Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kA75LfvFsqukZYtMl4hS3R9DvSY.roa
File:                     kA75LfvFsqukZYtMl4hS3R9DvSY.roa (raw, json)
Hash identifier:          kEgIDbv8botiIygVa1x9UaPsUIciRFNrEwpEHSUQ2zo=
Subject key identifier:   90:0E:F9:2D:FB:C5:B2:AB:A4:65:8B:4C:97:88:52:DD:1F:43:BD:26
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01840CB45F47913F8E4B272BF0C72A162B4F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kA75LfvFsqukZYtMl4hS3R9DvSY.roa
Signing time:             Tue 25 Oct 2022 01:14:18 +0000
ROA not before:           Tue 25 Oct 2022 01:14:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203232
IP address blocks:        2a07:54c4:8::/48 maxlen: 48
                          2a07:54c1:1000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0c:b4:5f:47:91:3f:8e:4b:27:2b:f0:c7:2a:16:2b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 25 01:14:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=900ef92dfbc5b2aba4658b4c978852dd1f43bd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:ce:70:b6:09:50:e3:f3:b5:ee:e6:a0:13:
                    69:bb:f2:15:d4:d5:e0:7e:1f:ab:71:05:39:87:53:
                    58:27:56:41:20:70:74:c0:03:37:df:e3:87:11:5a:
                    4a:60:8b:f0:89:56:2c:b6:ab:3b:0f:be:bf:da:c3:
                    08:c3:30:ec:84:bd:4a:ac:61:d3:d9:b9:fb:f9:98:
                    02:a0:2d:65:7d:0a:64:ce:19:aa:68:2c:2d:92:2f:
                    bd:6e:c9:29:41:ec:77:41:06:a1:5d:d6:93:f7:5b:
                    b0:df:52:1d:9d:aa:c4:01:c1:80:5c:c9:18:b3:6e:
                    6d:19:44:ce:67:ef:cd:fd:6b:fa:ed:54:19:e1:dd:
                    70:32:a2:60:13:d6:35:08:e4:a2:ac:ea:29:38:a6:
                    0c:5f:6c:2b:83:dd:bd:22:ea:13:ba:e4:c4:f1:fb:
                    76:51:ff:53:6e:98:dd:a5:bb:1e:7a:15:88:69:f5:
                    47:cc:48:80:e5:76:d6:a0:52:56:aa:e1:01:5f:a2:
                    82:91:51:1d:e0:a3:a2:f7:00:0d:97:e3:46:de:e3:
                    4c:1f:47:69:ac:28:bc:03:98:bd:42:ba:f3:03:07:
                    7f:b2:18:11:e2:71:3b:df:6b:16:00:f2:2c:09:55:
                    c0:c6:01:23:cd:ae:54:fa:30:ff:7d:aa:8b:cd:b2:
                    5d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0E:F9:2D:FB:C5:B2:AB:A4:65:8B:4C:97:88:52:DD:1F:43:BD:26
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kA75LfvFsqukZYtMl4hS3R9DvSY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:1000::/36
                  2a07:54c4:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:ce:f1:30:75:48:61:85:89:0a:b8:62:88:58:f2:f1:07:43:
         ba:be:ab:98:64:d3:fc:f5:90:0f:c2:21:0d:df:9d:7e:83:39:
         08:56:2a:a2:65:b0:2a:a6:5d:08:41:48:6b:fb:41:bf:3f:25:
         1b:9b:18:6e:21:c2:fb:0e:8f:eb:29:a5:cd:82:45:5e:29:17:
         4a:83:71:c3:19:48:8a:c4:1e:7c:3a:44:cc:52:d6:c4:2f:67:
         ee:84:01:9d:21:78:50:a2:e9:03:1c:ac:1a:4e:c3:28:81:09:
         95:07:8c:18:a1:f0:56:62:e4:60:55:47:c9:ea:e0:8b:b6:55:
         08:91:c0:4d:e6:46:ef:29:2a:cd:a5:f5:ec:d3:6e:11:d1:fe:
         be:df:ca:78:0d:0f:a0:a0:1d:1b:10:8f:9a:46:a9:27:8f:63:
         59:7c:0b:27:40:37:e8:b8:18:cc:ee:75:76:06:a9:b4:aa:b0:
         3d:a3:88:78:90:23:f8:43:dc:8e:70:0d:2c:23:75:f7:1d:dc:
         9d:5b:75:6f:94:4f:8d:c4:d3:30:d4:a8:e8:d1:99:8d:0e:29:
         12:83:6e:cd:96:f4:d4:66:31:f6:9d:6d:e5:85:d8:1e:c1:e9:
         03:62:e7:93:05:62:82:64:e9:d6:eb:09:c6:82:71:53:1b:4f:
         3f:0a:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----