Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0VV6QbhxmJ0jKlpjuOYV2s6Ecqk.roa
File:                     0VV6QbhxmJ0jKlpjuOYV2s6Ecqk.roa (raw, json)
Hash identifier:          Z6VAl3UjPFrhtEtbMsMqSHO+vXmmZsugZROp6Oe4dkA=
Subject key identifier:   D1:55:7A:41:B8:71:98:9D:23:2A:5A:63:B8:E6:15:DA:CE:84:72:A9
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182BCD86CBEFE385C0F891D90C83BB6554F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0VV6QbhxmJ0jKlpjuOYV2s6Ecqk.roa
Signing time:             Sat 20 Aug 2022 20:01:16 +0000
ROA not before:           Sat 20 Aug 2022 20:01:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204160
IP address blocks:        2a06:a005:18b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:bc:d8:6c:be:fe:38:5c:0f:89:1d:90:c8:3b:b6:55:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 20 20:01:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d1557a41b871989d232a5a63b8e615dace8472a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:74:42:ee:9c:6b:93:b2:85:3a:8a:3b:dd:22:
                    45:69:0d:84:20:e3:7a:80:7c:cb:70:81:a8:b2:7a:
                    4c:39:5b:55:c7:79:4a:b3:7e:8e:c2:be:47:03:e5:
                    a1:8f:8d:fb:74:5d:30:99:ed:ff:79:ee:e5:67:ff:
                    5e:16:09:93:ba:cb:5a:d4:3b:c3:e2:83:ab:ed:11:
                    90:c9:6f:d8:86:5e:ea:39:78:d6:6e:75:c1:7f:6a:
                    3e:fb:9b:0d:9b:26:0d:0c:27:1c:3b:18:ca:a3:7d:
                    72:9e:a7:ef:b7:e7:18:15:e5:55:b1:ce:a4:c6:a2:
                    49:38:31:09:27:75:2e:0c:cf:6b:a9:46:8a:7f:f6:
                    df:aa:2c:8f:2b:14:36:a2:c9:ff:5b:72:9b:2d:85:
                    dc:9a:de:92:ec:30:4b:3e:01:fd:94:da:0c:1b:1b:
                    87:a0:66:cd:a7:5a:a1:51:05:a6:4b:d3:a9:57:ca:
                    9d:75:f7:a0:d0:14:03:2f:0c:da:71:37:06:cd:33:
                    6b:fd:37:b8:98:34:f1:07:cb:cc:37:9e:a4:fa:21:
                    5a:d6:5f:31:24:a0:1b:32:f6:8d:45:3b:cb:b7:9b:
                    1d:b9:50:c2:e1:0a:0a:f0:a2:d1:05:31:bb:bc:dc:
                    d7:a5:49:59:4f:b9:da:7c:71:70:fa:e9:3d:f2:ce:
                    2e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:55:7A:41:B8:71:98:9D:23:2A:5A:63:B8:E6:15:DA:CE:84:72:A9
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0VV6QbhxmJ0jKlpjuOYV2s6Ecqk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:e0:81:6c:bc:f8:9c:af:0d:17:7e:28:4e:a3:c3:76:04:25:
         58:51:72:67:9a:87:02:41:b9:0a:ae:f9:b1:de:d4:ff:e3:bd:
         bb:64:21:8e:1a:0e:47:84:42:d4:88:0c:02:c4:75:a7:50:e1:
         03:bf:6f:18:78:48:69:32:5a:8e:d9:42:46:07:c4:10:fe:3c:
         a4:39:ec:d9:4e:91:cc:db:db:a1:05:85:e4:a0:e5:64:e3:56:
         52:6d:58:21:18:02:24:d9:63:20:5d:e0:49:6b:5c:88:67:40:
         24:de:6f:c2:3e:7b:da:de:85:c5:16:df:24:78:a4:3c:04:ff:
         79:b1:d4:a7:8b:dc:f3:59:08:71:ac:84:18:02:50:4d:be:30:
         1c:06:a6:60:9c:19:4b:9b:c5:b1:c7:fc:35:7f:e6:eb:7e:ba:
         51:4b:f4:e2:2d:09:5a:06:76:52:37:33:b9:3d:bb:16:cf:21:
         76:75:7c:21:3e:fd:a5:c0:06:3b:d0:0a:5c:87:fd:6f:98:f0:
         93:0d:57:71:07:d5:21:d7:ce:b6:8a:01:ad:40:21:bf:e6:95:
         fd:ed:c7:13:25:c0:4b:b6:88:df:65:ba:67:5f:d1:c4:4e:c5:
         9e:d5:d6:6d:21:74:2e:85:6e:28:44:ed:a0:59:25:d3:c2:d7:
         5f:0c:ca:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----