Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qi36VWDZ0GOY1ZesbLZHNRqOjEw.roa
File:                     qi36VWDZ0GOY1ZesbLZHNRqOjEw.roa (raw, json)
Hash identifier:          DfzWCqUp0uPBfD+m9tI/x9WVG6knHMWx8UcYfHdjxEo=
Subject key identifier:   AA:2D:FA:55:60:D9:D0:63:98:D5:97:AC:6C:B6:47:35:1A:8E:8C:4C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       16736779
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qi36VWDZ0GOY1ZesbLZHNRqOjEw.roa
Signing time:             Mon 14 Feb 2022 18:53:01 +0000
ROA not before:           Mon 14 Feb 2022 18:53:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147028
IP address blocks:        2a06:a005:4::/48 maxlen: 48
                          2a06:a005:a::/47 maxlen: 48
                          2a06:a005:5::/48 maxlen: 48
                          2a06:a005:6::/48 maxlen: 48
                          2a06:a005:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376661881 (0x16736779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Feb 14 18:53:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa2dfa5560d9d06398d597ac6cb647351a8e8c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:2e:f2:00:a4:2c:3c:0b:63:8d:c1:e4:fa:
                    e6:71:58:f1:ae:97:b5:c9:cd:a4:14:7d:e5:18:b6:
                    aa:db:2d:4c:97:97:91:1f:6b:c8:ed:13:bb:6b:5b:
                    1b:ed:99:fc:61:61:dd:de:4f:58:35:ca:20:cf:0b:
                    9d:4b:f1:72:e7:ad:6a:55:a9:2c:c6:3e:b0:bc:ab:
                    97:1e:3b:53:0f:ba:f2:cf:1c:77:f8:91:6f:26:ba:
                    0a:0d:07:7d:42:b3:8a:b6:df:80:df:ee:62:2b:3b:
                    fe:d1:a1:1d:b4:ca:3c:88:a7:5a:11:2f:b7:c0:d3:
                    8f:5d:31:1a:9d:b8:fc:b9:d8:47:2a:7b:73:74:33:
                    2b:47:c2:b8:38:67:df:af:63:58:ec:dc:54:de:fa:
                    50:59:aa:9a:2a:c3:49:5a:6b:55:8e:92:5d:fa:ce:
                    69:0b:83:f9:4e:e1:ab:8e:ac:0e:1e:98:dc:35:23:
                    72:4f:3b:e1:32:de:61:0c:ac:6b:3b:8d:68:a0:90:
                    d5:82:f4:81:96:9b:25:10:a6:5b:13:77:9c:10:56:
                    a0:f1:86:74:18:59:b7:94:86:a6:d6:82:ae:06:09:
                    b9:98:81:26:18:98:cf:aa:ce:89:01:67:ef:5f:3d:
                    b1:ef:b2:83:d1:23:bf:97:6a:3f:3d:f2:78:f0:cb:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2D:FA:55:60:D9:D0:63:98:D5:97:AC:6C:B6:47:35:1A:8E:8C:4C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qi36VWDZ0GOY1ZesbLZHNRqOjEw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:3::-2a06:a005:6:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:a::/47

    Signature Algorithm: sha256WithRSAEncryption
         51:09:a4:6f:c9:9c:ec:98:95:6e:22:60:e1:f8:b4:b2:90:da:
         bb:13:9a:f9:9a:53:6f:c1:ce:6a:66:f3:e3:cb:a3:47:a0:4f:
         c2:a2:7d:57:e7:cf:25:bb:2e:1d:e8:8f:04:ec:fc:4a:7d:af:
         62:1c:3d:49:dc:cd:09:94:3b:88:41:43:26:3d:55:fb:0c:fd:
         66:39:ab:27:2e:d3:fe:ee:91:33:91:42:ea:b9:8f:1b:47:09:
         9a:81:c5:4f:80:82:ac:41:ee:0c:0a:1a:d2:22:f4:33:09:22:
         1c:16:83:3b:db:5f:c6:7e:b7:07:e1:66:fc:3e:83:c2:24:06:
         61:4a:17:79:3b:d4:f9:64:e7:4f:75:d2:96:67:f8:50:a3:28:
         24:0c:ad:37:ac:9f:1c:e7:96:15:f1:30:1f:9c:d4:3e:02:ee:
         b1:38:32:57:8a:2c:39:90:e8:17:0f:87:f8:1f:0a:f9:45:16:
         dc:b4:be:69:9b:2d:75:f2:fe:ae:87:74:05:fa:e5:92:cc:d5:
         d2:62:89:c9:7f:f3:e3:06:6b:c4:64:5a:32:da:e2:51:69:c0:
         17:19:b0:54:08:04:5e:98:46:e6:d2:4d:d2:e4:2f:4b:8c:8d:
         c3:0e:fd:7a:34:a1:b4:47:e5:ed:b8:5c:02:4a:b5:9e:cc:67:
         8d:c9:05:1f
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEFnNneTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDIx
NDE4NTMwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWEyZGZhNTU2MGQ5
ZDA2Mzk4ZDU5N2FjNmNiNjQ3MzUxYThlOGM0YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKmaLvIApCw8C2ONweT65nFY8a6XtcnNpBR95Ri2qtstTJeX
kR9ryO0Tu2tbG+2Z/GFh3d5PWDXKIM8LnUvxcuetalWpLMY+sLyrlx47Uw+68s8c
d/iRbya6Cg0HfUKzirbfgN/uYis7/tGhHbTKPIinWhEvt8DTj10xGp24/LnYRyp7
c3QzK0fCuDhn369jWOzcVN76UFmqmirDSVprVY6SXfrOaQuD+U7hq46sDh6Y3DUj
ck874TLeYQysazuNaKCQ1YL0gZabJRCmWxN3nBBWoPGGdBhZt5SGptaCrgYJuZiB
JhiYz6rOiQFn7189se+yg9Ejv5dqPz3yePDLbCECAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBSqLfpVYNnQY5jVl6xstkc1Go6MTDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L3FpMzZWV0RaMEdPWTFaZXNiTFpITlJxT2pFdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwIwQCAAIwHTASAwcAKgagBQADAwcAKgagBQAGAwcB
KgagBQAKMA0GCSqGSIb3DQEBCwUAA4IBAQBRCaRvyZzsmJVuImDh+LSykNq7E5r5
mlNvwc5qZvPjy6NHoE/Con1X588luy4d6I8E7PxKfa9iHD1J3M0JlDuIQUMmPVX7
DP1mOasnLtP+7pEzkULquY8bRwmagcVPgIKsQe4MChrSIvQzCSIcFoM721/GfrcH
4Wb8PoPCJAZhShd5O9T5ZOdPddKWZ/hQoygkDK03rJ8c55YV8TAfnNQ+Au6xODJX
iiw5kOgXD4f4Hwr5RRbctL5pmy118v6uh3QF+uWSzNXSYonJf/PjBmvEZFoy2uJR
acAXGbBUCARemEbm0k3S5C9LjI3DDv16NKG0R+XtuFwCSrWezGeNyQUf
-----END CERTIFICATE-----