Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9Ll4g80cam1seozqSJ2VaRdvGIs.roa
File:                     9Ll4g80cam1seozqSJ2VaRdvGIs.roa (raw, json)
Hash identifier:          Ue5K52flJrxB74xWCarns7Jzzd7Bq24PYC8ePmIQHPc=
Subject key identifier:   F4:B9:78:83:CD:1C:6A:6D:6C:7A:8C:EA:48:9D:95:69:17:6F:18:8B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184E2367151DDC65A56353303D39AAA5672
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9Ll4g80cam1seozqSJ2VaRdvGIs.roa
Signing time:             Mon 05 Dec 2022 12:15:29 +0000
ROA not before:           Mon 05 Dec 2022 12:15:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200890
IP address blocks:        2a0a:6040:d400::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e2:36:71:51:dd:c6:5a:56:35:33:03:d3:9a:aa:56:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  5 12:15:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f4b97883cd1c6a6d6c7a8cea489d9569176f188b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:17:2f:4e:42:9e:68:43:8e:c0:36:30:7c:35:
                    df:e1:5c:3c:4d:47:56:12:cf:11:8a:77:39:14:7c:
                    76:9f:d2:8e:e5:43:f4:1b:98:e4:35:6e:ae:43:2d:
                    98:51:db:df:1e:40:b9:13:0f:43:16:c1:2d:fe:19:
                    9a:f9:31:16:c7:f5:03:fb:a4:fe:15:58:3d:e0:ae:
                    15:19:c5:44:4f:b4:f5:27:92:30:e1:e4:fe:b7:28:
                    e4:a6:19:4f:98:73:fc:ee:31:7e:25:25:9a:89:c9:
                    3c:de:1b:eb:08:7e:4d:e8:fe:30:46:90:c6:ef:65:
                    66:64:69:c5:9a:78:ad:e4:22:78:f7:1e:d1:1f:30:
                    d4:bf:11:43:02:e1:d1:2d:e6:64:fe:be:8e:d5:e2:
                    4d:f0:32:b5:58:37:17:f7:7c:5b:b9:bf:95:66:55:
                    84:e1:d2:e7:40:1f:97:6b:06:ca:65:b2:1d:7d:df:
                    c9:93:14:fb:31:f0:c5:82:df:62:02:aa:cd:24:30:
                    f4:ce:fe:21:16:bd:37:2b:62:c2:11:18:98:f3:e5:
                    96:64:62:51:0d:72:bf:ec:3a:ac:dc:7c:dc:ca:66:
                    b4:93:31:81:f0:af:58:60:09:b7:03:ff:a6:b8:fc:
                    7c:ff:0f:8c:75:3a:d8:97:08:92:b6:ff:a5:f8:5d:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B9:78:83:CD:1C:6A:6D:6C:7A:8C:EA:48:9D:95:69:17:6F:18:8B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9Ll4g80cam1seozqSJ2VaRdvGIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:d400::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:64:dd:7e:0d:25:5f:c0:73:14:94:f4:6f:08:3b:ea:55:
         0d:bd:47:4f:60:13:6e:3d:c5:7f:87:35:f7:49:44:40:b5:4c:
         bc:a9:4b:1f:46:e6:7c:5c:80:3c:be:3b:dc:b8:c1:32:b9:71:
         91:9c:91:3e:f2:de:ab:c7:fb:9e:2a:63:03:a9:c6:8c:6f:3e:
         57:ca:94:75:a8:9e:20:16:71:73:91:08:dc:4d:80:51:59:26:
         36:02:48:b4:d1:df:86:f4:70:d7:84:3f:ef:06:c8:22:ed:99:
         5f:8f:ec:91:a1:35:de:5c:04:a1:eb:f1:13:b9:9c:ab:13:dc:
         2a:30:68:02:7a:9d:cf:59:48:59:29:25:17:7c:88:a5:1d:fb:
         ba:6e:99:c6:14:db:9d:6d:de:fb:15:a8:82:c4:34:9e:a2:81:
         5a:a1:2e:77:a6:a7:aa:1a:8f:49:4b:28:18:da:56:9c:62:10:
         a4:b5:4b:79:f4:d8:f6:38:8c:8a:4b:7b:4d:42:ef:95:85:05:
         58:35:d2:89:75:55:c0:98:81:6e:8d:be:cf:28:97:bb:97:ed:
         a3:35:2a:bc:da:bf:d8:45:06:85:b2:ac:87:6c:6b:99:a5:6e:
         db:4d:a6:63:5e:f6:67:b6:83:45:fd:8f:bc:1d:ec:73:c6:c5:
         e0:57:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----