Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rL1IoksAHVYo3cIZKzgINX0zAPY.roa
File:                     rL1IoksAHVYo3cIZKzgINX0zAPY.roa (raw, json)
Hash identifier:          lkOO2c3wa/Oj5ekdIGB++gP5afr1b1dIM+oIDdlrhvk=
Subject key identifier:   AC:BD:48:A2:4B:00:1D:56:28:DD:C2:19:2B:38:08:35:7D:33:00:F6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184BCF08FBE6D88BAF29A7DDEA1166FCC02
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rL1IoksAHVYo3cIZKzgINX0zAPY.roa
Signing time:             Mon 28 Nov 2022 06:33:12 +0000
ROA not before:           Mon 28 Nov 2022 06:33:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203843
IP address blocks:        2a06:a005:150a::/48 maxlen: 48
                          2a06:a005:108f::/48 maxlen: 48
                          2a0a:6040:a100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:bc:f0:8f:be:6d:88:ba:f2:9a:7d:de:a1:16:6f:cc:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 28 06:33:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=acbd48a24b001d5628ddc2192b3808357d3300f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:4d:be:bb:78:7d:57:78:f6:5d:e9:81:95:
                    e2:b2:a4:12:e2:bc:b5:8e:f1:d6:c2:34:87:b0:95:
                    56:58:fa:a3:5d:58:97:89:bb:65:c0:54:87:6e:25:
                    2b:7f:c8:35:27:88:e0:65:f0:7b:5d:76:d4:55:16:
                    72:2b:49:ea:90:ab:f2:d8:1c:a1:d1:0e:b8:15:88:
                    04:a6:b0:54:7c:18:38:97:5b:d5:45:db:89:51:20:
                    03:1d:a0:81:c2:48:31:7f:60:e6:36:08:c1:be:60:
                    e9:1d:3e:13:e1:6b:1d:7d:eb:3f:b4:24:b3:90:b4:
                    77:de:a1:72:12:3d:06:27:28:74:33:31:9b:f9:2b:
                    28:4c:10:e0:ed:a7:41:16:a1:37:07:67:21:d8:2b:
                    04:f1:83:ad:52:bb:d2:9b:44:bc:28:70:7c:38:35:
                    72:f3:75:89:a0:62:79:56:fb:c9:60:dc:42:7e:84:
                    25:de:9c:0e:56:ce:bd:8f:36:e1:e4:a8:35:d2:7e:
                    b5:19:52:29:63:f3:4b:e7:fe:18:c5:9c:70:7c:09:
                    0f:93:fc:37:0d:28:a4:4e:30:ec:f1:b0:a7:5d:9c:
                    33:08:08:63:10:ee:39:85:a3:9b:9c:7e:d8:20:03:
                    62:63:e4:46:1f:51:6d:9e:99:6d:cc:47:53:b9:00:
                    43:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BD:48:A2:4B:00:1D:56:28:DD:C2:19:2B:38:08:35:7D:33:00:F6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rL1IoksAHVYo3cIZKzgINX0zAPY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:108f::/48
                  2a06:a005:150a::/48
                  2a0a:6040:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:5d:6b:f3:a3:e1:3b:10:d4:76:ad:32:e1:75:19:9c:19:c6:
         9c:ff:8a:d0:45:82:b9:04:92:03:b5:a5:0a:ff:83:df:1c:21:
         c9:ad:4e:a2:90:f0:b1:75:2a:08:81:e5:c5:66:aa:0b:0f:43:
         33:53:15:5f:88:19:6c:71:ac:a2:ec:b9:97:49:bb:89:9c:3e:
         7d:3a:a0:9d:48:e4:bc:c0:93:3d:72:43:80:d5:d7:ab:49:38:
         9a:17:05:93:46:15:5d:88:be:ff:27:0b:3c:b8:04:b1:64:b7:
         c5:29:4f:bc:e5:14:ed:0e:59:4d:74:00:00:cc:e9:cc:da:55:
         a6:e0:f4:a2:66:c2:4e:71:a9:13:5c:49:ff:3f:36:bf:04:bd:
         f9:1c:90:f5:b2:e0:fb:3f:2e:c2:15:57:b0:79:fb:83:be:d2:
         5c:1a:98:6a:7b:78:33:8c:92:f1:24:88:ea:1e:f5:36:ea:b9:
         c9:9b:60:d2:42:c0:9e:7c:2c:75:e9:25:99:dc:a1:c5:31:6a:
         26:5c:21:93:86:b8:6b:1b:ff:94:ea:22:19:1b:bf:6e:d3:7e:
         d8:3a:e9:18:81:69:7f:b3:fb:3c:3f:b8:ab:df:f2:a0:d8:f9:
         00:e5:ea:72:eb:24:32:fd:4a:e8:7e:c6:65:64:58:e5:1f:b1:
         c3:ec:9d:06
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYS88I++bYi68pp93qEWb8wCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTI4MDYzMzEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2JkNDhhMjRiMDAxZDU2MjhkZGMyMTkyYjM4MDgzNTdkMzMwMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXtNvrt4fVd49l3pgZXisqQS4ry1
jvHWwjSHsJVWWPqjXViXibtlwFSHbiUrf8g1J4jgZfB7XXbUVRZyK0nqkKvy2Byh
0Q64FYgEprBUfBg4l1vVRduJUSADHaCBwkgxf2DmNgjBvmDpHT4T4Wsdfes/tCSz
kLR33qFyEj0GJyh0MzGb+SsoTBDg7adBFqE3B2ch2CsE8YOtUrvSm0S8KHB8ODVy
83WJoGJ5VvvJYNxCfoQl3pwOVs69jzbh5Kg10n61GVIpY/NL5/4YxZxwfAkPk/w3
DSikTjDs8bCnXZwzCAhjEO45haObnH7YIANiY+RGH1FtnpltzEdTuQBDmQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKy9SKJLAB1WKN3CGSs4CDV9MwD2MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvckwxSW9rc0FIVllvM2NJWkt6Z0lOWDB6QVBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwcAKgagBRCP
AwcAKgagBRUKAwYAKgpgQKEwDQYJKoZIhvcNAQELBQADggEBAENda/Oj4TsQ1Hat
MuF1GZwZxpz/itBFgrkEkgO1pQr/g98cIcmtTqKQ8LF1KgiB5cVmqgsPQzNTFV+I
GWxxrKLsuZdJu4mcPn06oJ1I5LzAkz1yQ4DV16tJOJoXBZNGFV2Ivv8nCzy4BLFk
t8UpT7zlFO0OWU10AADM6czaVabg9KJmwk5xqRNcSf8/Nr8EvfkckPWy4Ps/LsIV
V7B5+4O+0lwamGp7eDOMkvEkiOoe9TbqucmbYNJCwJ58LHXpJZncocUxaiZcIZOG
uGsb/5TqIhkbv27Tftg66RiBaX+z+zw/uKvf8qDY+QDl6nLrJDL9Suh+xmVkWOUf
scPsnQY=
-----END CERTIFICATE-----