Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xyaALUaFbJAPAWnA0ETpQmUFzcI.roa
File:                     xyaALUaFbJAPAWnA0ETpQmUFzcI.roa (raw, json)
Hash identifier:          cCiDfhIsI+CWyspH0/cq+Ozd9QajezMZ+/sxbDgStn8=
Subject key identifier:   C7:26:80:2D:46:85:6C:90:0F:01:69:C0:D0:44:E9:42:65:05:CD:C2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184D4D74CA7A02D48A24F0423D6BEE0C46B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xyaALUaFbJAPAWnA0ETpQmUFzcI.roa
Signing time:             Fri 02 Dec 2022 21:56:30 +0000
ROA not before:           Fri 02 Dec 2022 21:56:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205183
IP address blocks:        2a0a:6040:c000::/40 maxlen: 48
                          2a06:1287:1000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d4:d7:4c:a7:a0:2d:48:a2:4f:04:23:d6:be:e0:c4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  2 21:56:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c726802d46856c900f0169c0d044e9426505cdc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e6:97:75:18:07:36:e0:94:c3:1a:f0:c9:b0:
                    cc:ed:2d:27:af:81:4a:2d:db:d6:e1:9c:a2:bf:3f:
                    ac:07:14:ac:7c:ab:da:53:0e:e0:c8:4a:85:60:76:
                    e0:35:65:24:31:b1:fe:65:22:2e:80:48:72:c9:a2:
                    a2:da:90:7a:05:0b:42:e3:d1:01:15:1a:b8:6f:84:
                    f9:8b:9b:24:7d:ae:f8:73:bb:23:91:2c:6c:2c:10:
                    8e:9a:f0:07:c0:bd:58:0d:64:63:6d:0c:6b:38:1a:
                    d5:34:85:bd:1f:9a:cb:8b:ae:39:13:b4:c0:0d:05:
                    fd:6f:a6:fd:07:db:62:ef:b6:39:43:a7:47:f8:87:
                    5f:b4:63:47:66:ad:40:bb:84:63:1b:6f:ea:a4:43:
                    a8:b1:ed:14:57:6c:71:83:f0:c9:7d:af:1e:ea:ca:
                    8a:c5:73:61:f4:81:70:21:ba:e8:55:9d:fa:d5:95:
                    4c:41:09:6e:b6:89:19:40:f9:6f:c5:44:e6:17:26:
                    3f:08:9e:ff:72:ee:33:14:8d:21:3a:ed:cc:72:86:
                    3c:d0:b7:ef:5b:0d:93:44:35:3e:a1:ad:3c:b0:c8:
                    e1:48:79:5f:a3:4e:84:77:bf:e8:15:38:32:8a:22:
                    e3:35:1a:08:f1:c3:80:48:9a:76:43:be:c0:f7:21:
                    f9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:26:80:2D:46:85:6C:90:0F:01:69:C0:D0:44:E9:42:65:05:CD:C2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xyaALUaFbJAPAWnA0ETpQmUFzcI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1000::/40
                  2a0a:6040:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:81:05:d5:98:a9:30:06:8e:e2:f8:0f:4b:0d:ee:1f:7d:c9:
         77:77:f8:85:a8:bb:c4:0c:14:3f:44:6f:52:74:4a:cd:b4:5c:
         fc:81:8c:0f:ff:1d:94:0d:af:65:68:85:ed:c8:e6:db:7a:a7:
         80:de:21:10:2a:c3:e1:17:8d:c4:a4:ef:a4:00:ac:b4:bd:9d:
         6b:3a:3d:0a:ea:ba:d4:c6:be:59:cf:1d:1a:16:ee:fc:41:0d:
         14:ac:7d:02:16:1b:17:ab:8d:6e:96:7f:15:13:4d:e6:21:80:
         c1:d9:9c:06:1b:01:91:93:6a:1b:a4:19:34:90:5b:a7:c5:aa:
         12:cd:38:80:98:17:55:68:ee:a4:9d:f7:61:0a:ce:db:91:c5:
         2e:86:a7:42:c6:90:73:bd:7a:d3:09:25:c1:ba:0c:d5:87:45:
         4b:77:79:20:e8:5d:69:9d:75:d7:2e:48:a8:2e:32:e4:23:c1:
         02:8c:a6:e5:08:60:70:53:e1:70:d9:83:87:42:83:c5:a5:cf:
         68:45:b2:2e:1b:b7:2d:1e:9a:37:d1:29:e2:d5:bf:25:15:0c:
         de:50:49:c4:4f:3c:a0:dc:ad:07:4c:16:99:14:31:78:72:d5:
         24:8d:76:e0:6b:7f:0c:e5:01:e4:c7:9c:f1:5d:b3:1c:b7:72:
         41:88:63:0e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAYTU10ynoC1Iok8EI9a+4MRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjAyMjE1NjMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzI2ODAyZDQ2ODU2YzkwMGYwMTY5YzBkMDQ0ZTk0MjY1MDVjZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguaXdRgHNuCUwxrwybDM7S0nr4FK
LdvW4Zyivz+sBxSsfKvaUw7gyEqFYHbgNWUkMbH+ZSIugEhyyaKi2pB6BQtC49EB
FRq4b4T5i5skfa74c7sjkSxsLBCOmvAHwL1YDWRjbQxrOBrVNIW9H5rLi645E7TA
DQX9b6b9B9ti77Y5Q6dH+IdftGNHZq1Au4RjG2/qpEOose0UV2xxg/DJfa8e6sqK
xXNh9IFwIbroVZ361ZVMQQlutokZQPlvxUTmFyY/CJ7/cu4zFI0hOu3McoY80Lfv
Ww2TRDU+oa08sMjhSHlfo06Ed7/oFTgyiiLjNRoI8cOASJp2Q77A9yH5bQIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFMcmgC1GhWyQDwFpwNBE6UJlBc3CMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEveHlhQUxVYUZiSkFQQVduQTBFVHBRbVVGemNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKgYShxAD
BgAqCmBAwDANBgkqhkiG9w0BAQsFAAOCAQEARIEF1ZipMAaO4vgPSw3uH33Jd3f4
hai7xAwUP0RvUnRKzbRc/IGMD/8dlA2vZWiF7cjm23qngN4hECrD4ReNxKTvpACs
tL2dazo9Cuq61Ma+Wc8dGhbu/EENFKx9AhYbF6uNbpZ/FRNN5iGAwdmcBhsBkZNq
G6QZNJBbp8WqEs04gJgXVWjupJ33YQrO25HFLoanQsaQc7160wklwboM1YdFS3d5
IOhdaZ111y5IqC4y5CPBAoym5QhgcFPhcNmDh0KDxaXPaEWyLhu3LR6aN9Ep4tW/
JRUM3lBJxE88oNytB0wWmRQxeHLVJI124Gt/DOUB5Mec8V2zHLdyQYhjDg==
-----END CERTIFICATE-----