Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-qdUqHWn7BSc3U2WTsc-lnN87qo.roa
File:                     1-qdUqHWn7BSc3U2WTsc-lnN87qo.roa (raw, json)
Hash identifier:          f6Q573TvRC7vkqV+fyDod+RZAl/hpxCB5rdaPxzshV4=
Subject key identifier:   FA:A7:54:A8:75:A7:EC:14:9C:DD:4D:96:4E:C7:3E:96:73:7C:EE:AA
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184D8CA07DC890E338608BACC9557B7B395
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-qdUqHWn7BSc3U2WTsc-lnN87qo.roa
Signing time:             Sat 03 Dec 2022 16:20:29 +0000
ROA not before:           Sat 03 Dec 2022 16:20:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200975
IP address blocks:        2a0a:6040:f500::/40 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a05:dfc7:4200::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d8:ca:07:dc:89:0e:33:86:08:ba:cc:95:57:b7:b3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  3 16:20:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=faa754a875a7ec149cdd4d964ec73e96737ceeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:45:60:70:9a:d8:6d:d5:2d:d9:0b:79:13:
                    82:fa:60:eb:6a:a3:08:37:ca:6b:95:50:3d:0b:ea:
                    ff:98:47:fe:e7:26:b2:e7:69:01:2c:34:a8:3d:84:
                    ad:f2:09:c0:a7:b7:3e:2c:5c:f4:63:3d:9b:85:2b:
                    63:f2:7b:e5:87:32:d5:33:8c:cb:b5:a4:28:80:04:
                    b9:1d:60:79:31:25:1a:92:cf:7a:d7:22:d7:bb:a7:
                    84:7b:b6:ee:7d:5c:83:ea:c4:5a:12:52:9c:1e:d5:
                    60:96:1c:7e:bf:d9:6f:aa:f9:1a:a3:25:7e:35:71:
                    54:4b:2a:24:00:95:20:02:28:3c:7e:b3:af:7b:86:
                    3f:e5:61:bc:24:0a:3f:d1:7f:e4:db:3a:cc:1d:09:
                    85:56:cd:81:d5:81:23:91:13:4b:ad:41:77:a0:7f:
                    78:d7:da:e8:a3:5f:c7:15:56:98:f5:04:62:6d:ac:
                    13:13:76:74:6f:b4:dd:02:e9:1c:dd:65:96:e5:48:
                    79:47:58:09:3e:0e:1c:be:77:a3:7e:67:ca:84:e1:
                    09:76:a5:95:b4:7d:2d:05:59:14:60:b4:2b:bd:32:
                    2a:6f:39:2d:66:58:b1:7b:de:4e:ba:f4:96:50:d9:
                    73:ad:34:e0:66:86:55:04:0d:27:e4:3c:32:dc:01:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A7:54:A8:75:A7:EC:14:9C:DD:4D:96:4E:C7:3E:96:73:7C:EE:AA
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-qdUqHWn7BSc3U2WTsc-lnN87qo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:4200::/39
                  2a07:54c2:b00b::/48
                  2a0a:6040:f500::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:4b:b5:b7:03:e1:2c:c1:82:29:2c:ca:30:1b:cf:d9:28:ec:
         dc:a8:44:8f:82:c3:36:8a:b8:e7:2e:49:e4:ef:cf:7d:d1:85:
         51:32:4d:b1:41:7b:9c:6b:be:fe:ce:0f:f7:8b:b6:97:42:0d:
         8a:bc:b7:f7:e5:1b:cf:ac:83:6d:c8:7b:cd:d2:09:e1:4e:38:
         d2:f8:6b:26:b8:0d:3b:e6:7a:33:44:a1:bd:03:d7:5d:ff:5c:
         68:7d:03:5d:42:f5:38:1e:5f:23:be:89:54:b7:f8:b9:d0:6a:
         c2:95:85:50:3f:67:de:c2:3f:97:5f:d9:62:42:8b:15:ef:2d:
         af:69:c0:e0:72:9d:0a:5b:20:17:c6:cf:71:75:01:81:b3:7d:
         ae:ba:36:47:d8:46:57:df:4d:7e:03:38:5b:06:4e:5c:0b:2c:
         ef:c6:2b:b9:a8:7b:20:9e:d0:45:d4:45:95:4c:8a:25:cd:40:
         4f:07:36:e0:7c:39:0f:ca:72:9e:4e:e1:6f:9c:72:97:37:01:
         28:26:34:0a:2f:3c:ea:3f:3a:3e:e9:ed:1d:71:0e:a3:10:f5:
         60:ed:e2:c4:bb:88:86:00:26:ca:a0:ca:15:4e:5b:b7:6d:ae:
         09:07:a4:c7:0a:5c:38:ed:44:b5:75:fa:6e:d1:70:a9:2e:88:
         44:a3:55:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----