Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/I6nMQ1kJj_IoROCmPO1k4OQp8bE.roa
File:                     I6nMQ1kJj_IoROCmPO1k4OQp8bE.roa (raw, json)
Hash identifier:          Gqbefi/l3S9dwDChXQZrJjlwzGo2lg+v+V6Sy4V5I10=
Subject key identifier:   23:A9:CC:43:59:09:8F:F2:28:44:E0:A6:3C:ED:64:E0:E4:29:F1:B1
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01841FB2574DA42C9C3DE711F861376EA302
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/I6nMQ1kJj_IoROCmPO1k4OQp8bE.roa
Signing time:             Fri 28 Oct 2022 17:44:51 +0000
ROA not before:           Fri 28 Oct 2022 17:44:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201763
IP address blocks:        2a06:a005:150a::/48 maxlen: 48
                          2a06:a005:2010::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1f:b2:57:4d:a4:2c:9c:3d:e7:11:f8:61:37:6e:a3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 28 17:44:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=23a9cc4359098ff22844e0a63ced64e0e429f1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:15:3c:80:b3:64:ba:86:c6:0e:b9:29:83:c6:
                    f8:ee:61:82:5c:f3:ab:a5:71:b3:5f:4c:87:f9:94:
                    b2:ec:b4:0d:46:65:bb:d3:70:56:3e:b3:a1:bc:e3:
                    99:6e:70:a0:4a:dc:c0:1b:32:c5:05:91:c5:97:d9:
                    7c:ff:f2:e3:36:c7:f2:50:3a:06:a8:c5:80:46:62:
                    a1:a6:5b:cb:a3:dd:7b:2e:08:3d:70:42:6d:b8:a9:
                    75:87:ca:85:8a:45:e9:be:35:e2:68:03:30:25:4b:
                    21:58:31:7a:6a:52:cd:8d:fc:f4:de:32:35:cc:ed:
                    cf:ad:d4:15:1e:cb:59:17:41:04:63:7a:3b:a1:b6:
                    b5:c2:95:06:95:f2:f4:02:32:e9:47:18:49:32:51:
                    6e:77:aa:ff:1b:0e:97:9e:23:11:33:10:c7:e3:46:
                    1b:d0:2f:e0:97:86:c4:ec:1f:79:79:6d:78:e8:ea:
                    b9:0b:b5:6f:ab:e3:d7:c0:b2:34:38:a6:d2:91:b8:
                    a7:ae:e5:ad:d1:2e:c9:26:c9:6a:8e:1b:27:02:ac:
                    1f:21:17:5b:c2:5a:1a:b2:6d:11:d6:72:29:32:de:
                    86:85:58:eb:55:74:fb:c5:aa:a9:ec:5b:ff:e4:eb:
                    ea:ae:c1:4f:9b:9a:2e:5b:61:9d:fc:6a:c4:f5:f1:
                    0d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A9:CC:43:59:09:8F:F2:28:44:E0:A6:3C:ED:64:E0:E4:29:F1:B1
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/I6nMQ1kJj_IoROCmPO1k4OQp8bE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:150a::/48
                  2a06:a005:2010::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:4a:2e:28:4c:ac:01:25:0b:23:8b:5b:07:09:61:0f:9b:f4:
         0d:4d:68:4e:73:7c:e3:64:67:9f:69:d0:42:c3:48:e6:7b:1e:
         97:43:11:2c:13:aa:3c:16:f9:43:38:27:c9:f2:32:65:2b:08:
         cb:a2:8e:80:b9:41:73:54:83:80:e0:76:1c:b6:90:b2:c7:19:
         84:c5:3e:8d:35:57:65:d3:2f:1d:be:4d:d2:c9:d8:ae:01:96:
         be:ee:06:82:21:a7:6b:0a:ee:8d:1e:fb:de:f2:63:3e:ab:5e:
         d1:0d:0f:36:3e:0a:19:45:16:da:a8:9e:f7:07:d2:d3:c3:48:
         6b:1e:47:86:3f:c5:b9:bf:a7:62:1c:e6:57:dc:51:9b:dc:96:
         63:90:a3:ea:d7:60:36:0c:2d:85:af:9e:dd:21:91:c0:c0:cd:
         1f:4d:c7:2a:05:cc:0b:5e:1d:b2:50:bd:93:35:63:02:e0:cc:
         1c:a7:93:06:d6:ff:a2:a9:3a:0a:47:32:a2:f2:c8:2b:d5:b7:
         f8:b3:e1:37:00:4f:18:24:0f:6c:7a:01:78:87:c6:5b:3b:34:
         98:ee:10:7b:cd:fd:dd:b2:cb:7c:b1:6d:32:cd:15:d7:ff:be:
         37:f4:0a:3f:3c:b9:c4:7e:77:da:75:4e:d4:52:cd:fd:6b:17:
         2d:06:2a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----