Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6egWNQiQCLM2_bzlRFuf0JNobAM.roa
File:                     6egWNQiQCLM2_bzlRFuf0JNobAM.roa (raw, json)
Hash identifier:          hjM7d6fFhfVSZsJQYTbohJJMC7tgn6QshIkvob00lIs=
Subject key identifier:   E9:E8:16:35:08:90:08:B3:36:FD:BC:E5:44:5B:9F:D0:93:68:6C:03
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01837D39E6AE18798D22119316EF9F697A1B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6egWNQiQCLM2_bzlRFuf0JNobAM.roa
Signing time:             Tue 27 Sep 2022 04:34:50 +0000
ROA not before:           Tue 27 Sep 2022 04:34:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     45772
IP address blocks:        2a06:a005:1504::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7d:39:e6:ae:18:79:8d:22:11:93:16:ef:9f:69:7a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 27 04:34:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9e81635089008b336fdbce5445b9fd093686c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:2a:7a:6f:8d:61:4d:74:f6:29:34:02:85:
                    d4:7e:85:6c:3f:ee:76:e2:9c:89:d7:7f:2d:b6:7c:
                    fb:5c:3c:bf:da:8c:c3:0f:7b:20:d8:3a:83:16:c9:
                    3a:99:3c:43:0c:ab:91:32:22:18:51:f3:89:a2:9d:
                    86:96:fc:77:eb:1f:15:14:67:f9:94:45:ae:73:b1:
                    b9:7d:00:95:07:ae:4f:61:b8:2e:b4:66:f6:7a:33:
                    0a:99:89:2c:08:9d:2a:7f:4a:21:94:c7:7b:0f:a1:
                    f1:f0:5e:24:72:5b:6d:5c:06:50:b1:ab:87:8e:ef:
                    b7:4c:e4:53:b0:7c:22:6b:7c:aa:e1:cd:d0:ac:29:
                    5e:2a:8a:8a:d1:b9:62:76:13:92:0d:4c:ab:7c:6f:
                    b7:53:e1:b9:02:af:6a:6d:a5:eb:43:e9:b2:cc:e5:
                    e7:04:eb:fc:8a:5e:ae:6a:a8:19:60:ff:52:56:94:
                    85:b1:e1:3a:66:53:44:c4:fe:d0:8d:e2:27:b1:31:
                    31:77:01:50:12:bb:a4:17:05:f9:e7:d2:81:2f:6f:
                    f4:a2:b8:db:46:3b:a8:ad:66:86:df:3d:79:d5:36:
                    e4:a8:46:d9:ed:88:5a:9e:0e:66:5b:25:96:ba:47:
                    8e:ee:0a:33:ea:c2:b2:11:cb:ad:0b:fb:4e:aa:8f:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E8:16:35:08:90:08:B3:36:FD:BC:E5:44:5B:9F:D0:93:68:6C:03
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6egWNQiQCLM2_bzlRFuf0JNobAM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1504::/46

    Signature Algorithm: sha256WithRSAEncryption
         9d:d8:a8:2e:0b:8d:ed:e3:04:37:fe:b7:5f:31:f0:b3:cc:f4:
         aa:ec:37:92:6c:42:a1:a9:b3:84:14:a1:ca:e8:a9:ae:7a:ad:
         ba:17:12:b1:7d:ec:61:52:c8:18:96:03:66:b4:4f:8b:23:10:
         74:25:d8:36:a8:08:7f:6f:53:29:b7:d6:10:44:eb:7e:96:b2:
         a3:1d:94:9c:f6:cf:90:40:34:32:32:ff:a5:50:df:97:38:a7:
         68:8a:10:7c:7a:94:78:01:fb:05:ec:bc:c9:43:ed:14:66:89:
         08:06:f2:30:9f:dc:cd:a4:b0:44:08:df:cf:fb:c1:28:65:c0:
         be:54:01:59:14:64:66:27:ac:0e:c5:10:d6:c8:78:2d:84:0e:
         f7:57:fd:9f:1e:b6:5b:e9:e7:f5:d7:93:8e:cf:39:7f:a1:33:
         81:4c:dc:11:b9:e9:24:aa:90:29:0b:1a:34:4d:61:3a:74:06:
         3c:6d:d7:0f:e9:ac:81:b3:5b:b3:69:fd:d3:cc:38:e5:32:74:
         27:48:02:90:32:1e:6d:8f:6c:7d:89:5b:6f:a7:03:f3:e7:b3:
         45:bc:24:e3:40:d8:ac:5c:d0:ac:a0:aa:25:ec:b9:d9:93:a1:
         10:6a:da:6d:e0:6b:76:ca:5a:58:ad:c7:31:fc:86:8c:43:d3:
         79:98:b3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----