Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/72rYTTPwktRw_enLnuDcLYjAGFY.roa
File:                     72rYTTPwktRw_enLnuDcLYjAGFY.roa (raw, json)
Hash identifier:          z1pcdsbB9yS6Itk15jWPsTSCpfcL5JElKLJNHA/u2Qo=
Subject key identifier:   EF:6A:D8:4D:33:F0:92:D4:70:FD:E9:CB:9E:E0:DC:2D:88:C0:18:56
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18ADCE8E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/72rYTTPwktRw_enLnuDcLYjAGFY.roa
Signing time:             Sun 24 Apr 2022 19:43:54 +0000
ROA not before:           Sun 24 Apr 2022 19:43:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204446
IP address blocks:        2a06:a005:5e1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414043790 (0x18adce8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 24 19:43:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef6ad84d33f092d470fde9cb9ee0dc2d88c01856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:06:1a:26:25:ed:91:7a:5a:47:b7:0c:f0:e3:
                    94:1e:cf:53:85:a2:0a:ce:49:95:7e:9f:fe:35:3e:
                    d3:cc:48:cf:ae:4f:b8:4c:5c:6b:c4:c6:dc:34:05:
                    e6:cd:96:dc:41:2f:69:c8:a1:00:da:fc:2e:fd:4a:
                    b4:b6:12:c9:65:ad:31:15:db:72:bf:d8:83:25:f0:
                    45:f3:2c:cc:7a:0c:1d:1e:53:a2:7e:d4:a5:f6:eb:
                    0b:ac:63:27:e0:75:85:b0:27:3d:19:67:eb:a5:fd:
                    88:d8:db:1e:c1:25:aa:41:c7:b6:04:31:12:68:96:
                    f7:ea:ce:bd:aa:a9:5a:8e:91:68:af:43:6f:a6:cb:
                    3d:97:27:14:3c:47:27:94:86:6a:ea:76:28:fe:cb:
                    bf:85:8c:39:63:af:64:4e:40:18:57:e2:6f:2b:dd:
                    e1:1c:9b:7a:d7:9f:75:af:99:09:c2:2e:3e:0a:77:
                    36:17:fa:f8:f1:2f:bf:07:08:86:af:98:70:ec:c3:
                    76:91:db:6a:45:ce:aa:0d:11:a7:f4:1b:ef:c5:1f:
                    48:5c:70:c7:2e:8c:69:5e:11:c9:36:d8:42:bd:17:
                    8a:b9:a8:cb:ca:b4:3e:f7:79:2d:cf:2d:b4:95:c2:
                    f1:be:4e:20:63:5b:e8:d5:95:d8:52:03:c5:52:b5:
                    1c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6A:D8:4D:33:F0:92:D4:70:FD:E9:CB:9E:E0:DC:2D:88:C0:18:56
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/72rYTTPwktRw_enLnuDcLYjAGFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:1f:bf:7f:4f:16:32:b1:8d:dc:81:c4:8f:a8:13:d6:d3:27:
         df:b5:37:02:d0:da:59:57:9c:41:c9:b8:c3:8a:d9:8a:8d:64:
         39:f6:a8:58:a5:9d:b5:14:1e:10:a5:68:5d:16:2c:28:43:2b:
         79:c5:fe:09:2d:83:5f:02:d1:eb:db:be:17:61:c5:d7:70:7e:
         6b:f3:f8:9f:ef:86:78:0e:fb:12:7c:69:5e:75:fb:38:71:17:
         ed:66:03:64:15:03:83:3d:1c:c8:16:21:26:91:b4:c2:9e:c9:
         97:49:58:7a:6c:2c:3e:de:10:e6:5b:2e:68:bb:d2:d9:c9:72:
         fd:c2:13:53:43:ff:03:55:94:ee:4d:9e:f8:9b:c2:9d:18:86:
         7a:65:40:ba:cd:d7:18:14:1d:aa:83:34:20:5b:85:78:bf:72:
         12:a0:40:83:2a:ea:6a:cb:9b:08:20:8a:45:62:17:61:48:f2:
         1b:9a:5f:20:62:c8:06:b5:75:8f:77:07:e5:0e:a9:6e:93:99:
         3c:e5:ba:1d:11:c6:a0:c5:2d:23:a2:4b:34:1d:dc:17:78:0f:
         15:12:2f:e0:8a:c3:81:7e:5a:b2:48:d1:3e:29:19:0f:a4:af:
         c0:27:5f:ad:f6:9b:91:8d:e4:19:4b:3d:cd:b0:0c:66:33:50:
         e5:bc:76:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----