Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zTCYxERMm-NL5P8Q-MB7qtVyDSI.roa
File:                     zTCYxERMm-NL5P8Q-MB7qtVyDSI.roa (raw, json)
Hash identifier:          rZ3Mzj5ScqrJ3XH1esVgedNPWn/CEgOKB+PlMCtuhIM=
Subject key identifier:   CD:30:98:C4:44:4C:9B:E3:4B:E4:FF:10:F8:C0:7B:AA:D5:72:0D:22
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15B10BE7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zTCYxERMm-NL5P8Q-MB7qtVyDSI.roa
Signing time:             Sat 01 Jan 2022 05:58:58 +0000
ROA not before:           Sat 01 Jan 2022 05:58:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7195
IP address blocks:        2a06:a006::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363924455 (0x15b10be7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:58:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cd3098c4444c9be34be4ff10f8c07baad5720d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:39:fb:15:5d:c6:01:00:6a:1e:8d:56:b8:
                    a0:d8:b1:32:76:61:a4:12:63:b5:61:57:e8:fd:3d:
                    95:cb:1b:24:b7:e1:d2:65:d9:87:32:8f:8b:8b:c0:
                    3b:a6:d1:04:6b:30:4a:b8:77:bd:24:69:5c:60:d2:
                    b4:d4:6f:fd:59:b0:9e:2f:df:a6:a3:72:44:5f:d4:
                    c5:cc:c8:f4:52:a7:e7:6d:fa:2e:0b:cd:61:aa:87:
                    3c:49:a4:f0:66:15:76:76:6e:4a:90:a0:a4:4b:82:
                    c3:83:9f:94:bd:75:a1:9e:fb:94:bf:fd:93:f3:2f:
                    08:ef:e9:72:53:cd:a1:ef:04:01:2e:c7:be:27:52:
                    3b:69:b3:db:26:dd:45:72:9e:f4:8b:c2:5e:67:12:
                    48:01:30:68:47:78:b7:6a:b4:bc:7c:fd:f0:c5:d1:
                    a6:1a:36:36:b7:9a:40:51:84:89:98:a6:23:15:dd:
                    91:8e:da:26:28:67:ec:8d:32:1e:67:99:37:6e:be:
                    e3:3e:b0:d6:cd:06:dc:84:b3:7f:35:f6:7a:0b:38:
                    88:fb:67:cd:2e:93:0f:6d:53:34:31:72:b5:26:18:
                    79:fe:50:3c:79:f1:07:c5:84:79:71:58:f0:22:d7:
                    5c:43:da:3c:11:e7:18:95:67:b9:88:7a:1f:16:50:
                    d3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:30:98:C4:44:4C:9B:E3:4B:E4:FF:10:F8:C0:7B:AA:D5:72:0D:22
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/zTCYxERMm-NL5P8Q-MB7qtVyDSI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a006::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:45:5f:5c:a5:fd:94:d9:56:5b:ee:f0:27:b4:e0:da:99:da:
         77:24:e4:54:fd:8f:4d:31:99:dc:b8:3c:0b:43:6e:a2:b6:ec:
         3c:26:9b:24:a5:b8:08:13:90:c7:b6:cf:99:04:dd:78:17:5d:
         8c:cb:fa:41:6f:2a:2b:53:aa:7f:10:34:95:c4:8c:48:50:3f:
         37:c7:73:80:cd:23:52:03:16:ad:33:48:e9:ef:0c:cb:88:0d:
         3a:65:de:ea:96:f7:e1:18:73:80:9f:23:9f:33:2f:38:a8:9c:
         98:fa:0f:d6:d3:72:89:48:a9:b1:fa:a6:f6:a9:c9:e8:bd:1f:
         51:38:21:fd:02:10:46:ad:4d:11:21:d6:9b:e3:e7:c3:f1:3b:
         68:df:90:4d:1e:d4:ce:f7:7c:29:74:83:bf:4d:10:43:73:82:
         33:c9:fe:f6:34:2e:40:3c:ef:6b:32:fd:ee:88:95:bd:c6:7f:
         89:76:c4:3b:2e:44:6c:38:a8:c4:62:a3:05:4e:82:a8:c7:2a:
         62:bb:21:41:b1:53:5b:e2:16:9a:26:c5:a7:60:34:ee:f3:da:
         10:06:58:0d:01:a1:13:90:12:95:f5:f3:9b:16:55:65:60:dc:
         50:87:60:05:ef:60:a5:68:03:bf:39:71:99:40:8a:39:f3:a7:
         1e:cc:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----