Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CpJsnAXpLhCA83RJEoxaCZrIOHY.roa
File:                     CpJsnAXpLhCA83RJEoxaCZrIOHY.roa (raw, json)
Hash identifier:          wburN+8bgcA14Hary1y6VsbosgD1GF0TKQt2tR73Dac=
Subject key identifier:   0A:92:6C:9C:05:E9:2E:10:80:F3:74:49:12:8C:5A:09:9A:C8:38:76
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       17A56225
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CpJsnAXpLhCA83RJEoxaCZrIOHY.roa
Signing time:             Sun 03 Apr 2022 21:36:36 +0000
ROA not before:           Sun 03 Apr 2022 21:36:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203858
IP address blocks:        2a06:a005:350::/44 maxlen: 48
                          2a06:a005:18::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396714533 (0x17a56225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr  3 21:36:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a926c9c05e92e1080f37449128c5a099ac83876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:5d:ad:02:e0:e1:26:7a:e1:d1:32:a2:c2:
                    7a:ab:29:fd:60:93:b7:ec:89:dd:27:e0:4d:19:41:
                    11:62:a9:4d:b3:f4:73:e6:04:bc:a1:67:54:dc:8e:
                    17:f2:30:2e:63:e3:f6:55:b2:c0:26:c5:6a:c3:58:
                    d6:a1:58:23:09:ff:be:05:2d:a4:c5:c4:2f:6f:b7:
                    10:b3:b4:40:4e:39:7d:22:1f:6b:02:f0:f8:10:23:
                    fa:9e:82:c6:47:0d:7d:62:ca:cc:c1:bb:39:e0:78:
                    3f:0f:44:1e:cf:35:08:8c:74:47:4c:01:89:87:b3:
                    90:ca:79:b4:82:ea:dd:b4:2e:f9:5f:2c:d8:67:47:
                    16:85:08:b9:86:67:a6:cb:cb:d3:70:44:f7:79:7e:
                    bd:7b:1e:1d:5a:7d:9e:b5:bd:2a:b2:f6:39:11:62:
                    4f:49:53:ce:d6:f4:8e:4f:5e:7c:3a:8c:ce:d6:2e:
                    d4:9f:01:03:e8:2f:03:be:ed:fa:a9:3c:ef:26:e5:
                    c0:c7:88:be:5d:6c:0b:eb:a7:5c:55:a6:a0:40:e5:
                    7a:5f:42:f5:fd:33:30:d7:19:95:28:64:89:7d:1f:
                    ae:57:fd:9e:83:06:3b:5b:bd:55:7c:c1:26:3e:48:
                    55:30:4d:56:f7:09:ce:22:6c:8f:09:44:a2:4b:44:
                    ea:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:92:6C:9C:05:E9:2E:10:80:F3:74:49:12:8C:5A:09:9A:C8:38:76
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CpJsnAXpLhCA83RJEoxaCZrIOHY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18::/46
                  2a06:a005:350::/44

    Signature Algorithm: sha256WithRSAEncryption
         92:47:f8:6b:c3:3a:71:1d:69:37:4e:c1:29:5a:67:b0:73:10:
         90:f4:07:ae:3f:5f:80:f0:42:83:36:dd:95:32:5c:a6:cc:de:
         0c:03:96:e7:f0:85:7b:54:46:e7:bf:6c:ef:93:ec:35:fe:76:
         ec:2b:c2:bb:6c:85:41:e4:23:bb:f7:84:27:5e:54:1e:7d:13:
         53:2d:c3:75:d1:53:da:1e:cc:28:9f:2f:9b:63:37:0e:97:59:
         5e:20:b7:43:db:cc:13:44:cb:83:96:8c:88:56:92:19:77:52:
         69:ee:a8:dc:39:70:d4:0f:a4:fe:a8:30:68:d6:93:8d:cb:3e:
         4d:fc:b0:1f:c8:41:f9:30:78:a4:3f:a9:74:18:3e:8b:86:0b:
         d2:c2:af:2f:b6:a2:25:a3:29:c9:44:03:e9:59:b8:12:a2:f5:
         8e:ac:0f:39:55:fc:d7:8a:13:87:3b:ff:4d:b6:75:91:a9:63:
         b5:f8:6f:0b:b0:60:32:ef:6f:df:42:61:3c:5d:6f:dd:72:44:
         ac:7c:0b:7b:82:0e:fa:2f:65:0b:a3:a3:63:62:54:d2:a7:3a:
         0d:12:c2:28:2f:1c:46:d5:ef:91:92:4d:32:8b:c8:1a:c5:d3:
         88:63:26:97:14:c3:a6:e5:f2:f5:79:7f:ea:e0:93:f1:3f:70:
         53:4e:15:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----