Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1EynS8pfChWrYq83y6_lr6qhwm4.roa
File:                     1EynS8pfChWrYq83y6_lr6qhwm4.roa (raw, json)
Hash identifier:          tSKeFDaNRjA42feTajcqfRSIyJTfWZBfqy5BZOg+JTw=
Subject key identifier:   D4:4C:A7:4B:CA:5F:0A:15:AB:62:AF:37:CB:AF:E5:AF:AA:A1:C2:6E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18F3651F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1EynS8pfChWrYq83y6_lr6qhwm4.roa
Signing time:             Sun 01 May 2022 15:15:56 +0000
ROA not before:           Sun 01 May 2022 15:15:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213326
IP address blocks:        2a06:a005:6f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418604319 (0x18f3651f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  1 15:15:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d44ca74bca5f0a15ab62af37cbafe5afaaa1c26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:86:c6:bc:a2:5b:b9:42:4d:ce:f9:46:b7:
                    13:22:f1:d9:d2:f9:09:4b:30:14:4e:f1:db:11:4e:
                    30:04:20:b7:0d:a6:4f:0f:22:12:0e:49:0a:9b:75:
                    46:87:93:f2:96:ea:3a:30:51:cb:12:34:0a:38:d7:
                    d4:a7:d8:41:b0:7f:95:14:d2:21:dd:cf:76:09:b9:
                    fc:b6:58:34:e5:06:40:73:23:a1:ac:84:d9:63:1f:
                    5a:2d:af:3f:c3:fe:01:0b:29:65:51:69:52:0f:ef:
                    b0:89:f8:d0:66:d0:04:b6:b4:0e:68:72:43:75:ee:
                    5d:74:a8:99:b0:fe:36:08:dc:74:b3:fe:a8:54:b7:
                    d4:ae:8f:19:ce:38:db:1c:8b:40:15:e3:55:58:23:
                    71:ec:d5:9c:6c:92:e0:09:82:ce:9b:aa:87:f8:d6:
                    f2:c4:12:5f:7a:76:db:a5:68:73:33:99:cc:ed:29:
                    8d:97:ca:c9:c4:e9:ce:38:ac:ed:58:3f:4a:04:ae:
                    45:fd:dd:9c:fc:1c:64:c1:73:e6:bd:32:8c:6e:c5:
                    db:7a:68:de:d0:8a:70:36:56:7c:d1:3e:3e:76:31:
                    d0:fe:7f:81:5a:4c:4f:fd:61:61:fc:c7:8f:40:6c:
                    87:dc:26:1f:81:b8:20:12:ab:f5:5a:a6:d0:c0:0b:
                    15:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4C:A7:4B:CA:5F:0A:15:AB:62:AF:37:CB:AF:E5:AF:AA:A1:C2:6E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1EynS8pfChWrYq83y6_lr6qhwm4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:6f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         48:02:b8:ce:48:6c:8c:e3:5d:21:51:72:c9:a5:6e:9f:ac:cc:
         02:aa:b7:65:ed:43:99:f4:eb:df:d6:94:1d:cc:dd:0d:12:59:
         c5:a3:0d:58:1f:eb:23:62:45:07:ed:66:84:34:9e:79:01:82:
         5b:82:80:b3:76:b1:e4:a1:05:98:37:be:0d:c0:05:3e:56:59:
         b4:c3:d7:07:21:2d:31:7d:d5:2f:6d:7a:e0:b3:0e:31:d2:4b:
         4f:8b:34:16:02:4a:75:b5:10:dc:fa:9d:32:0b:db:f8:56:45:
         4a:a1:7d:20:3d:4d:d0:d7:6f:7b:66:df:32:39:d2:77:06:8b:
         dd:0d:0c:30:2d:c4:88:08:43:f4:1a:89:4a:27:c2:7b:91:cf:
         6d:01:ac:9b:d7:92:00:34:02:9a:4e:4c:a9:f0:7e:a0:07:87:
         98:03:53:6d:6f:a5:00:a4:8b:ab:c3:84:4e:90:7a:81:c0:c5:
         d7:c7:a1:e6:d0:a1:1c:69:70:2c:9b:6d:aa:42:ee:7f:40:5a:
         28:31:4b:59:35:e9:de:ef:35:b5:0f:8a:94:3c:58:ea:02:b1:
         1d:55:5b:34:62:2f:57:80:48:d4:3f:93:15:10:b4:68:84:a5:
         d3:47:f0:8d:07:89:d7:3c:e9:13:56:36:34:ce:d5:57:5e:7c:
         e9:27:f6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----