Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AnFohNRtZf1IjS6l5E7DwttqX_c.roa
File:                     AnFohNRtZf1IjS6l5E7DwttqX_c.roa (raw, json)
Hash identifier:          ZE+oriw9P3ovcoI2nZJecv5crZb1NLA19LxfR4SXgpU=
Subject key identifier:   02:71:68:84:D4:6D:65:FD:48:8D:2E:A5:E4:4E:C3:C2:DB:6A:5F:F7
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182D634A3F68E7B390855040CFAA2E578FD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AnFohNRtZf1IjS6l5E7DwttqX_c.roa
Signing time:             Thu 25 Aug 2022 18:12:30 +0000
ROA not before:           Thu 25 Aug 2022 18:12:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203333
IP address blocks:        2a06:a005:18d0::/44 maxlen: 48
                          2a06:a005:1860::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d6:34:a3:f6:8e:7b:39:08:55:04:0c:fa:a2:e5:78:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 25 18:12:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02716884d46d65fd488d2ea5e44ec3c2db6a5ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:28:35:f9:d8:80:bf:bb:ab:cc:90:25:13:
                    c8:17:4e:7f:1c:13:34:0f:a2:76:b8:55:23:b0:2b:
                    6f:ed:4c:54:84:df:88:41:0e:94:64:1d:d8:3d:2b:
                    08:24:ab:3e:a5:c3:8e:19:99:17:98:d4:83:8a:5f:
                    03:ff:8a:1f:60:73:9f:08:fd:45:f9:89:18:5a:bb:
                    45:5e:76:89:19:b9:03:01:2b:75:ee:12:f7:96:c3:
                    9e:f3:a7:70:e1:2d:90:f5:18:9e:12:d6:c8:5d:73:
                    05:ff:4f:09:59:62:cd:b2:f2:07:3c:85:20:fa:37:
                    ba:bb:63:1f:d0:be:59:16:0c:51:7f:24:b1:30:92:
                    e9:3f:ae:ba:c1:0a:d6:d2:d5:f8:5c:b1:17:e7:7e:
                    27:7e:11:8e:30:7a:70:fb:c8:7b:b6:ba:a5:b4:c5:
                    f9:4e:15:dd:bb:27:39:bb:9a:c5:da:dd:de:ae:a4:
                    1b:84:b1:6d:1c:ce:71:dc:35:a8:64:dd:a3:f9:90:
                    c1:cf:a5:73:4b:0a:6e:7e:20:0a:3e:83:37:47:9f:
                    02:7f:bf:af:82:f4:c8:f3:be:18:ca:c4:7e:67:da:
                    e0:95:a0:cb:9d:1f:35:d7:27:01:21:c1:27:ee:a5:
                    3a:34:fc:78:c3:3c:be:11:d2:6f:2e:53:5b:29:fd:
                    07:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:71:68:84:D4:6D:65:FD:48:8D:2E:A5:E4:4E:C3:C2:DB:6A:5F:F7
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AnFohNRtZf1IjS6l5E7DwttqX_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1860::/44
                  2a06:a005:18d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         90:c7:23:ca:98:31:e1:95:0c:dd:26:65:6d:01:cf:43:07:55:
         09:e7:7e:db:87:fc:6e:35:d0:36:f7:31:6f:e1:14:9e:bc:c3:
         e8:a7:41:30:1c:a3:e0:7a:38:44:fd:e2:e4:6b:2f:ac:50:e4:
         db:49:93:10:10:11:20:5d:bc:98:ce:64:eb:d8:d6:11:a2:2b:
         fb:1a:72:c8:9d:2b:13:be:27:64:58:5a:34:c9:c1:32:88:fb:
         a4:c6:5a:80:0f:e0:f2:d4:50:f2:7a:75:4e:45:18:b9:d2:af:
         1f:57:e4:a4:9d:bc:27:e8:5d:7e:93:3d:21:f6:1c:68:e4:8c:
         6a:bf:ed:53:aa:dd:da:6b:e2:c5:38:4b:67:77:4d:29:f8:a9:
         84:a6:e1:53:8e:2a:e2:74:35:c4:ac:c8:c2:82:cb:69:04:e3:
         a1:35:70:5e:7c:5d:81:ba:01:af:5b:a7:d9:17:3c:9c:0a:c1:
         34:6b:dc:36:67:d3:08:28:d8:1d:59:01:9a:8d:54:8c:74:8a:
         e4:0f:b9:a8:d3:31:d7:a5:6a:03:fe:bd:18:51:49:25:23:1d:
         f6:a3:ab:20:bb:11:5c:34:01:db:0a:29:ca:ac:53:f8:7e:5e:
         6d:6b:7b:56:c2:b0:6f:8b:1d:fa:2c:dc:b9:c4:5b:2f:12:93:
         3f:e1:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----