Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2UcHwfQSmI1SyF8LSlgZB_e-OV8.roa
File:                     2UcHwfQSmI1SyF8LSlgZB_e-OV8.roa (raw, json)
Hash identifier:          O/X7VFOqiRO58SzDQlKhLskM/9PI5MV2SdYegzs0s/k=
Subject key identifier:   D9:47:07:C1:F4:12:98:8D:52:C8:5F:0B:4A:58:19:07:F7:BE:39:5F
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1ACE8FBF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2UcHwfQSmI1SyF8LSlgZB_e-OV8.roa
Signing time:             Sun 12 Jun 2022 15:04:03 +0000
ROA not before:           Sun 12 Jun 2022 15:04:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204842
IP address blocks:        2a06:a005:cc0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449744831 (0x1ace8fbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 12 15:04:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d94707c1f412988d52c85f0b4a581907f7be395f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:93:2a:19:c1:b3:b3:c8:7a:48:c4:5f:27:a7:
                    36:cd:42:d4:c3:e0:f7:44:9f:9e:49:3c:57:65:40:
                    98:54:58:24:27:7f:a3:93:0a:73:4b:21:77:c8:13:
                    a9:6b:79:30:df:d0:ac:0c:49:9c:30:52:15:d4:06:
                    98:e8:5b:ab:66:53:1a:ba:c9:44:8c:08:0e:51:a9:
                    13:bd:d2:ee:4b:2f:7c:03:d0:a5:3c:2d:58:e9:b9:
                    78:b8:d5:63:38:72:55:6e:b3:5d:50:e9:8f:bf:c1:
                    05:52:84:a2:d1:40:c7:bf:fa:a9:23:8d:a2:cd:17:
                    0f:1c:1b:f4:86:45:58:51:7b:28:c6:ea:ee:dd:9e:
                    1a:9d:c8:f4:a6:90:d3:f7:ba:65:55:bf:51:c9:5b:
                    60:be:38:80:13:9c:00:db:41:a7:d3:fe:6b:d0:3b:
                    80:2f:c7:16:9b:2f:17:9f:ff:62:45:9c:9f:14:e3:
                    75:a6:3d:80:e8:21:95:78:d5:26:1c:b8:ab:c1:cc:
                    63:c5:da:69:71:af:a1:d0:80:ea:86:55:1d:56:2c:
                    db:31:64:7c:71:0a:9e:90:80:9b:73:9e:6a:67:9a:
                    a9:2a:97:b6:02:1c:27:50:8c:11:f4:e0:4e:2f:b2:
                    07:b9:a7:18:4d:5e:a9:64:f1:12:35:4b:18:e3:2c:
                    e4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:47:07:C1:F4:12:98:8D:52:C8:5F:0B:4A:58:19:07:F7:BE:39:5F
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2UcHwfQSmI1SyF8LSlgZB_e-OV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:cc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         59:4d:3d:54:4f:34:7e:4f:24:ee:41:52:03:ab:14:54:93:45:
         d3:aa:a8:32:ce:b4:14:ac:50:98:7e:f0:5c:80:84:17:a1:4f:
         34:93:f3:14:7d:32:8f:61:6c:cc:32:9a:80:7c:3f:b2:e1:bd:
         31:a0:25:86:e8:c4:fc:53:31:9e:97:1e:98:64:3c:72:02:cf:
         08:d6:6d:6c:ab:27:d3:fe:43:74:46:5a:e2:81:c6:4f:75:6f:
         e9:06:51:04:f2:70:d4:3b:cd:9c:a6:59:3e:3d:e0:ac:68:fb:
         6d:0d:32:b5:f9:52:cc:0d:a9:65:17:b5:33:9d:9d:66:c7:00:
         d5:c6:39:69:c3:31:e3:d1:15:ac:df:2d:be:cb:87:00:5b:39:
         27:fb:72:06:7e:03:87:72:28:49:d7:c7:3f:ce:03:4a:2b:af:
         83:8d:58:59:cc:43:08:cd:f7:16:14:c0:87:c7:f6:f8:52:43:
         25:16:78:8d:16:a8:83:f2:d0:34:8b:4b:c0:bc:7d:24:04:4f:
         91:57:6f:64:d6:f2:f2:13:4d:d9:d5:86:71:e6:a3:cf:d5:35:
         52:4a:9a:16:dd:17:e7:23:20:ca:a0:c9:91:52:7b:8e:df:39:
         bd:d6:5d:e5:cc:a0:fd:65:e2:23:4b:a5:a6:dd:76:ac:10:a5:
         4e:2f:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----