Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8AK9Rly9mmdmw5DWzAUGOL-SL-I.roa
File:                     8AK9Rly9mmdmw5DWzAUGOL-SL-I.roa (raw, json)
Hash identifier:          zDgy2RQ4Z1lubVpMhJv4dndEts6SACQNnVPomyPdKdA=
Subject key identifier:   F0:02:BD:46:5C:BD:9A:67:66:C3:90:D6:CC:05:06:38:BF:92:2F:E2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018332F9BB705F3860FFDFE9EF9995561266
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8AK9Rly9mmdmw5DWzAUGOL-SL-I.roa
Signing time:             Mon 12 Sep 2022 18:32:50 +0000
ROA not before:           Mon 12 Sep 2022 18:32:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208029
IP address blocks:        2a06:a005:5e1::/48 maxlen: 48
                          2a06:a005:d2b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:32:f9:bb:70:5f:38:60:ff:df:e9:ef:99:95:56:12:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 12 18:32:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f002bd465cbd9a6766c390d6cc050638bf922fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2f:31:c4:5a:02:24:dc:5f:de:db:0e:2b:ac:
                    45:76:4a:15:8f:3f:8f:5d:7a:c6:f0:9a:9e:3e:c6:
                    df:a1:5a:61:c5:c3:f8:9a:be:18:3b:b6:91:6f:3f:
                    cf:18:56:5d:c3:6c:b5:3e:a9:3e:a3:f3:8e:32:25:
                    44:e0:87:a1:e5:42:ec:74:f4:db:d4:12:23:1c:01:
                    d9:2f:ec:8a:7c:cc:4d:64:77:04:a6:27:fa:f8:34:
                    92:bf:4c:ca:f8:89:e4:c0:5a:d7:1d:8a:6c:9a:0b:
                    d2:b2:62:ee:c9:f8:3a:fd:63:13:d7:28:c9:05:e9:
                    fb:6d:01:30:23:dc:e8:40:f5:56:a6:7f:42:38:74:
                    a9:b2:23:39:e2:55:ae:9b:bf:7a:a4:e7:47:a1:fa:
                    14:a9:05:1c:8d:bf:16:4d:2c:e2:1b:06:25:97:ea:
                    66:78:43:95:65:b0:6f:a8:71:20:47:3d:b9:04:54:
                    8c:54:10:6e:02:44:e9:0f:09:b0:f1:c2:22:26:a3:
                    fa:35:d5:e0:ff:a3:55:be:70:2a:6b:41:df:71:a9:
                    c1:bf:f7:d7:b2:52:70:a6:a7:7c:b7:5e:a3:27:af:
                    10:c5:ed:47:6c:1e:ae:8d:a2:3f:43:08:dd:5a:15:
                    98:1d:f8:64:45:15:e8:e6:3c:1c:9b:97:00:85:8b:
                    94:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:02:BD:46:5C:BD:9A:67:66:C3:90:D6:CC:05:06:38:BF:92:2F:E2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8AK9Rly9mmdmw5DWzAUGOL-SL-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5e1::/48
                  2a06:a005:d2b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:48:ad:94:4a:da:3d:f9:08:4d:33:9b:e3:17:52:19:ec:8f:
         bc:2e:ea:26:2b:50:62:cc:87:d8:75:d6:16:2b:77:b1:2b:61:
         ba:27:12:50:5e:c7:e3:48:9f:27:16:4f:01:78:c1:be:af:05:
         7f:1b:16:6e:2e:78:bc:0e:b3:0f:8e:45:40:0d:83:c2:af:e3:
         ba:2f:d6:c3:b9:af:f9:fc:87:3a:fe:80:87:9c:7a:2e:d1:aa:
         7a:4d:2d:82:90:08:4c:a6:94:c2:a8:e1:05:ed:d7:6b:a9:36:
         cf:24:ab:64:c8:b2:c8:07:84:37:7a:29:fd:e2:64:cf:22:e1:
         be:ff:d5:fb:8d:4f:03:ac:dc:05:76:60:56:73:b7:6a:db:63:
         9e:c6:22:cf:6e:a5:26:48:57:77:bc:b8:22:63:3c:0a:d1:0b:
         38:b9:3b:65:09:0d:66:32:e8:18:4c:1b:db:a9:0d:34:4c:0b:
         4e:56:03:58:f0:d7:93:d7:d3:84:39:51:fa:26:5b:41:32:55:
         e2:85:2f:e4:56:10:aa:26:b9:10:dc:99:79:8b:49:88:f0:cc:
         13:64:ba:f9:d0:ac:a8:ba:0a:94:a9:93:59:ed:f0:3f:86:f7:
         34:bc:39:7e:cc:46:61:c5:02:3c:b5:a3:6b:ce:2a:5d:1c:f8:
         dc:c4:23:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----