Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/emyldqL_vN3CW2cpVstIiPfTceI.roa
File:                     emyldqL_vN3CW2cpVstIiPfTceI.roa (raw, json)
Hash identifier:          Y2l3H/XX+j6SY+e+6PsNrtnK/d8/dmus2TLui/6nYJA=
Subject key identifier:   7A:6C:A5:76:A2:FF:BC:DD:C2:5B:67:29:56:CB:48:88:F7:D3:71:E2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184D4E32FBE3A2F6D3B201D3DAABC77AA57
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/emyldqL_vN3CW2cpVstIiPfTceI.roa
Signing time:             Fri 02 Dec 2022 22:09:29 +0000
ROA not before:           Fri 02 Dec 2022 22:09:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200954
IP address blocks:        2a0a:6040:e300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d4:e3:2f:be:3a:2f:6d:3b:20:1d:3d:aa:bc:77:aa:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  2 22:09:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a6ca576a2ffbcddc25b672956cb4888f7d371e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:9a:d6:3f:c0:e4:fa:2d:b8:05:95:dc:95:
                    4b:49:75:6d:6c:32:6a:15:6e:7e:be:d7:6c:8b:24:
                    32:73:af:01:16:ac:1c:66:af:32:64:70:d2:f2:b9:
                    75:ea:dc:9d:cb:b1:6b:a7:bf:70:59:1b:da:69:f6:
                    14:d1:c7:d5:d2:7f:2d:e3:c7:e7:c2:67:e6:9d:a5:
                    8d:e3:b9:b4:76:fc:bf:83:55:8e:b3:fc:8a:61:0f:
                    1b:3b:c4:92:6a:ff:9e:82:e9:d2:b4:3f:d7:90:e4:
                    46:b6:4a:60:86:4f:71:fc:ef:a7:3b:74:36:c7:41:
                    58:cf:21:96:0c:91:30:76:13:5f:06:3a:cd:71:17:
                    ee:e2:75:e2:62:cb:31:61:7a:f1:f6:03:4f:f7:ef:
                    1a:cf:f6:2b:95:f4:fb:e6:bc:bf:1c:0c:88:e6:7c:
                    74:17:b1:ce:28:25:1d:04:a0:87:c0:69:e8:fb:56:
                    7c:02:92:04:09:a8:66:73:0a:db:f3:f3:d4:f3:56:
                    be:56:14:0a:c1:74:8e:83:1e:57:2f:21:24:06:84:
                    30:e1:71:62:a8:86:cf:d5:44:54:60:98:71:70:eb:
                    c2:5b:ab:9b:ba:f6:d8:35:10:e3:da:26:c4:ad:a7:
                    57:d3:7f:de:3e:ea:c3:e0:10:e9:fa:c0:20:d2:31:
                    da:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6C:A5:76:A2:FF:BC:DD:C2:5B:67:29:56:CB:48:88:F7:D3:71:E2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/emyldqL_vN3CW2cpVstIiPfTceI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:e300::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:0e:d7:33:ef:65:d6:81:bd:34:80:76:f7:62:f2:41:11:44:
         2f:3e:1b:96:c2:67:e0:5e:aa:0a:bd:ea:34:1b:a0:bb:20:c3:
         a6:c8:1c:9b:4b:1c:bb:bd:43:7e:d5:f1:8a:02:02:40:fd:e6:
         5e:53:f8:a7:7f:1d:30:07:65:31:d2:0a:cf:e3:24:a1:56:0e:
         b6:a3:e2:16:9c:a9:f4:e7:61:f4:6d:15:bb:5d:47:ee:c0:22:
         ec:3f:73:7c:87:56:47:02:a5:1f:2d:6f:e3:0d:e0:50:5f:b2:
         d6:63:05:02:ab:ee:be:e3:6b:93:e1:b9:c4:df:0e:ba:cb:8a:
         a0:64:01:82:ca:f5:8e:ab:7e:03:0d:cf:a4:37:ac:9c:6d:b9:
         00:ab:17:3b:25:db:d6:4d:50:b0:f3:0e:d8:11:92:9b:7a:c4:
         af:3d:60:c5:9e:c8:8e:d0:c6:2d:c3:70:62:4b:8a:60:ec:54:
         0d:b7:bd:8d:6c:8c:3c:7b:c2:59:61:9f:06:6d:9a:45:f8:ad:
         97:46:d6:de:33:3e:f6:73:fc:25:d3:98:78:86:a9:8f:2b:7f:
         c2:57:8d:0d:db:ab:e0:a2:ca:de:a8:f7:e7:02:59:33:f2:ef:
         e5:64:09:3e:6d:dd:7d:79:dc:37:90:b6:32:23:5b:03:56:c5:
         db:65:71:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----