Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BxwpviCl2gCN-g5FJWT523WBlYs.roa
File:                     BxwpviCl2gCN-g5FJWT523WBlYs.roa (raw, json)
Hash identifier:          L4AznPIF2ugaLZjowrccW0JYeEYrB8NLGQ1/opi24w4=
Subject key identifier:   07:1C:29:BE:20:A5:DA:00:8D:FA:0E:45:25:64:F9:DB:75:81:95:8B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       17080A3B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BxwpviCl2gCN-g5FJWT523WBlYs.roa
Signing time:             Sun 27 Mar 2022 01:37:35 +0000
ROA not before:           Sun 27 Mar 2022 01:37:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9267
IP address blocks:        2a06:a005:170::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386402875 (0x17080a3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Mar 27 01:37:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=071c29be20a5da008dfa0e452564f9db7581958b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:5f:aa:5f:e6:e3:e7:bd:70:cf:cd:73:ca:
                    04:68:23:2c:91:9e:c0:34:a0:09:73:92:ab:73:be:
                    a0:38:f3:a5:8d:fb:0d:4d:dd:72:bd:d9:5d:25:67:
                    b1:62:af:59:c6:93:01:c6:b9:8b:4e:2f:9f:7f:02:
                    27:44:8a:26:cb:ff:3f:bf:05:be:1d:0d:14:6d:7c:
                    0c:21:91:bc:da:43:0d:3f:22:29:c9:34:fb:7e:6b:
                    73:5d:be:29:ef:79:3b:7c:ec:26:d0:4b:51:79:59:
                    c6:a4:27:b7:d1:af:ab:fd:22:6b:b5:3a:9f:51:60:
                    85:bd:49:bd:6d:d1:ab:0a:ef:50:61:59:f8:f7:68:
                    27:6f:55:59:b3:89:2b:28:95:2b:98:0a:60:d9:9b:
                    4f:dd:96:59:9a:97:1a:68:0a:14:45:dc:ca:7b:b3:
                    9f:61:aa:4f:4f:ef:3b:06:46:d6:2e:50:66:57:88:
                    1f:20:9b:a1:d5:7b:27:8e:af:17:ef:aa:6f:9f:10:
                    49:a9:74:82:34:fd:17:d3:fa:a3:1d:e6:e6:d3:d2:
                    8a:e9:fe:86:a4:fe:a9:93:23:96:21:a7:8f:06:61:
                    39:f4:4a:35:44:6a:03:b5:0b:4b:59:97:69:b2:73:
                    40:bc:09:5f:df:06:17:dc:30:86:87:00:39:51:a7:
                    a8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1C:29:BE:20:A5:DA:00:8D:FA:0E:45:25:64:F9:DB:75:81:95:8B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BxwpviCl2gCN-g5FJWT523WBlYs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:170::/44

    Signature Algorithm: sha256WithRSAEncryption
         03:78:b3:8e:c8:45:69:dc:1c:5d:64:63:c7:71:54:da:3a:f3:
         92:43:02:54:16:dc:52:45:bf:c6:68:3f:f2:a2:6c:fb:e0:eb:
         ad:1c:d6:de:f9:fe:13:3a:ef:d8:97:41:c8:5f:d3:ea:b6:dc:
         a9:7a:09:db:df:85:3f:16:3a:40:7a:8d:f0:39:f5:a1:34:7a:
         2b:8c:75:37:28:88:14:58:25:ae:ad:f7:f0:61:01:06:ac:ae:
         42:c8:94:ee:7d:18:1d:51:1c:29:b0:a7:3e:e8:c3:f8:1d:04:
         6f:19:b8:04:9f:d4:89:80:26:73:a3:88:1d:8d:b2:77:84:e0:
         f3:87:b3:6d:54:e2:1e:96:e9:b5:b3:36:dd:9d:17:80:74:72:
         2f:8b:c4:39:90:9e:c8:1b:25:47:e5:64:92:e8:13:92:99:e5:
         e7:8f:22:40:a1:64:7c:e5:c0:00:20:1b:9a:c8:a4:22:0a:ec:
         df:1a:c3:6f:b1:ae:31:e6:1b:5d:c0:f6:d8:37:8d:20:21:93:
         b5:dd:f6:c1:75:cd:9f:6f:20:75:f2:ce:0b:cc:ab:b8:00:fc:
         98:26:ab:0a:27:b0:d0:99:5d:16:bc:71:95:88:1e:96:c3:c5:
         05:e4:d4:eb:6d:2b:81:1c:9a:9c:da:bc:7c:a1:29:20:8c:cb:
         aa:4e:06:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----