Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/J0K2SOnBEhaYaf59ta9NTxAF72Y.roa
File:                     J0K2SOnBEhaYaf59ta9NTxAF72Y.roa (raw, json)
Hash identifier:          JywkyXs/BbuWtLXuaWMBaiqDiUJBkmEHqLWoYvyT4x8=
Subject key identifier:   27:42:B6:48:E9:C1:12:16:98:69:FE:7D:B5:AF:4D:4F:10:05:EF:66
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01824503BC504F312EE36F8E0C81C6AE72E0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/J0K2SOnBEhaYaf59ta9NTxAF72Y.roa
Signing time:             Thu 28 Jul 2022 13:34:08 +0000
ROA not before:           Thu 28 Jul 2022 13:34:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203655
IP address blocks:        2a06:a005:13f0::/44 maxlen: 48
                          2a06:a005:1400::/44 maxlen: 48
                          2a06:a005:13e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:45:03:bc:50:4f:31:2e:e3:6f:8e:0c:81:c6:ae:72:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 28 13:34:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2742b648e9c112169869fe7db5af4d4f1005ef66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:aa:cf:07:8e:53:28:ef:74:d4:58:cd:0a:ff:
                    f8:87:75:aa:7e:31:d8:a7:22:48:2c:18:bf:0f:0c:
                    44:3d:2e:08:a8:f5:ae:23:6a:9e:9e:fe:9d:d7:6a:
                    9f:22:05:ce:61:57:d4:5d:3d:ae:e9:ab:08:7e:58:
                    98:a2:e8:56:ad:04:32:9c:bc:44:73:42:7f:f6:19:
                    ab:83:9a:7b:78:36:b2:a6:9a:4c:c3:99:0a:38:84:
                    bc:53:b8:17:61:ae:fb:85:db:42:55:1b:99:2b:9f:
                    86:cc:69:02:87:cf:ef:06:bd:47:ce:cc:e1:6a:65:
                    98:76:59:36:97:2a:47:7e:18:15:09:e8:ba:c6:51:
                    2b:77:b4:c1:7d:14:71:14:bc:ba:ce:1e:ff:75:4f:
                    10:c7:42:50:9d:f6:92:89:73:fa:6e:ba:df:40:ce:
                    34:7b:f8:9b:dc:18:74:28:33:6f:d0:6d:15:a4:00:
                    56:0b:5b:91:9b:39:5c:f3:dc:6b:dc:3d:20:aa:02:
                    a6:45:11:d7:ae:02:d2:29:c1:d9:4a:36:67:02:28:
                    a4:84:e2:7b:69:30:b9:43:2b:f8:ee:d2:c1:a8:b0:
                    3a:69:23:6e:eb:98:d3:3e:bb:20:72:32:b7:1e:17:
                    e4:ed:28:f0:22:1c:61:29:3d:6c:ad:7b:92:61:94:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:42:B6:48:E9:C1:12:16:98:69:FE:7D:B5:AF:4D:4F:10:05:EF:66
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/J0K2SOnBEhaYaf59ta9NTxAF72Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:13e0::-2a06:a005:140f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         04:02:28:63:3e:5a:9d:3b:97:1e:b2:e2:ea:5b:62:78:0d:5c:
         1c:9a:c9:8f:49:72:fd:67:24:f4:2c:61:bf:29:d3:f0:b8:d4:
         7a:c6:9c:a4:fb:cd:16:bb:b7:20:a7:84:4c:b8:e3:f5:de:c9:
         eb:99:c4:b8:a5:f9:3c:5c:66:87:ec:a1:23:33:b9:ad:14:37:
         b6:85:03:2d:aa:fe:ed:49:d1:7a:db:b7:a1:5c:3d:30:ed:aa:
         39:9e:ac:70:3b:2d:de:73:f1:c2:08:33:b0:2e:59:d0:71:84:
         5e:53:9f:9b:4a:8e:f4:5f:37:0f:ee:76:66:72:9a:bc:b1:2d:
         7e:64:e7:12:08:c1:28:b1:26:7f:68:c1:18:6a:41:48:58:dd:
         73:8f:f0:f5:1f:69:50:4d:3e:da:da:45:68:2d:45:73:25:42:
         a9:da:3f:f8:1b:cf:a3:68:88:26:75:ce:ba:f5:29:81:0a:05:
         fd:05:18:ce:c1:f3:cb:64:a5:0c:21:85:48:ca:3e:3e:c8:94:
         a2:7a:02:bc:07:a9:a1:a7:3c:6e:b4:5c:ce:68:98:0d:ba:68:
         ab:44:a2:f3:8e:c7:68:d5:64:73:79:34:4d:6a:a5:ee:1c:ee:
         6c:74:bd:ce:6e:25:b2:c2:2e:47:fb:f2:ae:1b:ba:2e:f0:61:
         cb:77:c5:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----