Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rgM8DmAWm8iJixkF3xqN6nvngXs.roa
File:                     rgM8DmAWm8iJixkF3xqN6nvngXs.roa (raw, json)
Hash identifier:          KUL0PsfTvXPwjO9G5tXn04g6WGSntUEGevTkHGlNJyc=
Subject key identifier:   AE:03:3C:0E:60:16:9B:C8:89:8B:19:05:DF:1A:8D:EA:7B:E7:81:7B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184DBB604F710179FBBF7F727F5F2F08771
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rgM8DmAWm8iJixkF3xqN6nvngXs.roa
Signing time:             Sun 04 Dec 2022 05:57:29 +0000
ROA not before:           Sun 04 Dec 2022 05:57:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200949
IP address blocks:        2a0a:6040:d800::/40 maxlen: 48
                          2a06:a005:2490::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:db:b6:04:f7:10:17:9f:bb:f7:f7:27:f5:f2:f0:87:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  4 05:57:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ae033c0e60169bc8898b1905df1a8dea7be7817b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e1:5a:8e:fb:4f:bf:13:87:be:54:3e:f3:a7:
                    c0:fb:bb:92:e4:be:84:55:3d:cf:c0:f3:b3:47:8a:
                    ea:5a:48:b6:f1:79:df:25:e8:14:81:4e:6c:5d:fe:
                    61:c0:67:d3:cb:35:b0:eb:59:0b:f0:5f:5b:2e:ec:
                    31:a6:c4:a9:42:51:2e:3f:ef:f5:2b:d9:7a:3c:81:
                    1b:90:69:35:8a:7d:be:8e:0f:97:64:35:c2:6c:7e:
                    dc:55:b8:29:b3:ec:00:ea:9b:6d:b6:d3:bf:dd:02:
                    db:a5:33:56:92:8f:3d:ce:6c:a9:9b:f3:2f:41:e0:
                    26:3a:9c:04:be:5d:d4:dd:44:57:f1:d2:74:32:ff:
                    3f:f5:fe:f6:a3:e3:db:08:06:5b:ec:eb:41:e3:c0:
                    d3:fe:b0:2c:6b:38:88:2e:2f:cf:08:7e:f2:28:54:
                    b4:3c:de:dc:13:da:c3:b5:a3:e7:18:29:c1:3f:ce:
                    68:66:5b:67:2c:f5:7a:b3:2a:48:ea:57:e6:e3:7f:
                    ea:ac:e0:4e:9a:88:66:6b:77:5f:18:8c:c5:5e:e4:
                    8a:d3:a2:37:6c:02:ae:25:16:d0:d5:b4:ed:e8:e1:
                    ef:3c:ba:6a:fc:ce:64:b8:43:ba:4d:da:73:a2:ea:
                    e2:03:73:e7:23:4f:e7:83:39:6e:c2:8e:d1:de:0d:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:03:3C:0E:60:16:9B:C8:89:8B:19:05:DF:1A:8D:EA:7B:E7:81:7B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rgM8DmAWm8iJixkF3xqN6nvngXs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2490::/44
                  2a0a:6040:d800::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:c6:b2:95:55:2e:fc:ea:2e:7e:39:89:79:85:94:93:45:63:
         41:60:ce:68:ab:44:52:d8:37:da:e0:a5:7a:7b:6d:67:ef:a8:
         68:f5:0e:9e:ef:96:ed:53:c6:27:2b:df:42:c0:ef:16:8a:f5:
         b0:5f:5b:eb:c7:ed:12:c3:d3:c9:b5:af:31:3e:da:44:05:95:
         f7:3d:11:02:a0:1d:a0:25:18:92:6a:a8:32:aa:3d:4d:19:0a:
         84:eb:30:61:91:85:75:22:f0:b9:0b:d4:13:ab:b3:0b:13:59:
         9b:24:aa:2b:4d:f8:3e:a7:00:04:d5:1f:08:c6:55:4b:fe:a8:
         57:00:8a:37:e3:3b:0d:e4:aa:3d:ea:c6:94:b3:05:f1:75:33:
         68:13:49:95:bf:aa:62:4d:1c:e0:b6:f6:62:ea:2b:c9:ae:82:
         1f:e8:de:26:4e:58:59:40:6f:66:2c:22:fb:36:8d:83:7d:f8:
         d9:68:24:24:46:44:89:ad:4f:40:2f:ea:f0:5e:fa:2d:5b:68:
         de:58:bb:cc:70:6a:e6:64:31:fd:d3:7d:27:12:5f:b3:23:8d:
         92:74:56:bd:f5:7e:b5:1e:79:2c:40:88:7d:92:d6:d9:5a:e4:
         f9:ea:79:4c:1b:98:e2:42:ac:2b:62:a4:71:de:8b:51:4f:d4:
         2c:fa:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----