Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9ed8F3uSnnV78YSgFq0leU8oYjw.roa
File:                     9ed8F3uSnnV78YSgFq0leU8oYjw.roa (raw, json)
Hash identifier:          Eq77hgmDMXSjDtQ6F26lWk4B2kjdShE/hWeW+ABZqi0=
Subject key identifier:   F5:E7:7C:17:7B:92:9E:75:7B:F1:84:A0:16:AD:25:79:4F:28:62:3C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1736E9A2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9ed8F3uSnnV78YSgFq0leU8oYjw.roa
Signing time:             Sun 27 Mar 2022 03:03:51 +0000
ROA not before:           Sun 27 Mar 2022 03:03:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57429
IP address blocks:        2a06:a005:190::/44 maxlen: 48
                          2a06:a005:1a0::/44 maxlen: 48
                          2a06:a005:1b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389474722 (0x1736e9a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Mar 27 03:03:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f5e77c177b929e757bf184a016ad25794f28623c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:d2:a6:fa:d1:b7:49:f9:ba:09:9c:22:6a:
                    20:43:6d:9f:c0:2f:23:33:a3:a2:df:24:d3:3b:b0:
                    73:5c:96:ec:83:e6:f4:3b:eb:31:ab:9e:8d:2a:55:
                    21:8b:6f:7c:b1:14:88:64:cf:aa:7f:4b:3d:a6:7a:
                    4e:1f:db:0f:11:05:af:8c:e6:f0:7c:62:c7:8f:95:
                    80:14:9d:d6:0c:1c:6f:99:8d:64:d1:14:a5:c8:da:
                    c3:7a:71:85:b7:6d:74:0e:8f:a6:a0:5d:14:c8:a4:
                    84:a2:19:3a:18:d9:13:71:e3:47:ea:19:67:c0:3a:
                    c0:70:b1:46:9d:f4:a6:01:9c:db:0e:a2:32:ce:9e:
                    3b:fe:97:98:04:aa:4a:26:3a:e5:fc:3e:c7:73:e4:
                    53:6b:85:00:ba:19:98:bc:0b:e5:57:34:ac:9f:b8:
                    5b:b5:e7:24:6d:e7:09:73:97:da:5b:ba:64:36:41:
                    fc:33:71:a2:1b:c4:2c:09:0b:19:95:12:21:9f:98:
                    4c:d8:69:98:a9:8e:45:f6:3d:0c:75:21:99:57:d5:
                    c1:10:2a:6a:a9:5a:2e:70:a8:ba:fb:0f:5a:4e:30:
                    27:23:55:53:64:cd:51:68:b7:ea:6f:67:bf:23:b5:
                    7d:a9:46:33:25:6a:e5:a7:62:0e:97:ab:06:bb:a9:
                    e5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E7:7C:17:7B:92:9E:75:7B:F1:84:A0:16:AD:25:79:4F:28:62:3C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9ed8F3uSnnV78YSgFq0leU8oYjw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:190::-2a06:a005:1bf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         55:79:71:be:da:28:a0:9f:7b:bd:98:62:b6:40:7f:34:62:72:
         bc:99:56:f9:3e:72:0d:17:2e:17:3e:0f:51:7f:8a:4e:e4:65:
         c6:4b:42:63:0f:0a:ac:46:ea:e1:83:c2:e0:4d:98:fd:d5:01:
         3c:00:c3:9e:7e:10:f3:3c:12:0e:49:a8:d4:2b:1e:66:29:c7:
         ef:86:48:4c:a6:c4:71:87:73:4a:10:eb:3c:56:3b:ab:1d:d4:
         44:88:81:de:78:f7:75:d5:b7:b8:33:da:eb:2d:fd:5b:7d:f8:
         03:7e:7e:c3:53:1f:02:12:2b:63:88:24:67:93:f7:74:ac:1a:
         35:ec:e8:e4:ce:a0:4d:c9:47:df:4e:d6:b7:52:bb:6d:88:cb:
         58:a5:c2:90:ec:5a:82:ce:84:75:e4:61:82:fe:4b:d9:b6:09:
         e6:40:5e:a5:3d:a1:13:a3:87:0d:db:49:e3:f3:a1:e6:34:67:
         69:e2:6d:cd:df:1d:63:37:d7:08:91:57:3c:e0:2e:dd:fc:57:
         7d:e5:f2:23:d1:6f:65:18:49:7f:1a:bc:eb:e2:de:95:cb:1b:
         56:9c:15:b5:14:46:c0:ca:57:e3:1a:35:ae:df:f5:32:45:6a:
         79:7e:f2:75:7f:3c:25:19:cb:ac:9c:09:3d:56:6f:d1:4a:76:
         5c:8e:8d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----