Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5gSPkwsK9nVxnaY-fhKQN1qweHs.roa
File:                     5gSPkwsK9nVxnaY-fhKQN1qweHs.roa (raw, json)
Hash identifier:          BUEeBbNW3Lc57R7LffPOf1u/BtWnynW+8K7KFnW+FKs=
Subject key identifier:   E6:04:8F:93:0B:0A:F6:75:71:9D:A6:3E:7E:12:90:37:5A:B0:78:7B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B9BF668
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5gSPkwsK9nVxnaY-fhKQN1qweHs.roa
Signing time:             Thu 30 Jun 2022 01:40:02 +0000
ROA not before:           Thu 30 Jun 2022 01:40:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     400536
IP address blocks:        2a06:a005:5f7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463205992 (0x1b9bf668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 30 01:40:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e6048f930b0af675719da63e7e1290375ab0787b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5e:a7:c0:07:82:60:7b:43:04:c8:95:4a:09:
                    b9:d2:62:be:c0:49:e0:1a:1e:89:76:c8:bd:e2:bd:
                    76:46:55:a3:c1:bf:a3:a4:8d:f7:b1:78:a6:03:8e:
                    eb:7d:68:56:9d:b9:3e:01:4e:c4:34:30:85:b8:c6:
                    51:ba:2e:0d:5c:66:55:60:95:c0:52:5f:d9:8d:33:
                    f6:f5:31:52:d9:3c:03:96:98:73:2a:93:ed:67:6d:
                    68:59:58:40:be:82:b2:89:c9:15:78:19:4e:37:f2:
                    91:66:35:45:44:a8:c1:d3:b7:ac:f2:0c:be:7d:6d:
                    bc:ce:37:55:8e:4c:67:5d:f3:30:cf:d5:ae:db:d7:
                    ae:04:e5:7a:8f:2e:1a:a2:a0:27:96:93:61:36:a3:
                    9a:16:24:32:a9:0e:4f:9c:0c:10:b7:f1:1d:39:a4:
                    4e:b8:97:54:2a:62:f6:c1:33:a3:46:00:2d:3c:de:
                    f2:eb:49:22:df:62:a2:35:f3:56:bb:a5:40:d0:cc:
                    0a:90:10:d5:ec:bb:8e:a0:28:00:15:79:50:b3:16:
                    aa:d9:d9:31:39:02:0d:38:f1:39:82:65:54:53:73:
                    e5:5e:2d:9d:8b:f3:04:fd:3f:df:bb:df:6a:6b:62:
                    e6:40:e4:05:1b:3c:bc:73:56:e0:11:27:7b:3f:f9:
                    f1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:04:8F:93:0B:0A:F6:75:71:9D:A6:3E:7E:12:90:37:5A:B0:78:7B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5gSPkwsK9nVxnaY-fhKQN1qweHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5f7::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:31:57:2a:7d:4b:40:57:f7:25:77:28:28:5b:fa:81:d9:b8:
         8b:52:da:f8:f5:a1:14:c2:f7:83:42:14:01:66:90:6e:0f:c1:
         30:a3:60:56:bd:be:ae:e9:bc:cb:4c:99:d3:ff:55:fc:1c:34:
         68:96:be:ea:8b:11:15:81:fe:54:be:35:7e:7f:95:72:38:a0:
         29:9a:8b:33:16:46:4d:6a:b6:63:4b:5b:46:6b:de:24:85:62:
         24:29:e7:f9:af:d2:0b:cf:9a:ff:6e:0d:d7:23:90:4a:13:6c:
         35:f4:18:9c:f0:0f:4a:37:14:18:7d:2b:2d:c6:e6:3a:6e:2a:
         1d:d0:36:52:f5:e6:81:3d:bf:df:6b:3b:8e:dc:f4:b2:b5:9f:
         fd:54:d7:86:bd:ee:1b:0a:0c:98:0b:38:0a:a7:eb:44:44:e7:
         5d:b6:b1:c4:0e:44:e8:7e:25:0a:8f:da:2f:bd:05:ec:5b:d4:
         35:90:6f:ce:2d:9f:e5:c4:59:cd:21:41:e6:80:f9:30:a8:c9:
         8b:bc:d2:01:6e:3c:57:94:9b:4f:86:95:23:2b:ab:df:46:99:
         b3:88:c6:b9:d1:df:70:2c:07:2e:f2:4a:88:18:65:04:59:eb:
         84:1b:b4:91:ee:94:64:75:cc:62:fe:46:13:a4:3a:0a:10:79:
         b4:f6:ae:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----