Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0FmeGwaqAwxikcwAFPXNJYr6WS8.roa
File:                     0FmeGwaqAwxikcwAFPXNJYr6WS8.roa (raw, json)
Hash identifier:          592FBDu5whzv+MpdypDZ9vlStOYCmINFkg+PbjjzmN0=
Subject key identifier:   D0:59:9E:1B:06:AA:03:0C:62:91:CC:00:14:F5:CD:25:8A:FA:59:2F
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       17CA6181
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0FmeGwaqAwxikcwAFPXNJYr6WS8.roa
Signing time:             Thu 07 Apr 2022 13:45:32 +0000
ROA not before:           Thu 07 Apr 2022 13:45:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     149296
IP address blocks:        2a06:a005:3f0::/44 maxlen: 48
                          2a06:a005:3d0::/44 maxlen: 48
                          2a06:a005:3e0::/44 maxlen: 48
                          2a06:a005:410::/44 maxlen: 48
                          2a06:a005:3c0::/44 maxlen: 48
                          2a06:a001:a110::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399139201 (0x17ca6181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr  7 13:45:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d0599e1b06aa030c6291cc0014f5cd258afa592f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:4d:3f:e7:d4:ac:1b:c7:30:3f:0f:4d:cf:
                    bd:61:b5:0c:94:50:23:93:d9:82:91:08:10:4f:29:
                    63:5e:93:ff:67:23:dd:12:58:f9:65:78:2c:16:b8:
                    6e:1a:89:85:93:0f:b5:13:f9:d4:3a:c1:a6:d6:c0:
                    a6:c9:ff:08:ed:0a:2b:62:73:e5:1b:f6:ca:a6:4c:
                    83:98:09:f4:7a:67:b4:a3:ec:47:0d:f1:91:74:f9:
                    c0:72:f5:fe:3b:e6:e2:f6:fc:35:ce:4c:0b:7b:20:
                    21:9d:7e:f5:50:5e:3d:e8:46:57:99:c0:b7:bd:3e:
                    a7:b6:5d:5c:de:b4:50:19:be:7d:0c:f1:2c:79:03:
                    01:aa:fa:3b:03:5a:25:38:5f:b3:58:5e:5a:eb:8f:
                    4d:39:8c:fb:99:76:a5:dc:6e:a7:51:a1:c3:8e:0d:
                    b2:84:2c:3b:84:9a:b7:29:be:97:2e:ef:61:e3:a0:
                    21:d1:ff:a6:ba:4c:49:f8:d0:52:70:3c:31:20:ef:
                    e3:5b:b3:dd:1e:c9:a5:e9:2d:64:c6:4f:0b:7e:1e:
                    43:69:ae:c1:45:2f:c5:e8:3c:89:7e:b6:8e:b0:ff:
                    59:86:5f:c2:21:30:48:2c:32:e8:1e:73:28:af:99:
                    8d:2d:15:4f:7c:00:82:71:46:83:1d:b5:c0:80:26:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:59:9E:1B:06:AA:03:0C:62:91:CC:00:14:F5:CD:25:8A:FA:59:2F
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0FmeGwaqAwxikcwAFPXNJYr6WS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a110::/44
                  2a06:a005:3c0::/42
                  2a06:a005:410::/44

    Signature Algorithm: sha256WithRSAEncryption
         5b:29:57:8d:05:8a:13:f8:cd:2e:2e:73:de:d6:63:f6:65:4d:
         08:95:eb:2a:25:05:af:a8:11:60:cb:b3:bb:a1:f6:8a:2f:08:
         e7:30:0a:a0:5d:ea:35:df:02:7f:1b:4c:fe:0a:aa:73:f7:92:
         1f:66:a5:47:c6:87:fb:5e:55:c4:b1:94:fa:8b:e5:82:06:99:
         4b:47:b0:ca:48:66:59:b0:62:60:2a:ec:f4:37:40:ef:74:92:
         ee:3a:8e:4a:b4:35:46:f9:e5:49:e3:09:64:7c:d4:9a:d3:5d:
         dc:48:81:1c:91:ae:f3:d5:35:76:66:8b:a8:6e:54:c8:d9:96:
         b5:27:08:2f:25:1b:16:a7:eb:79:09:9b:50:3e:95:06:11:f5:
         60:05:d8:73:53:3e:57:50:37:3e:30:6d:53:5f:b1:c5:73:3c:
         37:fe:3d:0c:3d:15:37:ed:ad:11:d3:93:fb:3a:1c:4e:72:53:
         88:cb:49:b0:bb:f7:a0:d4:1d:fe:d2:14:0c:44:eb:c3:8c:e9:
         17:c2:f5:f5:72:18:0d:10:a6:e2:18:d5:e7:6d:78:13:3a:df:
         be:25:50:c2:69:ec:7b:b7:68:e6:e4:59:23:36:a3:79:1b:e0:
         85:6a:bf:bf:d8:35:9e:14:2e:7f:e9:a4:98:d2:cb:f2:50:b0:
         8f:1d:35:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----