Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/11k9HE7v-MNK6B-HTvcXrv105Fw.roa
File:                     11k9HE7v-MNK6B-HTvcXrv105Fw.roa (raw, json)
Hash identifier:          w71W5rBf6ESnxDIPyrAZmCJGun4ek8rwfcxP9ZQaSMg=
Subject key identifier:   D7:59:3D:1C:4E:EF:F8:C3:4A:E8:1F:87:4E:F7:17:AE:FD:74:E4:5C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183F9C9C4095F8263E9286AFBD0554074AF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/11k9HE7v-MNK6B-HTvcXrv105Fw.roa
Signing time:             Fri 21 Oct 2022 09:04:53 +0000
ROA not before:           Fri 21 Oct 2022 09:04:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202002
IP address blocks:        2a06:a005:2090::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f9:c9:c4:09:5f:82:63:e9:28:6a:fb:d0:55:40:74:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 21 09:04:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d7593d1c4eeff8c34ae81f874ef717aefd74e45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d0:87:e2:b3:11:64:25:2b:4b:9d:e0:3b:fb:
                    a2:6c:b1:a0:a7:d3:5c:d1:36:76:0f:e4:64:19:53:
                    cf:41:0a:d8:82:89:f2:c8:85:ca:87:b5:5e:f4:bb:
                    52:ff:e5:24:79:21:2f:ea:5e:f3:2b:5f:1f:ba:38:
                    ee:10:11:de:60:52:29:42:12:e5:d4:0a:40:e4:58:
                    f4:e9:87:ef:81:77:fd:bf:7a:a8:b7:14:8c:0d:03:
                    8c:36:9f:7d:e3:42:5e:06:2c:e7:d3:34:f7:fb:a2:
                    e6:59:09:65:9b:88:c6:29:56:6b:1a:1c:fb:d9:88:
                    d3:20:37:02:61:03:fb:38:b7:ba:22:9f:a6:22:90:
                    17:43:28:48:01:4f:10:e0:65:e3:d7:2c:3c:4b:c6:
                    bc:b2:ca:f1:b1:55:af:2d:6f:0a:4d:6a:aa:f4:b2:
                    3b:c7:a0:77:e0:2f:d2:71:d3:9b:a3:c5:72:88:0a:
                    f7:af:45:3c:c3:5f:dd:39:55:dd:be:08:0c:31:a4:
                    2e:7b:ee:c2:ae:59:83:b8:73:c5:91:10:f3:97:21:
                    6b:96:5a:49:92:7f:76:df:db:5e:94:ab:13:ac:ad:
                    5c:ea:28:be:2e:cc:57:c7:a8:d3:d8:c0:63:31:e6:
                    49:53:02:ac:f6:2f:8f:da:7e:d1:df:3c:e7:ec:fe:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:59:3D:1C:4E:EF:F8:C3:4A:E8:1F:87:4E:F7:17:AE:FD:74:E4:5C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/11k9HE7v-MNK6B-HTvcXrv105Fw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2090::/44

    Signature Algorithm: sha256WithRSAEncryption
         45:be:fd:19:af:4e:41:d7:85:dd:5c:80:53:e5:70:5c:47:04:
         ea:1a:5e:81:ea:17:eb:a7:a0:1d:6f:fa:0c:60:7b:83:2f:aa:
         b5:12:2b:ef:48:f1:49:c8:18:58:e7:d5:ee:6e:35:2d:da:ca:
         0e:3e:52:41:05:e5:c1:31:8f:d9:39:81:e8:ca:eb:57:8f:07:
         2e:d0:53:f1:f8:7b:bd:d0:b5:0d:fe:a9:26:5e:35:38:f8:2e:
         ce:1d:16:9c:58:09:ae:3f:6c:e2:0e:d5:78:09:af:d8:36:9e:
         d2:02:d4:1b:c6:4a:44:5d:3c:c3:3e:7f:88:62:4b:85:c8:34:
         20:dc:e6:1e:88:9d:dc:11:d4:5d:ba:79:fd:28:76:35:49:24:
         d7:46:98:50:41:77:c3:8a:a5:0f:f7:b9:ee:34:59:f5:45:47:
         44:22:82:cc:94:f0:ba:77:a3:0a:24:76:75:16:0f:d9:e3:bb:
         80:48:51:1b:16:26:09:d2:18:35:58:cd:0e:0a:e2:1d:ba:3a:
         04:a5:43:12:fa:4e:df:ea:fe:cf:68:39:e2:6e:10:58:8c:1c:
         ee:2d:05:bc:ec:e7:f5:68:fd:2a:f2:44:74:7e:87:91:dd:bd:
         91:f8:ef:15:0c:82:2c:80:8e:7e:87:16:08:dd:ae:5f:b6:8a:
         66:22:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----