Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/w2UP7rCQHyR3zJnXxYJ7OBIlHGQ.roa
File:                     w2UP7rCQHyR3zJnXxYJ7OBIlHGQ.roa (raw, json)
Hash identifier:          0p933u0J0fj3QoO896yAc0LfMyxMh8J9DxXI7C0dkNM=
Subject key identifier:   C3:65:0F:EE:B0:90:1F:24:77:CC:99:D7:C5:82:7B:38:12:25:1C:64
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01842F0E83881BD30A07821B2B619F796EAD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/w2UP7rCQHyR3zJnXxYJ7OBIlHGQ.roa
Signing time:             Mon 31 Oct 2022 17:19:51 +0000
ROA not before:           Mon 31 Oct 2022 17:19:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202941
IP address blocks:        2a06:a005:21e0::/44 maxlen: 48
                          2a06:a005:21d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:2f:0e:83:88:1b:d3:0a:07:82:1b:2b:61:9f:79:6e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 31 17:19:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c3650feeb0901f2477cc99d7c5827b3812251c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:35:a3:a8:3a:a0:83:6a:fb:df:cd:a6:0e:
                    22:32:d4:37:65:c8:3f:f3:d5:15:6c:61:19:8c:af:
                    0a:f7:2b:66:cd:1c:e6:b3:5a:96:98:41:df:1a:85:
                    94:a7:38:61:1f:c5:cd:29:80:f7:f9:a9:7e:07:20:
                    e5:e8:51:ab:04:22:5f:8f:2a:dd:b3:25:41:0e:4b:
                    96:89:16:a9:e5:f5:7a:19:90:f3:e3:97:39:2b:da:
                    87:1c:2e:84:e4:d7:ea:dc:ec:51:5c:4e:dd:12:e7:
                    3a:60:dd:5a:45:92:f8:c0:13:ea:0f:c3:bd:a0:4c:
                    44:80:08:6b:46:4a:ea:94:3a:11:07:27:42:86:ad:
                    0c:38:75:18:e6:85:79:3d:71:bf:d4:f5:37:5f:8b:
                    fa:d0:d2:3f:c6:ba:6e:a8:4f:bf:8b:45:1d:bd:02:
                    ba:43:1c:a6:9e:da:50:44:ae:29:76:47:57:a0:57:
                    b1:fa:0f:9a:61:17:37:34:ac:65:09:b2:79:10:ee:
                    9d:05:a1:01:cb:a6:3d:c0:ff:61:9b:b3:c5:6f:a0:
                    9b:61:93:55:f3:db:f9:ad:61:b9:03:86:a6:a9:e8:
                    ca:2b:bf:5a:17:38:79:22:82:61:12:79:44:20:5d:
                    6d:60:ab:a4:31:e9:ab:5d:88:43:8a:d6:30:63:39:
                    cd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:65:0F:EE:B0:90:1F:24:77:CC:99:D7:C5:82:7B:38:12:25:1C:64
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/w2UP7rCQHyR3zJnXxYJ7OBIlHGQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:21d0::-2a06:a005:21ef:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0a:86:ab:c9:2f:3e:48:c1:36:14:47:c5:69:aa:6f:41:3b:a9:
         3f:37:36:46:58:66:11:bb:b7:4a:58:33:31:24:7a:c5:00:d0:
         47:57:37:8c:1a:66:60:d5:d7:59:bd:26:f6:45:7f:d5:29:90:
         24:47:d6:df:d2:21:00:09:52:9c:b3:97:9a:67:19:72:21:08:
         8c:ef:ba:e1:3e:07:ca:bd:be:66:54:a0:92:86:ac:51:1f:65:
         cc:9f:96:fe:32:a3:70:f1:6c:a8:00:85:14:22:30:43:43:3f:
         ae:d6:0b:63:5e:af:e4:c5:fd:c2:3d:1e:03:ed:66:06:b4:0a:
         37:b7:2f:ba:05:9b:91:2f:e6:94:5d:28:ba:22:69:05:bb:46:
         51:ce:82:35:8a:e5:5d:35:8c:63:62:59:a5:02:4d:dc:8a:6f:
         25:92:47:89:0c:6b:f7:2b:ac:dc:c8:9d:32:26:c5:4f:db:6f:
         c3:90:7c:d6:75:6d:61:de:65:13:20:99:18:68:51:ed:68:6c:
         8a:75:86:72:6c:93:78:8f:65:22:35:6d:51:c1:ac:61:9c:fd:
         61:35:50:d3:38:48:b5:aa:03:e0:b8:64:f2:9f:bc:c4:4c:8d:
         cd:84:4f:90:99:a1:88:20:fc:d3:c7:6e:08:c2:3c:fd:7c:44:
         63:51:9c:b1
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYQvDoOIG9MKB4IbK2GfeW6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDMxMTcxOTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzY1MGZlZWIwOTAxZjI0NzdjYzk5ZDdjNTgyN2IzODEyMjUxYzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+E1o6g6oINq+9/Npg4iMtQ3Zcg/
89UVbGEZjK8K9ytmzRzms1qWmEHfGoWUpzhhH8XNKYD3+al+ByDl6FGrBCJfjyrd
syVBDkuWiRap5fV6GZDz45c5K9qHHC6E5Nfq3OxRXE7dEuc6YN1aRZL4wBPqD8O9
oExEgAhrRkrqlDoRBydChq0MOHUY5oV5PXG/1PU3X4v60NI/xrpuqE+/i0UdvQK6
QxymntpQRK4pdkdXoFex+g+aYRc3NKxlCbJ5EO6dBaEBy6Y9wP9hm7PFb6CbYZNV
89v5rWG5A4amqejKK79aFzh5IoJhEnlEIF1tYKukMemrXYhDitYwYznN8QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMNlD+6wkB8kd8yZ18WCezgSJRxkMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvdzJVUDdyQ1FIeVIzekpuWHhZSjdPQklsSEdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqBqAF
IdADBwQqBqAFIeAwDQYJKoZIhvcNAQELBQADggEBAAqGq8kvPkjBNhRHxWmqb0E7
qT83NkZYZhG7t0pYMzEkesUA0EdXN4waZmDV11m9JvZFf9UpkCRH1t/SIQAJUpyz
l5pnGXIhCIzvuuE+B8q9vmZUoJKGrFEfZcyflv4yo3DxbKgAhRQiMENDP67WC2Ne
r+TF/cI9HgPtZga0Cje3L7oFm5Ev5pRdKLoiaQW7RlHOgjWK5V01jGNiWaUCTdyK
byWSR4kMa/crrNzInTImxU/bb8OQfNZ1bWHeZRMgmRhoUe1obIp1hnJsk3iPZSI1
bVHBrGGc/WE1UNM4SLWqA+C4ZPKfvMRMjc2ET5CZoYgg/NPHbgjCPP18RGNRnLE=
-----END CERTIFICATE-----