Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HGK2N_IDovgEQqZvuFiB5BrDx_c.roa
File:                     HGK2N_IDovgEQqZvuFiB5BrDx_c.roa (raw, json)
Hash identifier:          KZH5yQNaNeQCM2/4GwIAwLG+oD0zl3VF7QiTx1oQCCA=
Subject key identifier:   1C:62:B6:37:F2:03:A2:F8:04:42:A6:6F:B8:58:81:E4:1A:C3:C7:F7
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01823ABDB0B3F3D3C24F3C54EFE774882AFA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HGK2N_IDovgEQqZvuFiB5BrDx_c.roa
Signing time:             Tue 26 Jul 2022 13:41:26 +0000
ROA not before:           Tue 26 Jul 2022 13:41:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203888
IP address blocks:        2a06:a005:45c::/48 maxlen: 48
                          2a06:a005:45a::/48 maxlen: 48
                          2a06:a005:45b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:3a:bd:b0:b3:f3:d3:c2:4f:3c:54:ef:e7:74:88:2a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 26 13:41:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1c62b637f203a2f80442a66fb85881e41ac3c7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:4b:7f:66:45:c6:87:6b:1d:13:fb:57:56:
                    34:64:f8:e0:3f:52:40:6b:16:de:07:e3:fd:58:1a:
                    71:f0:3e:06:bb:73:6f:34:a3:8f:54:95:d9:d9:19:
                    d8:f5:18:e4:e7:c7:a6:20:a5:3a:61:f4:06:d6:53:
                    2e:c2:50:40:a1:c6:70:66:34:7a:d1:21:74:a2:04:
                    3d:f7:22:19:24:f7:57:9e:2a:02:5e:c7:4a:ed:bd:
                    0c:d0:28:1a:d0:6a:22:d8:14:dd:3b:b0:2c:ec:3a:
                    d0:50:c3:11:8f:48:c1:02:42:4e:ed:dc:be:a2:11:
                    73:74:86:92:e3:42:a3:73:64:bd:e5:33:b4:5c:05:
                    14:29:8d:1a:76:6a:72:1e:5a:02:d4:d8:8b:a1:12:
                    f0:33:54:84:af:49:ea:8e:e2:2e:4c:98:5c:67:d9:
                    42:43:cd:d2:2c:19:83:2f:8b:89:7d:44:02:d4:a3:
                    af:d0:f6:9a:5c:38:f4:ae:31:a0:6a:03:1f:fb:c3:
                    37:45:79:2c:57:45:0a:78:87:76:50:c8:4a:e7:a6:
                    dc:97:c5:c6:8d:42:2c:72:9d:f5:ce:41:87:df:99:
                    f4:9e:fc:b3:86:02:6d:6c:8f:ec:aa:30:a8:27:f2:
                    eb:d9:c1:26:9e:fe:af:0a:bd:63:ed:a4:39:81:dc:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:62:B6:37:F2:03:A2:F8:04:42:A6:6F:B8:58:81:E4:1A:C3:C7:F7
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HGK2N_IDovgEQqZvuFiB5BrDx_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:45a::-2a06:a005:45c:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         9d:60:01:c0:e9:05:6b:11:c0:dc:95:ba:d4:a2:05:a4:de:e1:
         b5:51:b3:02:04:dd:b9:9b:fd:1a:af:a1:e2:ed:c4:96:9f:01:
         1d:1d:4e:68:a0:49:b3:ef:9a:8a:53:ec:56:f8:0c:bf:36:35:
         39:dc:57:39:5d:66:eb:ee:7e:01:a2:72:39:2c:91:ad:fb:53:
         87:fb:4e:5f:bd:c7:1d:55:7e:ec:93:3b:2f:dd:3d:13:3b:e2:
         d0:77:e0:93:cb:fd:ae:5c:1b:71:16:a6:3f:ad:bc:1b:2e:70:
         e4:68:ca:7b:72:a7:f5:93:d0:79:21:3f:8c:34:05:f1:6d:81:
         65:c5:b9:6b:ce:c9:4c:e2:30:4f:1d:07:1c:7a:4e:42:fb:be:
         7b:9f:40:43:66:86:2b:de:2b:89:69:c2:6e:1e:54:98:af:ce:
         4e:73:92:8a:8d:b0:bb:25:3c:de:ba:3e:a8:c3:ac:c9:68:fb:
         64:d0:09:ee:2b:71:1e:c9:95:cf:e9:17:08:79:86:45:db:b0:
         a1:56:31:21:e0:ea:99:7b:1f:5c:2b:b3:72:2d:61:70:42:13:
         ce:10:5f:0a:24:e8:2f:b3:4d:a5:ae:3b:6e:28:37:23:30:44:
         04:39:9e:cc:c6:b1:bd:19:b0:d9:ea:f0:a8:09:e2:0f:ba:ed:
         f3:dd:e0:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----