Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yDkzMGzR1jQxMDaBoLieZSZ_OgI.roa
File:                     yDkzMGzR1jQxMDaBoLieZSZ_OgI.roa (raw, json)
Hash identifier:          9qb58n80Ky+1GvhvXk6N174L2JolDNsW91CpPDERovc=
Subject key identifier:   C8:39:33:30:6C:D1:D6:34:31:30:36:81:A0:B8:9E:65:26:7F:3A:02
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182476FDD985496FBF104C85F0A3C897C23
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yDkzMGzR1jQxMDaBoLieZSZ_OgI.roa
Signing time:             Fri 29 Jul 2022 00:51:29 +0000
ROA not before:           Fri 29 Jul 2022 00:51:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210013
IP address blocks:        2a06:a005:490::/44 maxlen: 48
                          2a06:a005:1460::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:47:6f:dd:98:54:96:fb:f1:04:c8:5f:0a:3c:89:7c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 29 00:51:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c83933306cd1d63431303681a0b89e65267f3a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:c8:de:9f:ff:4b:1d:1d:9c:af:91:90:9f:
                    44:d5:1c:39:04:a3:b7:e3:71:ac:e1:f3:f9:06:88:
                    e7:a1:c6:84:8b:18:31:e1:91:db:21:94:10:2b:1c:
                    6c:43:a5:f7:27:45:46:87:83:e1:a5:01:f4:ac:0b:
                    3d:3c:92:37:4b:00:46:32:13:57:02:4e:2f:47:24:
                    e0:9e:c7:8e:03:12:4e:f0:cc:7d:a7:97:7c:07:f4:
                    1e:a7:18:f4:f9:a3:49:e7:e9:3f:ee:2c:8a:c2:50:
                    a9:83:76:1d:3e:c5:88:f4:21:09:be:dc:f7:4e:fd:
                    0f:b6:ca:17:1a:dc:73:bf:96:f5:05:67:2e:4e:fb:
                    bb:a0:19:07:3c:2f:2e:29:c6:5e:28:be:0c:d4:2f:
                    4d:16:fe:c3:41:d5:57:24:ef:05:43:92:e0:4f:af:
                    ab:46:c3:2d:ea:a8:76:5c:9b:81:42:0c:cc:91:c0:
                    bd:ab:d0:13:6c:a3:57:20:0f:3b:0a:da:a2:ed:b9:
                    c3:cd:76:21:cd:07:e9:d9:f7:0f:ed:17:2a:6e:5e:
                    fe:26:c6:ac:15:04:9d:e3:e2:73:2e:8d:bc:42:5c:
                    d6:9d:11:5c:83:2a:8c:7c:f9:65:f2:65:e7:19:c5:
                    5a:78:70:d5:ea:6c:14:29:eb:14:6d:7a:4f:c2:6e:
                    29:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:39:33:30:6C:D1:D6:34:31:30:36:81:A0:B8:9E:65:26:7F:3A:02
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/yDkzMGzR1jQxMDaBoLieZSZ_OgI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:490::/44
                  2a06:a005:1460::/44

    Signature Algorithm: sha256WithRSAEncryption
         30:5e:d6:63:ba:c1:6d:bc:c6:7e:3d:72:34:c7:2b:7f:43:cd:
         79:0d:0b:7f:02:14:ab:4c:58:1a:9a:7d:97:1d:98:77:e0:e5:
         4d:a3:b0:e5:87:60:84:e9:0d:47:8c:69:d6:36:3f:f2:7d:de:
         47:73:72:02:31:50:6d:a6:d5:8f:93:46:9d:3e:43:a4:31:b6:
         5e:13:07:fc:b9:72:49:b9:ad:48:8a:94:5b:f1:8a:7e:f0:39:
         80:49:1f:67:43:95:e0:0c:65:c0:f9:b9:8e:43:30:34:d0:72:
         77:98:ae:bc:33:cb:cf:ae:f2:55:12:ef:de:fb:43:f4:e8:09:
         48:38:10:81:94:b1:df:7c:97:eb:0e:d3:1b:0a:d1:83:ad:59:
         69:57:dd:58:c9:ed:ed:85:f8:16:db:a3:e9:cd:33:47:7b:48:
         9d:35:90:e9:e9:fa:4c:d6:2f:e3:a2:4c:18:a8:ec:4f:e4:7d:
         b9:ea:01:14:4a:6f:0f:06:f9:26:0c:c4:61:bb:f6:46:c9:2e:
         c0:dd:98:55:a8:9f:27:81:79:01:17:f8:2c:b8:5b:bf:2e:00:
         64:61:ad:bc:62:86:dc:33:55:a4:86:ca:ab:4d:34:0d:2f:94:
         40:90:58:d4:f8:2c:ab:a4:ee:dc:a1:05:0c:d6:73:04:10:c6:
         6b:ef:51:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----