Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/t4FvpIzlXzcOs3LrkKgGVKxxCr4.roa
File:                     t4FvpIzlXzcOs3LrkKgGVKxxCr4.roa (raw, json)
Hash identifier:          ig1fNDse/Di/TjtQgzNG02ARWnffaSLBW5lXq2Im9r8=
Subject key identifier:   B7:81:6F:A4:8C:E5:5F:37:0E:B3:72:EB:90:A8:06:54:AC:71:0A:BE
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01848ADE540501148AD4DCCCC314B0185233
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/t4FvpIzlXzcOs3LrkKgGVKxxCr4.roa
Signing time:             Fri 18 Nov 2022 13:12:17 +0000
ROA not before:           Fri 18 Nov 2022 13:12:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201251
IP address blocks:        2a06:a005:22b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:8a:de:54:05:01:14:8a:d4:dc:cc:c3:14:b0:18:52:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 18 13:12:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b7816fa48ce55f370eb372eb90a80654ac710abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:0a:84:1b:11:e9:ed:f5:78:36:bc:cc:33:
                    84:0f:3e:38:25:d6:76:f0:19:df:31:a4:c8:ff:90:
                    4a:75:f7:80:bc:be:22:82:5b:eb:bd:2e:f1:d5:75:
                    06:ae:a5:a4:c9:7f:ff:5e:37:dc:bf:86:b9:a2:0b:
                    b4:f1:b9:f6:d9:01:31:36:17:f4:13:c5:77:b3:1d:
                    df:88:dc:a8:15:14:c2:73:4c:47:e4:fb:11:1d:7a:
                    39:37:08:08:81:89:12:1b:45:05:5c:49:c4:ff:e2:
                    09:0f:59:e3:53:6e:c1:22:6f:57:0d:63:a1:81:14:
                    e1:01:25:84:10:37:b8:cd:f5:74:e3:7f:20:eb:65:
                    ce:7f:38:f7:a5:fe:d5:2a:da:8f:cc:79:43:20:f7:
                    f2:02:51:48:2d:82:30:07:c1:a1:0c:bf:3d:17:ad:
                    ca:2a:8b:9a:7d:df:1b:3d:1d:1b:17:30:66:ed:67:
                    a5:24:67:db:9c:01:3a:9c:6f:34:63:3b:9a:3a:08:
                    09:cb:e8:1e:d3:a7:df:60:da:b4:a5:c4:08:6a:83:
                    4b:73:44:9f:0f:54:e4:8a:1a:1f:b2:54:d1:9a:7f:
                    68:ee:bc:2d:23:3a:b2:df:d0:84:c9:47:ca:5a:83:
                    58:2d:ed:fa:2f:10:7c:12:53:e9:66:b3:5b:26:f2:
                    52:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:81:6F:A4:8C:E5:5F:37:0E:B3:72:EB:90:A8:06:54:AC:71:0A:BE
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/t4FvpIzlXzcOs3LrkKgGVKxxCr4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:22b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         53:97:a1:50:96:32:68:8d:ef:c4:7b:4d:dd:d3:70:5a:f1:cc:
         31:32:81:4d:27:4b:88:d0:c1:0b:1b:f4:e5:9e:ee:be:a2:28:
         b3:8a:30:68:5c:97:60:58:5b:91:be:5e:13:18:8c:92:7a:c0:
         52:0f:53:a9:b6:b0:28:6b:71:ba:c3:fc:7f:40:1b:61:18:b6:
         f0:21:80:31:3c:3f:98:f0:28:41:0e:21:59:1e:96:e0:d5:10:
         0c:c5:d5:1a:cd:0a:3a:92:56:c3:86:fb:d9:e5:74:62:f8:99:
         2a:c1:58:e8:6a:63:64:d6:a4:47:60:08:57:01:d3:0f:ea:33:
         05:40:d5:5f:5f:d3:39:bf:ad:e4:7e:e6:7b:e5:20:31:e2:45:
         f6:cb:b6:cf:16:82:e0:a3:13:00:51:cc:0a:95:bb:c7:03:de:
         63:a4:50:4f:73:77:5b:ac:1b:59:48:07:43:ff:ec:4e:be:34:
         e4:ec:6c:b0:f8:52:29:08:38:9a:ee:4f:74:4b:08:08:35:1a:
         c9:13:31:3c:d4:1c:81:c3:fe:db:2d:cd:5c:c5:d4:ae:e2:80:
         e6:87:57:12:36:03:9a:81:44:e3:60:e3:07:ce:fb:29:76:91:
         9c:65:6d:08:56:ab:52:95:9a:8b:a9:8b:30:d3:2b:ce:7c:fe:
         ac:98:14:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----