Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8laBtoNMd2Ok1VwJ79Mb5U1iGx0.roa
File:                     8laBtoNMd2Ok1VwJ79Mb5U1iGx0.roa (raw, json)
Hash identifier:          rHXMVZHIl9xkaHvi3GWQlXUO6246vg6XY862MVWbitg=
Subject key identifier:   F2:56:81:B6:83:4C:77:63:A4:D5:5C:09:EF:D3:1B:E5:4D:62:1B:1D
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01845E252AD911D3B760B5B69D5E0FD1E869
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8laBtoNMd2Ok1VwJ79Mb5U1iGx0.roa
Signing time:             Wed 09 Nov 2022 20:46:44 +0000
ROA not before:           Wed 09 Nov 2022 20:46:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203113
IP address blocks:        2a06:a005:2260::/44 maxlen: 48
                          2a06:a005:2250::/44 maxlen: 48
                          2a06:a005:8c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5e:25:2a:d9:11:d3:b7:60:b5:b6:9d:5e:0f:d1:e8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov  9 20:46:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f25681b6834c7763a4d55c09efd31be54d621b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:b9:51:66:50:c9:67:06:15:d3:49:1a:d0:
                    ee:da:cb:b1:25:4a:50:41:a0:28:4d:16:fe:bb:d9:
                    08:fa:bb:6c:17:e1:3a:82:58:f7:bc:f6:8d:ea:c9:
                    fb:95:c7:56:03:bc:b9:7a:f3:17:f7:4d:2a:32:bf:
                    8d:55:f2:94:11:08:e1:9c:6e:bf:ef:8b:f5:a1:5a:
                    f4:45:37:bb:be:55:d1:79:23:95:8b:6a:87:4b:d6:
                    7d:03:21:91:91:d4:75:e7:03:f6:cc:b4:27:c2:80:
                    ec:50:f5:5a:a4:67:7f:42:6e:71:c3:53:ef:29:3b:
                    f6:ed:cb:6f:0d:b5:6d:f7:86:48:e0:0e:d3:5f:4f:
                    ad:dc:d2:6f:00:a8:d0:bf:19:03:66:f8:dd:c8:a2:
                    a9:3d:eb:7a:95:17:30:ab:99:0c:78:67:af:b3:24:
                    71:c2:e4:ae:29:fb:51:39:ee:ca:07:32:1e:e2:92:
                    2d:8e:58:84:1e:5c:c7:2c:8d:74:48:6d:cc:7e:7a:
                    5c:ba:65:bc:1b:bd:95:1d:67:a3:98:95:c7:95:e1:
                    b0:d6:de:dc:18:8f:69:2f:14:d6:21:cb:62:fa:24:
                    9f:92:9f:31:12:03:85:6a:ae:2f:cf:2d:a1:ea:cd:
                    20:30:32:98:5b:9c:7a:fa:9d:9e:a3:23:43:0d:80:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:56:81:B6:83:4C:77:63:A4:D5:5C:09:EF:D3:1B:E5:4D:62:1B:1D
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8laBtoNMd2Ok1VwJ79Mb5U1iGx0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:8c0::/44
                  2a06:a005:2250::-2a06:a005:226f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         43:b0:b4:80:ab:2e:d3:df:01:26:24:e2:e3:ab:64:0a:f2:9e:
         db:aa:b0:f9:31:52:41:2a:e0:54:16:46:27:98:d2:9b:1f:0b:
         60:71:99:db:c2:34:3d:47:00:3d:16:c1:64:51:15:80:6a:b1:
         f9:8a:71:20:4d:b1:ac:11:aa:b4:b4:13:85:24:2d:f4:8f:b2:
         f6:f9:d2:52:15:7c:74:d4:ce:b5:96:18:cc:8b:0d:80:92:de:
         17:e9:26:49:74:d2:c7:fa:c6:ff:4e:a8:e3:e1:f4:56:a0:b4:
         bc:66:d0:a5:5c:2e:1f:b6:62:b1:23:cb:db:26:71:29:58:60:
         48:e0:b2:e3:42:5e:0f:23:d1:39:0c:b9:a8:55:7f:da:47:dd:
         b0:7f:ec:9c:6c:25:ad:86:e3:0f:07:3c:aa:4b:d0:10:7b:7c:
         10:42:ec:83:9c:1b:58:f8:89:df:1d:e5:aa:2d:51:98:03:36:
         6a:3a:07:7a:16:ec:d4:6f:9d:ac:a2:b8:10:e1:7f:2c:a2:f9:
         f4:d7:99:b1:29:c2:2e:af:ab:51:53:a5:60:86:38:7b:22:85:
         38:fb:85:a4:f4:19:ad:80:f6:b8:f1:84:ef:63:b1:99:13:1c:
         f4:d1:9a:74:e2:85:d5:a1:33:74:4d:23:a6:45:f0:0d:2b:55:
         5d:a0:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----