Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3OTva1PoXd_qBm8yJvlqYXXtJKI.roa
File:                     3OTva1PoXd_qBm8yJvlqYXXtJKI.roa (raw, json)
Hash identifier:          NXpi0XzHPDk48E3hK2vzPyLlbw79Rw80x0qI/lUi+z8=
Subject key identifier:   DC:E4:EF:6B:53:E8:5D:DF:EA:06:6F:32:26:F9:6A:61:75:ED:24:A2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184F139652B38F66654632107E27AFE6FF0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3OTva1PoXd_qBm8yJvlqYXXtJKI.roa
Signing time:             Thu 08 Dec 2022 10:13:01 +0000
ROA not before:           Thu 08 Dec 2022 10:13:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200885
IP address blocks:        2a0a:6040:ea00::/40 maxlen: 48
                          2a06:a005:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f1:39:65:2b:38:f6:66:54:63:21:07:e2:7a:fe:6f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  8 10:13:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dce4ef6b53e85ddfea066f3226f96a6175ed24a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:45:53:e0:5d:03:9f:62:5e:c8:1b:5d:85:d0:
                    06:ee:bc:42:59:47:17:4d:77:bc:66:48:d2:2f:60:
                    19:6a:54:af:51:7a:d1:87:ba:7d:5d:d6:3c:e1:e0:
                    97:c7:02:d4:71:12:80:d7:7b:67:7d:e7:5b:9a:f1:
                    64:ce:90:4b:d0:ea:26:11:f2:61:93:7a:16:06:96:
                    20:f3:4f:91:74:7a:3c:3b:14:4b:37:97:3c:1f:ed:
                    eb:40:05:35:62:be:07:52:99:3a:ad:26:2b:9f:a7:
                    d1:ec:9d:db:46:56:61:ea:b3:7b:5c:a3:b8:3e:d8:
                    b0:96:43:4a:ae:13:84:1b:93:63:ba:a6:ce:18:b8:
                    c6:ef:67:4d:1f:68:16:c6:fe:bf:c2:c7:37:db:b9:
                    87:bd:19:86:10:1f:48:33:8f:08:c2:ab:51:22:d2:
                    93:5e:f5:79:93:60:1a:75:f3:a2:8f:4b:b2:0c:5b:
                    22:64:6e:92:61:de:81:f0:5b:a5:aa:15:33:11:21:
                    e0:5d:0f:ab:a0:1d:46:d1:f2:61:3e:68:05:12:73:
                    d0:c2:d7:15:39:55:ae:59:55:90:01:c8:d4:8b:02:
                    57:71:b1:f7:b3:27:52:e2:90:f0:a8:dc:ad:1a:f7:
                    87:43:4c:5b:5f:c8:4a:2f:c6:5b:e7:4e:28:1a:be:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E4:EF:6B:53:E8:5D:DF:EA:06:6F:32:26:F9:6A:61:75:ED:24:A2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3OTva1PoXd_qBm8yJvlqYXXtJKI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5::/48
                  2a0a:6040:ea00::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:55:eb:a0:98:b3:36:ef:3b:d3:0e:64:91:88:77:2e:a9:c7:
         e4:3c:7e:a8:83:d9:82:c2:0e:48:dd:c6:18:d4:1b:1a:14:07:
         66:fa:be:25:c1:bc:82:c1:38:49:f8:22:ed:83:2c:66:46:a1:
         60:c8:63:2e:47:17:ad:56:1a:e5:0c:af:22:22:f8:ea:0e:9d:
         c7:e3:be:7b:b3:96:98:15:a0:82:92:15:7e:01:a7:d1:35:70:
         02:b3:df:dc:f4:d3:0c:1d:42:00:98:51:7d:fc:18:cd:b6:9b:
         43:8b:53:72:89:06:af:6b:18:db:f2:88:84:05:6c:f6:52:04:
         1e:68:32:fc:1d:e9:db:16:ba:ac:7d:09:17:9d:38:98:61:71:
         3a:5b:59:a6:46:53:18:a5:ea:0e:b2:46:63:fc:6b:cc:7a:a1:
         47:20:29:a6:c0:f8:84:a1:67:c5:fd:21:47:6c:24:e4:4e:10:
         14:c5:27:6a:66:2b:9b:5f:20:a6:16:25:eb:f0:33:63:f8:24:
         28:b2:dc:eb:a0:5e:ad:46:5e:80:a4:3a:c6:ae:20:70:1f:16:
         25:8a:c3:25:8a:b5:79:93:16:4c:30:d5:10:9d:ad:a8:30:67:
         00:1f:72:99:33:3b:e2:ea:34:21:4e:a6:e4:e7:15:e2:68:92:
         3e:32:45:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----