Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sIb2yixURZb7J7y4NnQbOPqIAhU.roa
File:                     sIb2yixURZb7J7y4NnQbOPqIAhU.roa (raw, json)
Hash identifier:          sY4ueYAD5n2ne3N1AqNaGmEaKSretlVXwnQKT/++5zQ=
Subject key identifier:   B0:86:F6:CA:2C:54:45:96:FB:27:BC:B8:36:74:1B:38:FA:88:02:15
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018256652D2C61DFE1F98A1644DB27DA1A2D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sIb2yixURZb7J7y4NnQbOPqIAhU.roa
Signing time:             Sun 31 Jul 2022 22:34:07 +0000
ROA not before:           Sun 31 Jul 2022 22:34:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206444
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:56:65:2d:2c:61:df:e1:f9:8a:16:44:db:27:da:1a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 31 22:34:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b086f6ca2c544596fb27bcb836741b38fa880215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ab:10:2b:77:e0:bf:81:c7:1a:a8:ac:35:3f:
                    39:67:a8:e8:99:05:8b:59:9d:4b:9e:bd:2c:ce:1e:
                    11:25:d6:5c:ed:d1:81:3d:d5:a7:0d:f5:79:fe:be:
                    1b:14:10:3a:e2:5d:79:85:07:25:6a:61:e9:e0:a8:
                    b0:31:a5:eb:c6:c2:ed:b2:c0:bc:22:a8:ee:d7:1f:
                    7a:0e:d8:c5:fe:ef:fe:51:81:67:68:ad:56:df:d9:
                    a9:f3:36:62:ff:e0:bf:72:e0:6c:d8:b9:29:51:26:
                    61:38:92:49:e7:41:ee:2b:6a:3b:05:19:26:4d:7e:
                    d2:ba:6b:2e:70:e0:20:39:b2:16:3a:5e:25:78:ed:
                    44:0e:1d:6a:a1:72:02:92:51:06:ad:6f:f6:6a:04:
                    fd:8a:77:c2:86:ca:12:5c:56:e9:c6:3e:e2:82:99:
                    3a:d8:1a:5b:14:fa:5d:3b:78:fa:4b:16:22:f2:ed:
                    0a:bf:00:04:74:f4:dd:31:2c:7e:1b:44:b0:b9:c8:
                    31:53:6d:fc:ff:2b:9b:0f:a4:71:9b:ae:20:a2:a5:
                    5a:4d:f9:cc:4a:f4:bd:11:9a:fa:ed:1f:7e:25:df:
                    44:ea:b1:8b:4d:4f:51:ea:7e:db:62:d0:ff:14:e9:
                    07:ee:5b:77:d1:23:34:ca:21:90:06:50:a1:cc:df:
                    77:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:86:F6:CA:2C:54:45:96:FB:27:BC:B8:36:74:1B:38:FA:88:02:15
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sIb2yixURZb7J7y4NnQbOPqIAhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:d9:04:16:0a:f3:4d:81:90:c7:db:ab:4c:d0:e8:c0:25:e1:
         3f:47:df:3d:48:65:fd:31:39:5b:0e:8a:f2:24:31:24:e2:b3:
         d7:d8:ab:59:f2:f9:94:41:82:9f:12:e2:7c:8d:51:f9:ba:fd:
         b5:55:9f:64:60:10:cc:f2:91:a9:ce:82:42:22:8a:8d:dc:4e:
         a3:e2:bc:53:d1:a9:cc:e1:0e:0e:9c:4a:79:6e:75:68:9a:1e:
         09:b4:8b:94:d7:74:cc:7b:ba:6d:d9:ae:60:e8:67:59:5f:a3:
         c3:2f:db:14:00:ff:7d:f0:14:9b:04:f6:e4:66:63:c2:33:cc:
         c2:b9:1d:a3:93:ea:00:ee:c3:89:d7:da:5f:a2:9b:ee:24:fc:
         11:ce:b8:73:3b:b3:8d:4a:ec:69:cd:14:ee:ab:e0:b4:a3:4d:
         ae:d2:e5:07:0c:3e:6f:ac:31:a3:19:e7:1e:3e:83:cb:fe:f8:
         9a:fc:7d:42:e8:76:8b:52:da:c9:9a:8d:37:c5:7a:a1:55:87:
         c5:42:f5:a9:eb:01:da:c0:ae:4b:d4:ad:82:b9:cd:78:c9:6c:
         f6:c5:43:df:7e:af:e8:9d:3e:47:77:61:33:27:f7:51:d6:66:
         ac:96:95:b3:63:f1:78:dc:25:48:09:0b:b0:ab:b9:95:3f:3e:
         66:14:bb:43
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYJWZS0sYd/h+YoWRNsn2hotMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzMxMjIzNDA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDg2ZjZjYTJjNTQ0NTk2ZmIyN2JjYjgzNjc0MWIzOGZhODgwMjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkasQK3fgv4HHGqisNT85Z6jomQWL
WZ1Lnr0szh4RJdZc7dGBPdWnDfV5/r4bFBA64l15hQclamHp4KiwMaXrxsLtssC8
Iqju1x96DtjF/u/+UYFnaK1W39mp8zZi/+C/cuBs2LkpUSZhOJJJ50HuK2o7BRkm
TX7SumsucOAgObIWOl4leO1EDh1qoXICklEGrW/2agT9infChsoSXFbpxj7igpk6
2BpbFPpdO3j6SxYi8u0KvwAEdPTdMSx+G0SwucgxU238/yubD6Rxm64goqVaTfnM
SvS9EZr67R9+Jd9E6rGLTU9R6n7bYtD/FOkH7lt30SM0yiGQBlChzN93+QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLCG9sosVEWW+ye8uDZ0Gzj6iAIVMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvc0liMnlpeFVSWmI3Sjd5NE5uUWJPUHFJQWhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwrAL
MA0GCSqGSIb3DQEBCwUAA4IBAQAh2QQWCvNNgZDH26tM0OjAJeE/R989SGX9MTlb
DoryJDEk4rPX2KtZ8vmUQYKfEuJ8jVH5uv21VZ9kYBDM8pGpzoJCIoqN3E6j4rxT
0anM4Q4OnEp5bnVomh4JtIuU13TMe7pt2a5g6GdZX6PDL9sUAP998BSbBPbkZmPC
M8zCuR2jk+oA7sOJ19pfopvuJPwRzrhzO7ONSuxpzRTuq+C0o02u0uUHDD5vrDGj
GecePoPL/via/H1C6HaLUtrJmo03xXqhVYfFQvWp6wHawK5L1K2Cuc14yWz2xUPf
fq/onT5Hd2EzJ/dR1maslpWzY/F43CVICQuwq7mVPz5mFLtD
-----END CERTIFICATE-----