Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B5JMguFDBOjPtDqBa30EOMvb2SY.roa
File:                     B5JMguFDBOjPtDqBa30EOMvb2SY.roa (raw, json)
Hash identifier:          U9Opgpol1WD4BHsnqJqdQzrP1/1s7vsDsHt6uFqdYKg=
Subject key identifier:   07:92:4C:82:E1:43:04:E8:CF:B4:3A:81:6B:7D:04:38:CB:DB:D9:26
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184ED328738BEB91E661894C0F3DCFFEF7D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B5JMguFDBOjPtDqBa30EOMvb2SY.roa
Signing time:             Wed 07 Dec 2022 15:27:02 +0000
ROA not before:           Wed 07 Dec 2022 15:27:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200879
IP address blocks:        2a0a:6040:f200::/40 maxlen: 48
                          2a06:a005:25e0::/44 maxlen: 48
                          2a06:a005:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ed:32:87:38:be:b9:1e:66:18:94:c0:f3:dc:ff:ef:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  7 15:27:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=07924c82e14304e8cfb43a816b7d0438cbdbd926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:68:9e:24:d9:77:6c:8f:ea:80:b8:5c:b6:
                    4c:f8:7f:12:2f:38:d2:14:ab:6a:eb:32:16:10:bb:
                    51:fb:95:1c:44:71:aa:66:58:9b:63:77:d0:1d:9c:
                    3b:59:03:39:8c:25:94:05:fc:35:93:b2:84:c7:a2:
                    71:eb:c1:60:12:1b:34:fe:81:10:11:19:f2:0a:f6:
                    9a:ca:6a:02:1b:8b:5b:da:5e:33:d3:fd:69:b9:96:
                    28:59:7a:88:31:e2:73:b6:ae:26:6f:bc:c1:b6:02:
                    df:66:48:2e:46:e9:a1:c9:f1:81:84:7e:83:00:5d:
                    5a:d0:c8:24:c8:24:cb:13:a3:35:0d:6d:fe:aa:4e:
                    6a:1e:df:4e:45:e1:c9:7c:28:51:fd:f0:46:c4:38:
                    f7:4c:57:10:a4:52:17:34:bd:ef:73:3a:15:8d:da:
                    1e:68:42:ec:0b:43:91:79:87:75:3a:e4:99:ce:7f:
                    46:17:b8:08:3a:f9:b8:cb:05:a0:97:67:70:41:99:
                    4d:92:4d:e0:84:14:cc:2b:ea:ea:61:9e:fe:9b:76:
                    2e:ac:57:25:3c:45:8e:b6:7a:37:a9:c4:45:e8:12:
                    e7:45:fd:2e:12:44:a9:b9:5f:1b:27:ca:58:fc:9e:
                    a8:47:26:b9:ec:64:e0:7d:9c:93:b1:fe:ff:d0:aa:
                    a0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:92:4C:82:E1:43:04:E8:CF:B4:3A:81:6B:7D:04:38:CB:DB:D9:26
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B5JMguFDBOjPtDqBa30EOMvb2SY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:6::/48
                  2a06:a005:25e0::/44
                  2a0a:6040:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:12:9e:62:33:84:6c:e2:ca:00:13:9c:54:25:75:63:b5:2d:
         8a:9c:f9:52:48:d4:54:f5:a4:bf:4a:65:1f:4d:e5:60:6a:d3:
         ca:92:93:38:b0:87:8d:90:da:37:b5:97:a6:70:68:81:ef:8d:
         f8:85:3b:99:62:f8:a2:9a:ce:5e:22:1b:c9:77:25:d9:4a:fb:
         c4:34:ef:f0:e2:52:d6:e3:49:f1:70:4b:eb:cc:63:49:19:b2:
         ee:16:68:79:b0:4c:6e:58:58:6b:e4:34:30:b3:b6:95:7a:e7:
         4e:fc:64:40:3f:91:73:dc:aa:52:a2:ee:1f:fb:5e:82:17:c6:
         b5:06:c3:66:2d:ca:33:2e:47:78:a6:c6:05:ee:8e:c7:65:ab:
         9e:05:be:f0:9e:4d:f9:43:be:c9:9b:95:b7:a4:dc:d2:9c:0a:
         e8:cc:b8:84:4a:8a:cb:79:f4:8b:29:50:f7:c4:ca:43:cd:af:
         cd:69:ae:ce:b2:1c:20:c3:5b:89:41:fe:89:9c:7e:93:f9:20:
         4b:0c:3f:3c:94:19:ca:99:79:91:5a:ec:52:64:d2:0b:17:e3:
         b5:b6:54:75:54:53:f7:81:1b:2a:cb:b7:c6:b4:a7:c6:31:e0:
         eb:85:42:2a:d9:94:ae:ca:67:d7:c6:e1:6a:cb:52:a8:67:70:
         c1:19:a3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----