Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/h4m8yiqzzGmpZY9MiHf9oa5BPZI.roa
File:                     h4m8yiqzzGmpZY9MiHf9oa5BPZI.roa (raw, json)
Hash identifier:          amrN2i4RJyI1YT882AOL+sC40G2e14fV/3FoPd6Tq+0=
Subject key identifier:   87:89:BC:CA:2A:B3:CC:69:A9:65:8F:4C:88:77:FD:A1:AE:41:3D:92
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182A5601D14EA748685CDACCB37299A9EE8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/h4m8yiqzzGmpZY9MiHf9oa5BPZI.roa
Signing time:             Tue 16 Aug 2022 06:38:35 +0000
ROA not before:           Tue 16 Aug 2022 06:38:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47158
IP address blocks:        2a06:a005:5aa::/48 maxlen: 48
                          2a06:a005:1730::/44 maxlen: 48
                          2a06:a005:5ab::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:a5:60:1d:14:ea:74:86:85:cd:ac:cb:37:29:9a:9e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 16 06:38:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8789bcca2ab3cc69a9658f4c8877fda1ae413d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:56:3b:88:24:f0:6a:4b:3a:bc:97:c0:d8:
                    8d:56:0c:c8:2a:0d:5d:2f:28:95:41:21:ff:18:69:
                    e2:01:51:dd:12:de:5c:35:78:73:0d:b7:d0:aa:ba:
                    c4:3a:88:e8:65:03:00:9e:2e:95:3b:0f:35:42:3d:
                    dd:fb:39:ed:cb:7e:c9:c1:a5:09:6e:cf:b7:40:93:
                    d3:3a:33:da:c9:fc:e8:27:f9:58:1e:f0:92:5e:bd:
                    cf:61:dd:c0:ac:46:b3:da:39:41:3e:59:58:96:86:
                    be:bd:82:49:ea:57:ed:56:8a:bb:66:33:b4:01:49:
                    fc:25:6f:fe:29:db:3d:6f:e1:ef:cc:96:aa:1b:90:
                    a6:27:60:18:11:84:77:fa:91:96:9d:a0:9c:0d:4a:
                    75:2b:f7:9f:42:81:2c:1b:05:b7:62:39:2c:69:07:
                    1b:a0:da:21:3d:06:0c:56:a1:d1:f4:d0:a0:ed:e2:
                    b4:64:b4:92:86:74:02:03:15:bd:55:48:ef:7c:27:
                    9f:84:6d:d9:4d:15:3c:cf:b9:d1:a4:15:45:b1:88:
                    c8:7b:bc:b0:6b:c9:60:90:3a:b2:a9:f0:33:12:4a:
                    b8:8f:a3:90:f1:11:de:87:7b:dc:b5:60:69:a6:84:
                    6b:f9:93:07:bd:44:eb:89:a9:f5:2a:44:da:71:f8:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:89:BC:CA:2A:B3:CC:69:A9:65:8F:4C:88:77:FD:A1:AE:41:3D:92
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/h4m8yiqzzGmpZY9MiHf9oa5BPZI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5aa::/47
                  2a06:a005:1730::/44

    Signature Algorithm: sha256WithRSAEncryption
         1e:cb:51:92:c9:59:07:0c:3b:14:6e:2d:d0:44:59:42:25:5d:
         1f:1a:a1:9f:6a:e4:36:c3:41:3f:cd:00:07:38:25:8b:15:72:
         2d:7d:82:88:40:c1:20:d8:ef:5d:c6:cf:8b:ed:79:72:42:9e:
         9e:2f:6b:9f:87:c3:b6:d4:bc:f1:2e:70:5b:08:e8:7e:90:c1:
         11:62:1c:c8:c6:ac:6a:47:0d:71:1e:19:44:ab:27:41:54:e8:
         26:b0:60:80:e8:1f:0b:98:67:a2:de:f2:4b:ca:dd:4a:71:62:
         d2:c8:84:45:47:99:a2:ed:51:19:7c:d0:a5:70:3c:05:56:02:
         7f:93:91:c0:91:cf:af:36:51:9a:88:8d:d8:cd:f5:d6:c3:53:
         4b:d2:22:9c:db:61:6a:74:5f:10:06:7d:b2:bd:d5:18:52:48:
         87:98:4a:56:00:79:27:2e:0f:28:4f:4e:9a:bd:e6:a1:e9:20:
         43:da:96:96:b1:ad:eb:d2:16:ca:4a:3a:36:42:7f:bf:da:e6:
         0b:81:27:86:32:ec:bd:75:b1:67:90:c4:a4:d6:08:73:c9:4d:
         27:8a:44:b7:e4:94:ea:74:59:27:a2:ae:31:e8:d8:6a:25:04:
         a5:32:22:ea:f6:7a:40:f6:42:9f:42:07:dc:e9:34:78:eb:cd:
         59:2f:25:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----