Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3eHUgOZ193Sq9zf_Yuwz9yR7xZA.roa
File:                     3eHUgOZ193Sq9zf_Yuwz9yR7xZA.roa (raw, json)
Hash identifier:          N79g5MTMH5DTYMUGMvp+t5Up8nl6hMXV4jeTd8ptZOo=
Subject key identifier:   DD:E1:D4:80:E6:75:F7:74:AA:F7:37:FF:62:EC:33:F7:24:7B:C5:90
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19D18255
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3eHUgOZ193Sq9zf_Yuwz9yR7xZA.roa
Signing time:             Sun 15 May 2022 07:35:41 +0000
ROA not before:           Sun 15 May 2022 07:35:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62430
IP address blocks:        2a06:a005:19::/48 maxlen: 48
                          2a06:a005:840::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433160789 (0x19d18255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 15 07:35:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dde1d480e675f774aaf737ff62ec33f7247bc590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3e:d6:86:a3:9a:2e:3a:ee:d9:f0:2f:b9:8b:
                    5c:55:3e:e5:60:99:1c:b3:68:57:ec:d2:e9:26:e2:
                    4d:f0:62:38:e0:7c:af:a3:fd:02:9a:ca:0e:bf:8f:
                    37:ec:dd:ac:4d:c1:30:36:a9:c8:1b:d3:ef:f3:ec:
                    54:81:d6:ad:9a:17:53:c0:b5:cd:62:3a:73:19:05:
                    ed:db:fe:1c:67:0c:2a:f0:22:67:93:94:41:f4:ae:
                    15:57:71:71:9d:9e:b2:4d:a1:e8:4d:b1:72:6d:ec:
                    ec:ce:32:ef:f7:83:02:9b:68:49:8d:d0:27:e8:f7:
                    23:f9:8e:0b:22:f3:b9:8c:58:29:c2:3d:36:3a:05:
                    b7:06:19:ae:b0:a7:a3:25:4b:6f:00:e0:84:d4:98:
                    99:04:c1:98:bd:73:66:c2:e1:bb:21:23:62:5f:3c:
                    50:ca:f7:9e:d6:4b:50:3d:bc:0e:e8:a7:f4:c5:97:
                    a5:ad:94:7e:86:74:92:9f:01:71:28:13:a0:77:59:
                    75:e8:84:e8:c3:6e:c6:2e:48:63:ce:dd:31:45:ab:
                    20:37:c3:5a:e8:b8:45:95:8c:cb:79:cb:ef:5b:05:
                    08:f9:82:90:d6:0d:49:61:b3:ff:a7:b0:1c:51:60:
                    96:60:e1:b4:24:1f:a6:96:a0:61:0d:99:6a:46:20:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E1:D4:80:E6:75:F7:74:AA:F7:37:FF:62:EC:33:F7:24:7B:C5:90
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3eHUgOZ193Sq9zf_Yuwz9yR7xZA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:19::/48
                  2a06:a005:840::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:e2:da:cd:c9:29:fa:68:68:ed:3b:d0:89:ec:5e:3f:9b:91:
         e2:fc:4a:1d:04:67:af:ae:36:c4:3f:e1:e9:d6:57:0e:a4:89:
         24:aa:fd:3d:7a:f5:47:9b:b2:6b:40:a3:95:86:83:8b:36:ca:
         a2:0b:f3:60:f0:67:e5:a5:ab:60:62:5f:5b:9b:33:74:b8:18:
         70:f3:39:c0:4d:0e:d6:df:a8:c1:ff:51:b8:15:20:d5:a6:a5:
         dc:64:27:7c:81:72:f0:99:fc:63:84:04:45:6e:58:79:66:b2:
         9a:e9:a9:64:a9:40:fd:6b:c4:f7:ca:8a:98:50:ae:49:48:72:
         43:95:6c:d0:74:7d:09:d8:9a:2f:d0:ca:6f:ad:5d:80:f1:8b:
         d9:f8:a5:47:91:02:8b:02:c4:d2:4a:ad:46:f0:1e:59:06:27:
         df:91:96:94:df:fe:ef:cb:c7:74:42:e1:c5:4f:6b:e8:8e:48:
         d7:0c:07:1e:b7:67:19:4f:27:d4:fa:63:53:89:d1:6f:70:3f:
         27:ba:fc:f9:b1:0f:46:2d:8d:50:18:76:a8:ff:d5:34:64:dd:
         56:3b:24:d7:cd:08:b9:7d:c0:f9:d9:fe:6e:a9:08:b3:be:4d:
         9a:b4:86:64:f5:b9:00:3a:9b:81:89:7b:ae:43:a7:c0:5d:c2:
         4b:c8:b7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----