Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/n1uedRET6x792MgnylkUEMSmYGk.roa
File:                     n1uedRET6x792MgnylkUEMSmYGk.roa (raw, json)
Hash identifier:          jsKUVsMSo6HR2EXpDrRtOKfvaZFojJDkaOUgSUu7DWc=
Subject key identifier:   9F:5B:9E:75:11:13:EB:1E:FD:D8:C8:27:CA:59:14:10:C4:A6:60:69
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01824C534D1439AF698E092645AEF0C0FB3E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/n1uedRET6x792MgnylkUEMSmYGk.roa
Signing time:             Fri 29 Jul 2022 23:38:23 +0000
ROA not before:           Fri 29 Jul 2022 23:38:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203888
IP address blocks:        2a06:a005:45a::/48 maxlen: 48
                          2a06:a005:45b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:4c:53:4d:14:39:af:69:8e:09:26:45:ae:f0:c0:fb:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 29 23:38:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9f5b9e751113eb1efdd8c827ca591410c4a66069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a0:8f:88:29:de:18:34:32:2e:46:07:83:ff:
                    fd:4c:93:5d:41:d8:85:73:6f:53:c5:27:2a:2b:ba:
                    5e:e4:e3:df:20:3a:a2:d9:8d:db:ff:f0:30:de:25:
                    c3:08:6b:62:2d:05:f0:ff:23:cb:b8:f0:9c:8f:cc:
                    ba:ec:88:18:5a:94:d5:60:b3:24:97:34:29:e7:4a:
                    60:20:ad:06:a9:e9:cf:89:fa:c6:a6:ac:8b:91:0b:
                    00:d8:9a:bf:03:93:9d:d3:27:4b:02:2b:05:e2:f9:
                    83:c3:09:8e:99:f8:1e:f2:16:36:11:6d:53:b0:6d:
                    6f:a5:46:25:a4:dd:f2:13:00:2b:f9:66:2b:12:81:
                    8f:e8:0f:82:79:10:46:80:6f:f5:6f:a4:70:90:e5:
                    50:c1:f1:20:68:9e:df:31:aa:3b:99:a9:4a:17:c7:
                    26:8d:ef:87:b4:dd:08:37:ad:c8:30:7d:09:0c:13:
                    83:6c:80:72:77:8e:d7:9a:ca:44:ee:fb:c8:8d:9e:
                    b3:04:05:70:65:a1:36:db:84:6f:72:39:4a:cf:71:
                    b1:28:f3:25:ee:26:6f:18:36:1b:95:7c:46:a0:ca:
                    5d:0b:43:cc:b4:f6:06:40:be:39:56:d4:40:a2:7c:
                    a5:0c:57:32:5f:2a:cf:c5:97:20:94:9e:fb:e8:8d:
                    f8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5B:9E:75:11:13:EB:1E:FD:D8:C8:27:CA:59:14:10:C4:A6:60:69
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/n1uedRET6x792MgnylkUEMSmYGk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:45a::/47

    Signature Algorithm: sha256WithRSAEncryption
         7e:f2:e6:9a:97:4c:31:0a:9f:3b:0e:98:4b:78:04:76:9c:0d:
         72:5d:64:39:02:38:68:91:b5:81:72:2e:72:ea:5a:e2:aa:46:
         b1:e2:c7:6e:6c:be:b8:d1:a4:3f:10:b4:09:e3:cf:2e:97:bc:
         68:4a:cf:95:5a:f0:e6:aa:26:c1:a9:3a:c4:92:9b:c5:be:ec:
         f6:98:e7:c8:04:02:c0:2d:24:86:6e:3e:af:a0:36:71:01:91:
         71:b9:71:a5:a1:7f:e6:a4:db:ad:7b:2d:8b:20:39:07:b7:37:
         96:79:4c:fc:ea:bc:7c:e8:31:66:fe:4f:a1:d7:1a:4f:8d:44:
         b3:a3:21:08:13:34:8e:d2:ac:8b:4a:5e:45:21:3a:09:02:ac:
         4c:2f:62:d5:00:a4:47:02:49:41:c0:ed:57:1a:ca:8a:e5:e4:
         ad:fa:22:d0:46:b8:0f:34:88:a6:6b:84:96:0f:db:ec:de:17:
         c0:45:28:4e:6c:94:a6:a7:16:ae:9f:0f:04:2e:de:41:59:aa:
         86:4e:4d:4d:57:75:03:b3:d7:94:a4:0b:8e:39:68:d0:83:28:
         a5:d2:64:84:eb:16:6e:0a:3e:07:4e:07:05:20:76:74:37:a3:
         4d:a9:66:b6:f3:7e:26:2a:93:f4:de:24:8e:6e:a9:05:d7:ac:
         97:7c:53:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----