Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bQ_IcRG3L3nnMzYHlaLyUor3BrM.roa
File:                     bQ_IcRG3L3nnMzYHlaLyUor3BrM.roa (raw, json)
Hash identifier:          uN+zwBmQuvt6ps6+LwbIAa2nB1skumGaO7LJrbnqEIg=
Subject key identifier:   6D:0F:C8:71:11:B7:2F:79:E7:33:36:07:95:A2:F2:52:8A:F7:06:B3
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01825C39BCCDBD35C94F98F1278C01738A91
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bQ_IcRG3L3nnMzYHlaLyUor3BrM.roa
Signing time:             Tue 02 Aug 2022 01:44:23 +0000
ROA not before:           Tue 02 Aug 2022 01:44:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213383
IP address blocks:        2a06:a005:5a0::/44 maxlen: 48
                          2a06:a005:1600::/44 maxlen: 48
                          2a06:a005:480::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:5c:39:bc:cd:bd:35:c9:4f:98:f1:27:8c:01:73:8a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  2 01:44:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6d0fc87111b72f79e733360795a2f2528af706b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:bf:44:6e:dd:8c:e3:cb:67:54:dc:ba:67:
                    4f:29:b0:c6:61:de:c0:03:ad:51:99:b7:a3:3f:ab:
                    ac:2a:2e:d2:da:a6:e4:90:f1:54:fe:cf:f4:19:ad:
                    98:24:1c:8d:6b:bf:6c:e4:b4:b4:80:8e:0f:86:58:
                    6d:b2:f7:86:9d:56:84:5c:5b:75:37:5c:21:a9:87:
                    a9:64:fd:1a:58:11:aa:71:a2:81:0c:82:4d:4f:55:
                    de:dc:7e:b3:3e:be:3f:77:da:53:52:fe:bc:ef:75:
                    f5:4d:67:bf:6f:1b:46:f7:a2:d0:4a:20:96:70:cd:
                    d0:d6:99:51:66:6b:04:a4:ee:4c:31:55:97:26:3d:
                    21:51:91:1c:77:01:9b:d7:b9:a7:90:2c:7d:5a:5c:
                    3c:35:c6:94:bc:e3:9d:8d:7d:19:78:4f:58:cb:95:
                    00:86:59:c9:b5:3f:e7:78:94:11:0c:54:07:f3:72:
                    0a:90:2e:6a:f7:21:17:3b:85:c2:ca:08:c9:d7:ea:
                    9a:da:e3:bb:23:36:b2:38:55:25:5c:13:fe:3d:76:
                    ee:c0:8f:05:b6:3b:ce:c7:81:31:30:9f:c8:d3:ca:
                    24:e0:37:bb:5d:e2:f0:9e:62:bd:d8:e2:ff:e8:8f:
                    85:93:d3:0b:ee:08:e4:c0:97:02:f9:12:e8:de:e5:
                    d1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0F:C8:71:11:B7:2F:79:E7:33:36:07:95:A2:F2:52:8A:F7:06:B3
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bQ_IcRG3L3nnMzYHlaLyUor3BrM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:480::/44
                  2a06:a005:5a0::/44
                  2a06:a005:1600::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:e8:dd:a9:d4:a6:c6:6e:86:a7:40:70:21:ef:52:f2:7f:2c:
         38:1e:4b:9d:cc:3a:9c:c3:a5:bf:3c:dc:b8:3c:ad:ef:9c:75:
         4e:fb:61:98:2d:b2:41:df:2f:23:5c:46:35:69:28:5f:4e:78:
         be:98:38:e8:59:6b:31:6b:78:66:23:5c:3a:fb:be:e6:67:a8:
         d1:35:00:21:25:6f:81:64:b5:1c:bc:d0:20:d4:15:87:0d:57:
         c3:a8:41:17:b3:cb:27:fa:18:7c:fa:a8:b3:d9:6c:b4:b7:19:
         8d:d5:ac:62:d1:ad:e7:c1:a4:94:63:eb:93:27:a6:6f:c8:c4:
         1b:58:2a:61:f4:79:2a:e8:f0:58:44:05:35:34:7a:80:af:16:
         5e:45:d1:bc:c4:08:54:41:30:fb:25:ff:e2:0b:a0:e7:70:3e:
         a3:69:26:8e:94:65:ba:e9:05:f1:26:06:89:b3:60:fe:45:94:
         8a:00:c7:a8:0f:ac:b5:f5:61:9a:80:08:dd:e8:c0:81:f0:73:
         fa:df:ae:e6:7a:0c:af:c3:fb:c7:3b:f5:fa:da:df:c0:5a:96:
         26:00:c9:a3:6d:b0:1e:3f:12:30:ef:3e:5f:2a:2a:69:3b:c1:
         11:a8:f4:e0:10:be:b4:24:af:f6:e6:cb:66:2e:11:78:c1:af:
         fb:ec:26:f2
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYJcObzNvTXJT5jxJ4wBc4qRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODAyMDE0NDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDBmYzg3MTExYjcyZjc5ZTczMzM2MDc5NWEyZjI1MjhhZjcwNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXC/RG7djOPLZ1TcumdPKbDGYd7A
A61RmbejP6usKi7S2qbkkPFU/s/0Ga2YJByNa79s5LS0gI4PhlhtsveGnVaEXFt1
N1whqYepZP0aWBGqcaKBDIJNT1Xe3H6zPr4/d9pTUv6873X1TWe/bxtG96LQSiCW
cM3Q1plRZmsEpO5MMVWXJj0hUZEcdwGb17mnkCx9Wlw8NcaUvOOdjX0ZeE9Yy5UA
hlnJtT/neJQRDFQH83IKkC5q9yEXO4XCygjJ1+qa2uO7IzayOFUlXBP+PXbuwI8F
tjvOx4ExMJ/I08ok4De7XeLwnmK92OL/6I+Fk9ML7gjkwJcC+RLo3uXRFwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFG0PyHERty955zM2B5Wi8lKK9wazMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvYlFfSWNSRzNMM25uTXpZSGxhTHlVb3IzQnJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKgagBQSA
AwcEKgagBQWgAwcEKgagBRYAMA0GCSqGSIb3DQEBCwUAA4IBAQAt6N2p1KbGboan
QHAh71Lyfyw4HkudzDqcw6W/PNy4PK3vnHVO+2GYLbJB3y8jXEY1aShfTni+mDjo
WWsxa3hmI1w6+77mZ6jRNQAhJW+BZLUcvNAg1BWHDVfDqEEXs8sn+hh8+qiz2Wy0
txmN1axi0a3nwaSUY+uTJ6ZvyMQbWCph9Hkq6PBYRAU1NHqArxZeRdG8xAhUQTD7
Jf/iC6DncD6jaSaOlGW66QXxJgaJs2D+RZSKAMeoD6y19WGagAjd6MCB8HP6367m
egyvw/vHO/X62t/AWpYmAMmjbbAePxIw7z5fKippO8ERqPTgEL60JK/25stmLhF4
wa/77Cby
-----END CERTIFICATE-----