005:de0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455296952 (0x1b2347b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 21 12:54:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ce18a6e3ee42aec989b764e697702a1bd151c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:bc:a4:25:04:92:a4:18:da:5d:74:75:0e:
                    f3:52:6e:a2:1c:96:ab:0d:52:ff:d3:19:cd:f9:fe:
                    0a:5f:5d:76:6f:d4:3e:1c:25:8e:a4:ae:15:1d:f6:
                    57:68:d2:16:06:4e:c9:86:51:b6:85:87:e7:74:93:
                    cc:fe:a8:af:2c:ac:73:81:d2:60:a6:b0:49:50:ee:
                    e1:7e:92:11:18:6e:01:55:38:81:92:b4:fc:49:6c:
                    10:a8:be:71:8f:99:59:fc:35:c0:59:e0:4e:26:25:
                    d4:98:3e:fe:33:f2:44:a6:e8:74:94:ad:51:7d:66:
                    4b:be:a3:7f:c9:73:42:a5:32:4a:97:2b:d9:8b:04:
                    c9:2d:a2:38:b3:14:c3:2f:35:85:eb:7f:8c:d5:68:
                    e5:12:72:ec:62:c8:ed:ba:2e:71:0f:fd:1e:2a:6d:
                    45:de:46:8e:1e:db:fd:41:16:08:87:e7:b9:f2:6f:
                    91:6f:58:4f:ac:9d:ad:3f:c6:80:26:12:74:20:11:
                    e9:8a:d0:87:a3:b6:16:1a:35:0e:b5:f6:cd:ad:19:
                    8f:4f:5b:f4:8f:6c:c5:28:47:8e:20:22:8a:6c:6d:
                    a5:55:70:dd:ad:05:62:04:0c:d5:4f:de:ff:83:79:
                    12:36:5c:8b:dc:00:eb:37:73:bc:13:57:05:40:e2:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E1:8A:6E:3E:E4:2A:EC:98:9B:76:4E:69:77:02:A1:BD:15:1C:55
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bOGKbj7kKuyYm3ZOaXcCob0VHFU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:dd0::-2a06:a005:e1f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3a:70:6c:00:1e:f1:2b:75:da:ad:4e:87:c5:5a:e4:b6:5e:68:
         a5:e3:c5:a0:2d:51:bb:6d:b7:0c:d8:1f:8a:5e:25:8b:47:a7:
         dc:c3:eb:3f:78:c2:c4:ff:b5:a8:c7:88:05:32:94:b5:bc:e3:
         1f:90:a0:47:74:27:77:eb:06:69:14:5b:dd:19:c9:7b:45:2d:
         5d:64:94:29:f7:fc:86:73:0c:81:04:dc:08:60:53:e3:d0:df:
         33:a3:4e:32:1a:01:48:91:09:01:4a:de:16:fc:6d:d8:d5:9c:
         f6:72:b8:3e:8a:c4:71:24:3b:eb:79:5b:64:4e:26:3c:98:26:
         8f:80:8f:b4:90:4b:11:47:75:51:1c:3c:70:f3:71:97:f2:80:
         e0:fe:7f:e6:05:d9:48:1f:13:81:4a:66:ba:8a:e5:d2:7b:3e:
         29:f2:04:93:00:4b:2e:44:a2:92:d6:d1:0b:5e:38:54:35:c6:
         0d:6d:62:69:e5:68:3c:8d:0e:7f:0c:64:37:78:fe:dc:e4:24:
         24:98:fd:b1:5f:e9:2f:4f:91:f8:1c:10:04:d8:f9:5d:07:5f:
         a1:e5:a3:09:29:3a:96:72:f0:aa:fc:df:8d:3e:0a:54:33:1e:
         76:fa:d0:14:e2:ee:cb:44:70:45:2f:7d:7b:65:f9:da:bb:b8:
         d0:14:83:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEGyNHuDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYy
MTEyNTQ0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmNlMThhNmUzZWU0
MmFlYzk4OWI3NjRlNjk3NzAyYTFiZDE1MWM1NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM0KvKQlBJKkGNpddHUO81JuohyWqw1S/9MZzfn+Cl9ddm/U
PhwljqSuFR32V2jSFgZOyYZRtoWH53STzP6oryysc4HSYKawSVDu4X6SERhuAVU4
gZK0/ElsEKi+cY+ZWfw1wFngTiYl1Jg+/jPyRKbodJStUX1mS76jf8lzQqUySpcr
2YsEyS2iOLMUwy81het/jNVo5RJy7GLI7boucQ/9HiptRd5Gjh7b/UEWCIfnufJv
kW9YT6ydrT/GgCYSdCAR6YrQh6O2Fho1DrX2za0Zj09b9I9sxShHjiAiimxtpVVw
3a0FYgQM1U/e/4N5EjZci9wA6zdzvBNXBUDiCVECAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBRs4YpuPuQq7Jibdk5pdwKhvRUcVTAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L2JPR0tiajdrS3V5WW0zWk9hWGNDb2IwVkhGVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAIwFDASAwcEKgagBQ3QAwcFKgagBQ4AMA0G
CSqGSIb3DQEBCwUAA4IBAQA6cGwAHvErddqtTofFWuS2Xmil48WgLVG7bbcM2B+K
XiWLR6fcw+s/eMLE/7Wox4gFMpS1vOMfkKBHdCd36wZpFFvdGcl7RS1dZJQp9/yG
cwyBBNwIYFPj0N8zo04yGgFIkQkBSt4W/G3Y1Zz2crg+isRxJDvreVtkTiY8mCaP
gI+0kEsRR3VRHDxw83GX8oDg/n/mBdlIHxOBSma6iuXSez4p8gSTAEsuRKKS1tEL
XjhUNcYNbWJp5Wg8jQ5/DGQ3eP7c5CQkmP2xX+kvT5H4HBAE2PldB1+h5aMJKTqW
cvCq/N+NPgpUMx52+tAU4u7LRHBFL317Zfnau7jQFIN1
-----END CERTIFICATE-----