Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BW54kZwztaEwzeyjY2LT1sPeMf8.roa
File:                     BW54kZwztaEwzeyjY2LT1sPeMf8.roa (raw, json)
Hash identifier:          N4LQrwGEWdwkoXPRqEPXGM9sHAFym5SjpomHqObefVM=
Subject key identifier:   05:6E:78:91:9C:33:B5:A1:30:CD:EC:A3:63:62:D3:D6:C3:DE:31:FF
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182709D28901AD310EAAF5671FE1F5AA241
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BW54kZwztaEwzeyjY2LT1sPeMf8.roa
Signing time:             Sat 06 Aug 2022 00:45:23 +0000
ROA not before:           Sat 06 Aug 2022 00:45:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209806
IP address blocks:        2a06:a005:1640::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:70:9d:28:90:1a:d3:10:ea:af:56:71:fe:1f:5a:a2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  6 00:45:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=056e78919c33b5a130cdeca36362d3d6c3de31ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:66:3d:62:da:7e:60:c4:d8:66:3a:94:2c:
                    c3:a4:94:92:70:47:3b:d6:e0:b7:ec:01:a6:0d:74:
                    86:92:66:7c:07:d8:d2:3e:94:e0:7d:3f:22:18:6a:
                    49:95:2b:58:6c:5f:4d:f4:9a:39:ba:c9:87:c8:d2:
                    10:56:b3:58:d1:f9:35:95:a9:74:ec:9c:29:c2:ad:
                    c8:01:3a:72:4a:4c:9c:03:d6:5a:44:2e:d4:8c:6c:
                    e0:c0:25:8c:07:61:4c:7b:a0:de:9c:f2:d6:8c:26:
                    0f:9a:32:e8:1c:8d:8c:c6:db:50:db:1f:11:d1:0d:
                    54:6a:b3:7f:a2:38:d4:84:34:41:42:91:25:21:cd:
                    34:99:e8:99:6d:ea:42:8f:72:2a:33:4d:ad:7e:6e:
                    a4:8b:d5:22:65:1e:5f:c1:1c:95:88:54:fd:31:61:
                    7b:4b:9c:dd:e0:ab:e8:db:fb:d3:1c:1f:60:a6:f2:
                    ad:4b:4e:00:b1:b3:0a:f4:8e:88:d2:90:ab:48:cf:
                    fe:52:d6:41:20:f2:0b:16:85:3a:4d:7a:8c:aa:ff:
                    39:1e:33:bc:03:14:3b:d3:40:0f:df:cd:97:2a:82:
                    cf:1a:9f:6d:96:b4:8f:14:cb:e7:15:03:a7:f2:2c:
                    c0:76:b7:f7:39:34:2c:2c:97:eb:0e:62:c2:d3:a9:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6E:78:91:9C:33:B5:A1:30:CD:EC:A3:63:62:D3:D6:C3:DE:31:FF
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BW54kZwztaEwzeyjY2LT1sPeMf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1640::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:a4:b3:dd:fe:62:f7:d0:d4:fd:68:2d:0a:ef:47:54:9b:94:
         cd:35:46:04:53:25:70:ce:09:eb:8d:75:37:b5:d9:34:97:c2:
         02:d4:7d:0f:ff:77:05:67:d5:57:84:e5:db:19:01:64:8d:b2:
         3d:51:ea:33:4e:27:20:31:7a:bb:3d:15:94:5e:6f:96:3e:8b:
         2f:6d:ec:f7:5d:1e:72:82:eb:65:79:5d:bc:f4:97:95:54:a8:
         36:15:80:45:71:64:0a:51:09:87:23:79:30:9c:b4:17:bb:05:
         65:cc:f3:3c:a5:db:26:4c:d9:8e:ce:f8:ac:3d:bb:63:8a:da:
         f5:07:78:9f:51:1b:aa:51:6f:b2:34:05:79:29:a9:95:fe:bd:
         1a:5b:ea:b3:36:58:d9:41:e0:6a:4b:e3:ab:68:e3:2a:04:74:
         f1:65:19:03:f0:48:34:3d:12:02:f7:4d:08:d7:5b:8c:eb:b1:
         6f:c5:ab:48:3b:26:69:d3:91:d7:d5:74:6e:e5:88:c8:b4:e6:
         b4:87:50:7b:9b:d6:b1:a8:34:11:14:bc:24:6c:58:fc:45:47:
         61:cf:23:bf:2e:ba:29:3c:ca:dd:ac:39:97:35:96:cf:27:b1:
         a9:2b:46:1b:0e:62:e9:89:f3:42:3d:27:b7:c6:f2:5f:51:dd:
         2d:d9:aa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----