Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mq2sM7wRO0GzP_XGzGYOmkx9Sys.roa
File:                     mq2sM7wRO0GzP_XGzGYOmkx9Sys.roa (raw, json)
Hash identifier:          i2QvfTURPGaXLNdnGYrS6b/skKhL33IXCnP2CIlhr7c=
Subject key identifier:   9A:AD:AC:33:BC:11:3B:41:B3:3F:F5:C6:CC:66:0E:9A:4C:7D:4B:2B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1BACF89D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mq2sM7wRO0GzP_XGzGYOmkx9Sys.roa
Signing time:             Sat 02 Jul 2022 02:17:25 +0000
ROA not before:           Sat 02 Jul 2022 02:17:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210576
IP address blocks:        2a06:a005:5fc::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464320669 (0x1bacf89d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  2 02:17:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9aadac33bc113b41b33ff5c6cc660e9a4c7d4b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:f1:80:14:30:e7:6d:29:73:8b:e7:80:ea:
                    48:f8:bb:94:d8:73:84:65:bb:5d:ce:22:5f:66:4f:
                    48:41:f2:d5:ba:3a:8a:b9:ac:36:54:11:f4:31:d5:
                    01:2a:94:61:c5:02:b7:d9:cb:73:05:5b:c9:06:e9:
                    07:20:36:07:a0:54:32:a9:ee:16:7b:ca:56:a3:ab:
                    68:d9:e0:38:d9:33:48:45:f2:90:b5:33:69:67:0b:
                    31:fb:cb:05:01:3d:13:f5:9c:c9:59:e0:de:62:24:
                    50:4b:12:ae:f1:88:b4:9a:c4:af:87:8d:a1:c9:4e:
                    47:0c:7e:48:1e:39:ee:3e:c3:33:54:1b:37:25:62:
                    65:04:0f:8a:39:f1:60:96:56:40:b6:83:5a:d5:8d:
                    3a:e6:38:79:c7:a3:70:a7:3b:90:75:27:78:c8:ae:
                    a3:29:75:b7:d4:18:4d:94:46:02:71:58:0a:02:2e:
                    86:fb:82:47:2b:60:75:73:1a:89:9f:cf:98:c1:e1:
                    bb:60:f4:38:43:cf:a8:e5:af:32:0a:fa:5b:ac:21:
                    cc:20:f7:03:ba:1e:49:b5:5e:d7:12:5f:dc:01:f9:
                    d9:b3:f8:76:5d:6e:3e:98:27:f1:27:71:05:94:dd:
                    b5:82:73:b9:4d:18:9b:f7:8b:ae:a3:7b:c4:f4:67:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AD:AC:33:BC:11:3B:41:B3:3F:F5:C6:CC:66:0E:9A:4C:7D:4B:2B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mq2sM7wRO0GzP_XGzGYOmkx9Sys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5fc::/46

    Signature Algorithm: sha256WithRSAEncryption
         64:fa:03:99:d1:03:39:b4:43:b2:8a:2c:a3:aa:51:19:07:d3:
         2d:b0:c1:35:34:29:19:3c:56:5f:2f:6a:07:e4:f7:40:9c:fe:
         87:a7:a0:ca:42:a1:ae:93:7b:92:87:0c:8a:77:c4:45:bb:3e:
         38:4b:f3:f2:e0:6b:22:0b:06:5d:ea:df:82:c9:87:b0:62:58:
         6e:c0:91:16:55:70:68:47:f7:e8:99:a0:9f:71:6e:7c:f6:69:
         8b:fc:02:f5:8e:da:10:07:e7:75:b2:9c:db:22:76:82:ad:3b:
         f3:bc:40:12:21:52:bd:46:f9:a4:c3:36:1a:73:ad:e9:35:e1:
         b6:42:b6:9a:cd:ad:13:9e:d0:d8:04:04:1b:42:76:ca:8c:f4:
         47:77:1e:3b:80:d8:26:76:25:42:3f:5b:62:b6:38:5a:d8:4e:
         23:65:e6:eb:74:c4:01:a7:fd:17:80:5b:59:68:1d:14:62:92:
         f2:86:0a:ff:42:a4:ed:19:30:fd:67:6e:ac:69:cc:60:dd:8f:
         5b:90:fc:e0:42:4c:cd:6e:77:89:18:e6:b1:91:63:bc:28:8f:
         11:08:a7:a9:28:d8:83:e6:5b:12:0a:10:0a:02:dc:e7:8c:96:
         a8:be:e6:aa:99:d5:40:15:b1:66:f0:e6:b0:b0:d3:b1:b5:d3:
         8e:21:43:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----