Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lNyL8AXOAafX919KP-r40OVxNJU.roa
File:                     lNyL8AXOAafX919KP-r40OVxNJU.roa (raw, json)
Hash identifier:          h/2x3M8+5vALeNEeSU092lUzNZFIPjljNMxDjtAEAZ0=
Subject key identifier:   94:DC:8B:F0:05:CE:01:A7:D7:F7:5F:4A:3F:EA:F8:D0:E5:71:34:95
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01825AE09895C07BFACE6A591143A9995EA3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lNyL8AXOAafX919KP-r40OVxNJU.roa
Signing time:             Mon 01 Aug 2022 19:27:24 +0000
ROA not before:           Mon 01 Aug 2022 19:27:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147020
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:5a:e0:98:95:c0:7b:fa:ce:6a:59:11:43:a9:99:5e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  1 19:27:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=94dc8bf005ce01a7d7f75f4a3feaf8d0e5713495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:9c:ef:0e:55:6b:fb:9b:39:91:91:ff:a9:
                    89:ed:30:60:b5:6f:26:2a:7d:50:e7:39:0b:81:ab:
                    a8:0f:e6:a2:56:60:ab:2e:88:95:9a:57:e7:81:22:
                    da:c9:98:94:48:b9:0c:38:a0:b8:bf:d3:e1:c1:60:
                    b3:e3:c2:53:f3:7f:4f:2b:fd:c8:c0:57:a6:e7:01:
                    0f:b7:ed:07:f3:b6:b2:b7:4e:04:94:7f:fd:39:85:
                    2c:ef:0d:c8:1d:bd:f0:81:1c:41:33:0c:1c:32:cc:
                    9c:ac:58:69:91:8d:8f:35:f0:8b:8e:87:2a:d3:cd:
                    5f:3e:05:f7:46:95:5a:32:9a:ad:59:5d:02:92:1a:
                    80:5f:c5:7a:39:f9:11:83:02:61:79:2e:4e:37:f7:
                    b7:f1:49:f6:bf:57:64:cb:75:26:60:b2:e6:c2:a3:
                    59:30:79:1f:2c:f0:a5:97:87:bb:6b:d3:13:6b:71:
                    41:45:8d:fc:79:c1:e3:f2:e8:08:56:14:4e:85:3b:
                    de:ba:3d:f7:a7:92:88:13:4d:d7:28:56:a7:f6:80:
                    9e:5d:02:e3:72:73:dd:b5:85:ce:52:bf:e0:bf:89:
                    a8:e5:9c:67:28:73:2c:87:56:14:82:a7:cc:a8:a7:
                    c0:fd:d8:0e:16:d4:60:8d:72:23:ce:4c:d3:16:bc:
                    62:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DC:8B:F0:05:CE:01:A7:D7:F7:5F:4A:3F:EA:F8:D0:E5:71:34:95
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lNyL8AXOAafX919KP-r40OVxNJU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:b5:93:7f:d9:94:83:d4:a2:75:62:63:47:68:19:0a:5c:d6:
         57:60:73:10:ef:88:c9:af:dc:3a:ad:fe:f9:8c:85:75:38:4c:
         d9:df:48:48:e2:88:1f:99:9f:db:60:91:e4:fd:21:1f:57:9e:
         42:71:45:9f:20:ed:df:84:1f:f6:e5:31:10:c3:d0:c0:7a:2f:
         fb:f7:c7:77:79:c5:0c:b9:a1:67:d3:27:6c:fb:05:b0:03:ff:
         e7:8b:75:d9:74:b1:a4:04:4c:38:36:2d:01:d0:ce:74:96:5a:
         af:79:9f:93:67:77:c0:88:93:9d:8f:d7:52:56:aa:fc:4c:71:
         ac:f7:ed:1d:51:63:bc:95:f2:ad:50:be:6c:c3:7d:b1:4f:ad:
         98:c1:fe:05:a1:6d:9e:d9:af:36:c6:a9:34:2e:46:00:24:d1:
         93:e5:e6:be:2d:db:cc:4d:12:0e:2e:7f:13:0d:3b:d1:e5:62:
         28:19:21:0f:04:b7:35:40:fb:b4:10:0b:ea:d4:ff:10:77:fb:
         71:c5:f7:3d:a6:59:88:08:3c:87:fb:6a:4a:c3:e3:00:4e:31:
         d2:84:cb:33:c5:ae:5f:a7:13:4d:10:76:c7:1e:96:a9:81:99:
         be:26:4a:e5:cd:3b:89:35:e6:13:cb:82:ce:5e:dd:be:35:b7:
         2b:e3:1b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----