Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CMX_DHJeBkdWbOUhWjsrUVSrZE4.roa
File:                     CMX_DHJeBkdWbOUhWjsrUVSrZE4.roa (raw, json)
Hash identifier:          /AG8xm0muhSCeRUFrWc/00kzImICEfyUq3khpz1rSpA=
Subject key identifier:   08:C5:FF:0C:72:5E:06:47:56:6C:E5:21:5A:3B:2B:51:54:AB:64:4E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B17B1F2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CMX_DHJeBkdWbOUhWjsrUVSrZE4.roa
Signing time:             Mon 20 Jun 2022 19:55:45 +0000
ROA not before:           Mon 20 Jun 2022 19:55:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209263
IP address blocks:        2a06:a005:dc0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454537714 (0x1b17b1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 20 19:55:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=08c5ff0c725e0647566ce5215a3b2b5154ab644e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:75:98:53:51:8f:ce:f8:f3:47:3b:86:60:
                    9f:dd:dc:b0:a7:6d:23:76:12:d2:c2:cd:5c:06:1d:
                    14:7b:4d:45:a3:91:44:08:36:dc:9a:80:26:7d:78:
                    75:86:9c:f8:4f:0b:21:10:38:85:f4:6f:13:fc:f6:
                    f5:b6:5c:19:fb:10:22:83:66:58:6d:1f:db:ad:42:
                    d4:81:b6:df:73:f8:c1:9e:f1:42:79:63:7d:32:1f:
                    bd:45:34:91:39:90:59:fd:df:3d:b0:22:5a:66:4a:
                    c4:bd:80:58:09:4c:19:81:6b:18:93:b5:28:1e:1f:
                    fe:be:7f:97:8b:31:74:8f:76:0d:a8:ce:0c:db:cb:
                    b0:d8:3c:07:ee:d8:68:e4:d2:46:05:4c:8c:ed:c8:
                    ec:57:32:ef:ab:3c:7b:a3:1d:8e:50:33:13:d2:11:
                    9d:c0:8b:e2:82:04:26:0c:8d:7c:13:fa:50:1f:7e:
                    d9:f4:e6:09:06:b9:11:6b:76:ec:66:67:cb:ba:a3:
                    71:42:c7:36:6d:2f:5c:d9:e7:a8:34:a5:bd:96:ea:
                    9a:fa:9f:cc:73:f6:f1:f3:6a:da:bd:7b:48:d6:5d:
                    2e:bc:4c:e9:a8:84:2c:9b:e5:04:e5:fb:97:4f:f4:
                    6e:ea:e7:40:9c:a4:ff:64:13:d7:c9:ab:44:0b:31:
                    f0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C5:FF:0C:72:5E:06:47:56:6C:E5:21:5A:3B:2B:51:54:AB:64:4E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CMX_DHJeBkdWbOUhWjsrUVSrZE4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:dc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         31:43:fb:53:97:96:7e:73:bd:04:71:9e:4d:10:e2:7a:41:ad:
         94:e3:bd:b7:6c:99:23:fa:ec:ab:8d:e0:c9:f7:62:e6:90:cb:
         30:a3:94:68:d8:1d:0a:37:88:14:70:4f:b1:13:6d:e4:4d:60:
         c1:bf:95:49:29:ea:df:ed:5d:b5:13:de:81:45:c7:c7:67:e6:
         87:2a:2e:01:82:62:b7:c0:ca:57:26:d9:3a:3a:b3:e5:f3:ff:
         ca:82:b5:72:36:71:14:1b:fa:b9:4a:0b:a9:aa:b1:3b:b3:40:
         30:b5:23:66:bc:e4:88:9c:7d:7f:e3:d4:4e:63:dd:da:54:db:
         2c:32:90:bd:cb:1a:7f:12:1c:49:bd:29:18:26:41:fc:64:68:
         8d:1e:12:d0:75:4f:18:32:96:6f:a9:1e:64:33:06:4d:e8:11:
         d0:57:e8:55:3f:96:1e:ad:f4:1e:f1:7e:bb:d7:43:31:e6:1b:
         06:4f:7a:f4:12:23:a0:9a:a0:85:ed:11:f9:55:2a:d2:5e:06:
         98:f8:91:11:66:8e:3d:14:2e:99:e6:be:10:14:08:34:4e:63:
         0c:c0:33:e8:91:e3:b4:eb:e8:c0:60:09:4d:7a:2d:a0:28:89:
         4c:2b:f9:72:89:f2:07:ae:45:10:42:8e:4c:fe:57:4d:68:6e:
         67:af:bf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----