Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DV5ZN_iT492C6iBHbOQNh6ra-Ls.roa
File:                     DV5ZN_iT492C6iBHbOQNh6ra-Ls.roa (raw, json)
Hash identifier:          mm+AarU2V8Mfpdcakru1mLo4c5j++qN/YEBzxAPUT8E=
Subject key identifier:   0D:5E:59:37:F8:93:E3:DD:82:EA:20:47:6C:E4:0D:87:AA:DA:F8:BB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184898328DED95ED6602D689A9909F284BB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DV5ZN_iT492C6iBHbOQNh6ra-Ls.roa
Signing time:             Fri 18 Nov 2022 06:53:05 +0000
ROA not before:           Fri 18 Nov 2022 06:53:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44570
IP address blocks:        2a06:a004::/32 maxlen: 48
                          2a06:a000::/32 maxlen: 48
                          2a06:1280:1000::/36 maxlen: 48
                          2a06:a005::/32 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a05:dfc0::/32 maxlen: 48
                          2a06:a003::/32 maxlen: 48
                          2a06:a005:1fd0::/44 maxlen: 48
                          2a06:a005:18b0::/44 maxlen: 48
                          2a06:a005:1a70::/44 maxlen: 48
                          2a06:a005:1fa0::/44 maxlen: 48
                          2a06:a005:1d70::/44 maxlen: 48
                          2a06:a005:1fe0::/44 maxlen: 48
                          2a06:a005:1f90::/44 maxlen: 48
                          2a05:dfc7:1300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:89:83:28:de:d9:5e:d6:60:2d:68:9a:99:09:f2:84:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 18 06:53:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d5e5937f893e3dd82ea20476ce40d87aadaf8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:77:4c:07:00:74:dd:b9:65:63:50:18:48:
                    e8:e6:58:2b:c2:7f:ea:32:83:bb:ee:9e:59:c3:65:
                    a0:72:bc:00:f1:1c:07:fe:d9:38:57:4a:a4:a4:a7:
                    fe:86:d1:0f:79:b4:35:ca:b1:f0:98:72:99:8c:fc:
                    eb:47:18:1c:0b:81:d2:f4:1e:24:85:d6:c3:3e:42:
                    9d:46:90:d9:a8:51:86:3c:db:01:8c:05:72:8c:48:
                    f3:32:93:98:a0:44:9a:05:5a:92:66:2e:cc:74:c0:
                    19:f4:cb:4b:36:b6:af:56:e9:3f:bd:7d:81:ea:f5:
                    8a:e1:cc:60:d1:6e:59:c3:76:62:4b:82:66:ba:f2:
                    c6:99:3d:06:8a:c6:48:6a:f4:4a:90:12:dc:2d:68:
                    2b:c6:b6:b7:51:dd:26:cb:c8:d6:e3:18:46:75:f7:
                    92:d3:50:39:06:70:32:2b:e5:d4:fd:3b:d7:d1:c0:
                    a5:7b:b1:4c:f3:9d:88:8e:c9:2d:0b:f7:bc:3a:52:
                    d2:7a:f3:89:f3:19:85:95:51:a1:da:6e:b6:9c:c9:
                    5c:48:16:b8:21:24:8a:bd:cc:ba:9d:82:ce:cf:96:
                    44:ea:ad:93:22:f2:2d:d2:d5:a8:31:b6:13:68:42:
                    7b:df:ee:c2:62:76:1b:3d:d0:0a:c2:d3:19:90:e6:
                    ff:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5E:59:37:F8:93:E3:DD:82:EA:20:47:6C:E4:0D:87:AA:DA:F8:BB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DV5ZN_iT492C6iBHbOQNh6ra-Ls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc0::/32
                  2a05:dfc7:1300::/40
                  2a06:1280:1000::/36
                  2a06:a000::/32
                  2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:52:8d:f1:1f:27:93:fa:27:09:1c:55:b3:7c:89:d2:4f:ef:
         5b:32:5e:2d:dc:02:9c:61:1c:b5:65:10:fc:db:5e:2f:ad:e1:
         ff:0c:7a:04:aa:7e:0b:9b:73:40:98:d4:3b:b1:b3:0e:97:81:
         73:4c:1e:a0:b4:e3:39:59:10:6a:d9:1a:89:0d:47:d2:fb:a4:
         61:98:9f:06:dd:31:48:6e:23:50:8d:e7:32:57:c6:22:ca:6e:
         8a:2a:6b:da:b2:57:ff:a4:6c:6d:39:fd:8d:36:69:97:44:82:
         db:4c:1e:07:d1:15:f0:e1:6b:e9:f6:71:cc:af:fd:65:bb:53:
         4d:b3:6f:fb:94:22:af:14:d5:e9:a6:9c:9b:a5:ad:70:70:b0:
         e4:3f:50:4f:67:8d:23:e4:f3:3f:f8:e4:e3:06:0c:ca:32:fb:
         f5:4f:02:cc:71:e3:a4:b5:5e:c4:a1:86:52:a3:4f:22:a1:64:
         55:e1:ba:0a:a7:e3:c8:47:7f:bc:e6:71:b8:4b:d9:4e:3c:20:
         43:8a:a3:38:03:04:87:c1:e6:a6:c6:47:06:26:d9:d4:a3:ce:
         a4:5e:af:a3:49:65:93:53:81:ff:ed:96:bc:f7:0c:ec:92:d7:
         9c:5b:7b:04:a6:ab:76:9d:32:a1:33:68:a9:fc:05:37:83:a6:
         7f:2c:ea:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----