Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5JWRvKnoVnJygmY7PCkpiL8H8gQ.roa
File:                     5JWRvKnoVnJygmY7PCkpiL8H8gQ.roa (raw, json)
Hash identifier:          2BnS+3IUe1cMLYk1BALJrXFi/yvJJU7YG+jm/Lef7kI=
Subject key identifier:   E4:95:91:BC:A9:E8:56:72:72:82:66:3B:3C:29:29:88:BF:07:F2:04
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183D92F80D187FDE5346F3B20B4CC9D68B2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5JWRvKnoVnJygmY7PCkpiL8H8gQ.roa
Signing time:             Sat 15 Oct 2022 01:08:32 +0000
ROA not before:           Sat 15 Oct 2022 01:08:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209718
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d9:2f:80:d1:87:fd:e5:34:6f:3b:20:b4:cc:9d:68:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 15 01:08:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e49591bca9e856727282663b3c292988bf07f204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2d:20:9e:00:7b:13:5a:74:8f:ec:8b:d1:b4:
                    a1:a1:65:e6:74:0f:ba:2a:f3:d5:65:c0:ea:2f:c1:
                    c7:4f:56:9c:35:2d:d7:78:1f:ea:9c:c1:37:96:bb:
                    2e:5f:80:f2:e3:da:b9:1a:fe:68:50:58:d2:19:6e:
                    29:a0:0c:63:96:83:b6:54:bc:ff:fb:11:1c:d6:6e:
                    42:a7:0a:50:40:1c:9d:37:d4:59:df:03:79:bb:a3:
                    9b:ed:ae:cd:61:55:c1:c2:ac:41:36:e8:68:c9:63:
                    55:ba:67:1a:2b:71:fe:13:1b:02:d4:87:4d:ed:51:
                    60:a6:1d:9d:17:ca:40:44:55:fb:ba:d0:80:8a:de:
                    01:87:56:16:d0:3a:dd:bd:f9:ed:50:38:19:18:9c:
                    75:19:05:bb:82:71:ef:aa:90:95:4c:64:9d:e9:26:
                    3c:33:ca:ea:f0:c7:2a:9a:34:f3:4c:7f:03:c0:1c:
                    fc:c4:f7:5a:9f:3b:e1:8b:16:48:c2:33:8a:7b:0d:
                    56:36:24:cc:e2:6f:50:41:0a:87:c8:7f:40:e9:3b:
                    cf:9a:f2:cd:99:62:a2:a1:cb:ff:b0:ca:a7:06:2c:
                    4d:1f:69:5b:df:3c:2b:1d:21:b1:a9:6c:b9:07:99:
                    4a:09:9b:69:53:3d:d0:6a:0f:0c:78:9f:11:bd:5f:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:95:91:BC:A9:E8:56:72:72:82:66:3B:3C:29:29:88:BF:07:F2:04
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5JWRvKnoVnJygmY7PCkpiL8H8gQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:48:60:85:e2:7e:b0:88:7c:3b:30:23:e7:d2:80:55:f1:b4:
         43:8e:3d:1a:91:ac:a0:f9:28:7d:32:fe:bb:45:4e:7c:33:0b:
         f4:01:13:8c:c8:ab:bd:ee:3f:33:7d:2b:88:52:ec:ae:be:88:
         ef:d2:54:14:7f:d4:04:97:e0:6a:54:64:dd:e6:80:63:ee:d8:
         a6:e0:1b:d6:9b:d4:2c:4b:2b:0f:18:ad:e0:16:85:38:e8:a7:
         47:23:70:83:29:00:7b:ff:f1:1d:e2:af:73:7f:d1:88:2f:00:
         41:b6:24:ac:95:dd:23:cf:19:a0:29:f4:b0:1a:07:38:df:1c:
         b9:33:16:12:71:f5:9a:35:0b:19:7b:9a:3d:46:8c:46:7b:86:
         16:54:d8:3d:15:05:19:cf:0e:7d:77:bd:66:b2:1b:da:3c:ce:
         1f:91:2f:13:a5:fd:08:58:00:11:59:89:b9:8d:59:e0:94:24:
         40:e1:d5:6a:dd:5f:af:79:a8:c4:56:98:f4:4b:b5:84:be:dd:
         79:72:24:f4:d2:12:2b:30:9e:50:fd:0f:a1:95:55:3b:86:e1:
         1a:6b:8c:23:46:0c:e7:79:23:5c:b0:50:70:54:a7:1f:07:a3:
         ad:fc:29:4f:8c:fb:36:52:3d:5f:3e:84:cb:dd:d9:61:ee:92:
         c2:e3:6b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----