Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C9hrFc-z1XwAwRM-y1r2Vk_7klw.roa
File:                     C9hrFc-z1XwAwRM-y1r2Vk_7klw.roa (raw, json)
Hash identifier:          QhA3L4lkMaxWJBvDk3UoaU4RVx35Fa7QHFYjsW2AAOk=
Subject key identifier:   0B:D8:6B:15:CF:B3:D5:7C:00:C1:13:3E:CB:5A:F6:56:4F:FB:92:5C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183BF3321760095D26CE7A2F78CAEAC7D45
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C9hrFc-z1XwAwRM-y1r2Vk_7klw.roa
Signing time:             Mon 10 Oct 2022 00:02:22 +0000
ROA not before:           Mon 10 Oct 2022 00:02:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60474
IP address blocks:        2a06:a005:1a70::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:bf:33:21:76:00:95:d2:6c:e7:a2:f7:8c:ae:ac:7d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 10 00:02:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0bd86b15cfb3d57c00c1133ecb5af6564ffb925c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f3:5c:f3:eb:47:f8:17:34:cb:5a:ae:6d:84:
                    42:55:51:78:b7:52:68:a1:ad:4d:fa:46:97:bc:34:
                    75:10:9c:af:cf:a0:e0:50:90:75:0e:51:7b:e1:22:
                    00:bc:c4:10:b8:46:25:f9:eb:ca:03:46:83:37:1b:
                    f9:da:2e:a8:94:0c:4f:1d:6f:79:5b:d0:3b:d7:5b:
                    b7:42:39:4b:e8:16:4c:a0:db:52:8b:a9:09:a8:92:
                    95:a1:39:5f:86:98:67:41:42:66:4c:fb:a9:19:20:
                    fd:f7:1d:3a:d1:8a:29:54:f9:4e:8f:d1:fd:3e:23:
                    fe:1b:78:ba:87:cf:a7:1b:4d:a8:e5:3b:48:2a:70:
                    e2:42:af:29:87:59:10:7b:d5:d9:2b:72:3a:a2:9f:
                    2f:fc:e4:b9:59:0f:b4:0a:97:01:84:cc:38:8c:27:
                    64:b9:58:98:a5:02:f3:44:90:81:ca:52:dd:10:93:
                    1c:52:d3:94:b5:9c:ef:2c:d2:f9:ce:21:9d:93:01:
                    25:a1:be:12:00:27:cf:f7:6a:a7:4e:f8:c7:63:f4:
                    25:0f:43:98:df:3d:14:15:39:c1:c6:70:09:6e:12:
                    a0:8e:0e:a8:d2:d1:34:aa:f1:e5:73:79:ee:ac:4c:
                    c2:8f:39:90:38:d9:a2:24:c3:bf:53:d1:6d:68:05:
                    63:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D8:6B:15:CF:B3:D5:7C:00:C1:13:3E:CB:5A:F6:56:4F:FB:92:5C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C9hrFc-z1XwAwRM-y1r2Vk_7klw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1a70::/44

    Signature Algorithm: sha256WithRSAEncryption
         59:8c:f2:8f:75:75:8b:ea:fd:bf:ba:14:64:32:d0:c6:15:5a:
         e8:4e:7f:83:5f:e1:4b:75:24:9a:71:39:d3:f1:e7:51:64:6e:
         4e:ca:fc:13:27:dc:e8:5e:e8:f4:99:f5:62:d5:cd:7d:08:1f:
         8e:ea:67:63:8b:8a:d4:12:52:42:d6:b8:e6:f4:76:8e:16:14:
         ef:56:af:ee:d6:08:3d:c7:66:bc:37:1d:bc:f0:80:d0:b9:88:
         7c:51:26:8a:b3:9b:61:f0:b4:d1:e2:1e:ec:e1:9c:cf:7e:fb:
         b7:77:77:3c:8e:fd:73:67:1a:8f:f9:33:3e:6b:7a:f4:4a:87:
         c0:51:70:be:03:ff:43:42:80:21:5f:d5:02:6c:87:48:d9:7d:
         8b:2b:74:53:1f:bd:08:94:ae:e3:06:85:f7:f2:f5:82:9e:b7:
         5a:b2:38:70:30:39:fe:c5:94:35:dd:45:50:bd:6f:86:c1:c1:
         46:fa:db:e1:9a:a5:98:b4:4b:57:66:d0:3e:d2:86:5a:4e:41:
         18:33:20:6c:21:e2:06:54:1c:79:32:23:af:45:f2:b7:da:78:
         13:fa:07:9f:14:15:cd:b2:b4:9e:12:ae:6f:02:5f:e4:86:0c:
         a4:ff:60:8a:5d:b9:c9:80:41:ed:5a:96:ab:a6:02:e8:12:64:
         fe:74:70:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----