Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/uB6wZm3jclkpR-ZZntlJ4Fw8r0w.roa
File:                     uB6wZm3jclkpR-ZZntlJ4Fw8r0w.roa (raw, json)
Hash identifier:          XjFsAVb03okOqwzSoyiP0CrMxkrkya9FJq5p89cvELk=
Subject key identifier:   B8:1E:B0:66:6D:E3:72:59:29:47:E6:59:9E:D9:49:E0:5C:3C:AF:4C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01822AC97D5C4F339968433479E2204739DD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/uB6wZm3jclkpR-ZZntlJ4Fw8r0w.roa
Signing time:             Sat 23 Jul 2022 11:20:23 +0000
ROA not before:           Sat 23 Jul 2022 11:20:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203979
IP address blocks:        2a06:a005:454::/48 maxlen: 48
                          2a06:a005:455::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:2a:c9:7d:5c:4f:33:99:68:43:34:79:e2:20:47:39:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 23 11:20:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b81eb0666de372592947e6599ed949e05c3caf4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ab:26:04:47:f0:a4:04:d9:fe:52:fa:dc:9c:
                    a0:82:63:d8:83:f8:d1:41:ad:cb:42:d3:e0:1c:81:
                    66:fd:0d:97:59:9b:3a:8b:91:11:3e:f0:d3:76:da:
                    7f:0c:e2:c6:fb:97:8d:1b:54:3d:24:60:7c:1d:81:
                    83:f9:7c:7c:5a:09:02:5c:a4:1f:e7:d9:0e:14:b3:
                    9f:3e:0a:70:02:ba:b8:ef:ef:e2:02:5b:ca:bd:cd:
                    a6:31:72:f7:be:2f:37:6b:2a:10:ed:57:e9:71:bd:
                    9e:28:b5:17:a1:73:68:84:9a:c7:d3:5e:9b:22:8a:
                    87:28:1c:59:7a:87:e6:55:7a:ad:aa:73:94:12:1c:
                    54:9b:56:5a:e3:83:8a:f5:bb:20:de:cb:d3:75:e9:
                    47:59:94:c2:82:71:79:44:b0:65:b5:be:04:cb:0c:
                    73:b9:b3:be:1f:b4:f1:ce:0a:b5:c1:32:a6:9a:68:
                    71:8f:fb:b4:1b:09:53:67:be:7f:9b:05:65:a6:7f:
                    cc:6d:99:ff:02:89:5f:e0:36:de:ef:c2:de:78:c5:
                    b2:73:f6:73:af:e7:c2:91:42:20:82:c5:36:88:9c:
                    ec:9e:8b:91:8f:f8:52:b8:46:c0:da:a9:ec:b3:21:
                    19:d9:c0:3e:d5:2b:18:29:60:ba:58:fc:45:71:d7:
                    05:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1E:B0:66:6D:E3:72:59:29:47:E6:59:9E:D9:49:E0:5C:3C:AF:4C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/uB6wZm3jclkpR-ZZntlJ4Fw8r0w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:454::/47

    Signature Algorithm: sha256WithRSAEncryption
         60:fb:11:de:96:38:ca:39:af:2e:65:54:c0:6a:31:0d:10:d3:
         2b:bf:e7:5a:b3:29:69:c4:2d:f4:93:41:d9:31:68:98:2b:5f:
         65:6b:d2:68:20:6f:77:f4:2f:f1:b5:d9:a7:42:f3:4f:6d:54:
         cf:03:9e:85:86:fb:d0:fa:bb:53:8c:09:c0:dd:30:f3:f5:3d:
         cb:15:21:a4:fa:ae:29:27:da:5e:1f:2f:25:67:82:b6:d3:9c:
         1e:ef:9c:6c:59:da:f7:98:bb:2f:04:13:a7:7b:2d:e6:7c:26:
         51:16:02:22:76:56:e9:04:83:5c:43:40:39:f6:50:64:48:ce:
         de:f3:ac:b8:2b:8a:98:fe:f6:78:df:e0:d2:4f:3c:ad:00:51:
         88:d9:0c:22:7c:9f:7b:30:9e:c8:37:c0:45:4c:81:dc:48:12:
         99:76:ea:4e:4d:cd:93:d6:a5:b4:39:40:8d:a6:57:29:26:5a:
         64:ef:93:a2:77:3c:27:ca:31:a6:8e:1d:88:34:ac:1c:b5:01:
         5c:aa:91:b2:0d:3d:13:b8:09:ef:f5:08:b2:fa:df:ad:7a:b8:
         d5:24:c3:d7:48:fe:4e:da:c0:87:aa:f0:82:b0:9e:1e:20:42:
         3b:e6:ca:0e:33:01:3b:4f:34:14:93:61:8a:46:e1:0e:51:b6:
         1b:92:e8:bb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYIqyX1cTzOZaEM0eeIgRzndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzIzMTEyMDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODFlYjA2NjZkZTM3MjU5Mjk0N2U2NTk5ZWQ5NDllMDVjM2NhZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6smBEfwpATZ/lL63JyggmPYg/jR
Qa3LQtPgHIFm/Q2XWZs6i5ERPvDTdtp/DOLG+5eNG1Q9JGB8HYGD+Xx8WgkCXKQf
59kOFLOfPgpwArq47+/iAlvKvc2mMXL3vi83ayoQ7Vfpcb2eKLUXoXNohJrH016b
IoqHKBxZeofmVXqtqnOUEhxUm1Za44OK9bsg3svTdelHWZTCgnF5RLBltb4Eywxz
ubO+H7Txzgq1wTKmmmhxj/u0GwlTZ75/mwVlpn/MbZn/Aolf4Dbe78LeeMWyc/Zz
r+fCkUIggsU2iJzsnouRj/hSuEbA2qnssyEZ2cA+1SsYKWC6WPxFcdcF/QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLgesGZt43JZKUfmWZ7ZSeBcPK9MMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvdUI2d1ptM2pjbGtwUi1aWm50bEo0Rnc4cjB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgagBQRU
MA0GCSqGSIb3DQEBCwUAA4IBAQBg+xHeljjKOa8uZVTAajENENMrv+dasylpxC30
k0HZMWiYK19la9JoIG939C/xtdmnQvNPbVTPA56FhvvQ+rtTjAnA3TDz9T3LFSGk
+q4pJ9peHy8lZ4K205we75xsWdr3mLsvBBOney3mfCZRFgIidlbpBINcQ0A59lBk
SM7e86y4K4qY/vZ43+DSTzytAFGI2QwifJ97MJ7IN8BFTIHcSBKZdupOTc2T1qW0
OUCNplcpJlpk75OidzwnyjGmjh2INKwctQFcqpGyDT0TuAnv9Qiy+t+terjVJMPX
SP5O2sCHqvCCsJ4eIEI75soOMwE7TzQUk2GKRuEOUbYbkui7
-----END CERTIFICATE-----