Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JCBdEbGvarQKfalGxRvXw4xU0pw.roa
File:                     JCBdEbGvarQKfalGxRvXw4xU0pw.roa (raw, json)
Hash identifier:          oYogIUOwwGONDrCPtuJwAAcx5xKNXrDdeD4HonCIf5U=
Subject key identifier:   24:20:5D:11:B1:AF:6A:B4:0A:7D:A9:46:C5:1B:D7:C3:8C:54:D2:9C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018206319B8BCA492F7AA869E10B7C5E19FA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JCBdEbGvarQKfalGxRvXw4xU0pw.roa
Signing time:             Sat 16 Jul 2022 08:48:10 +0000
ROA not before:           Sat 16 Jul 2022 08:48:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48741
IP address blocks:        2a06:a001:a020::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:06:31:9b:8b:ca:49:2f:7a:a8:69:e1:0b:7c:5e:19:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 16 08:48:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=24205d11b1af6ab40a7da946c51bd7c38c54d29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7c:76:e2:04:e5:25:56:dd:bb:9e:c1:44:5f:
                    7c:03:62:3a:a7:2b:f6:4d:1a:7d:23:df:2b:1d:a0:
                    d4:4d:19:fd:71:c7:27:b5:2c:e7:bc:51:77:bf:ef:
                    be:11:11:22:36:1c:3c:e1:3c:3a:66:86:02:b9:1b:
                    dd:1f:9a:25:4d:12:8c:d6:4c:23:78:ff:92:94:ff:
                    b7:d3:1e:4a:20:fc:92:77:5c:9a:85:77:0a:0f:d6:
                    36:ff:20:b4:05:b6:86:30:8c:c9:5b:bd:eb:44:16:
                    0c:ce:95:7b:a4:03:e7:ad:62:93:54:1b:c5:0f:77:
                    0a:91:d8:10:a2:0c:0f:37:64:77:4c:5a:6b:3a:54:
                    5d:fc:b3:03:21:4b:05:d4:c5:b0:df:11:b3:99:3e:
                    2c:5d:f7:61:14:4e:64:40:ff:17:21:60:a4:0a:40:
                    7b:32:7d:6e:cb:13:26:7a:d8:64:c5:d7:f9:e3:8e:
                    38:1e:e5:fe:d1:c4:5a:f4:58:01:83:66:e6:fe:27:
                    fc:38:5b:09:69:82:72:6e:ac:25:d3:12:fc:b6:30:
                    e8:2f:82:78:38:58:ee:21:30:67:27:56:2f:11:d9:
                    a5:52:e0:e9:90:d3:e3:80:16:1f:1d:77:b9:85:83:
                    c7:ba:c4:f3:ec:10:26:eb:62:25:fc:b3:6c:5f:97:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:20:5D:11:B1:AF:6A:B4:0A:7D:A9:46:C5:1B:D7:C3:8C:54:D2:9C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JCBdEbGvarQKfalGxRvXw4xU0pw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a020::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:6c:0c:46:fb:f2:37:51:5f:0a:9d:91:37:96:38:ad:48:c1:
         d8:b1:a6:91:58:0c:6a:98:91:a3:23:2e:cb:8e:d9:8d:3e:d6:
         47:23:bc:10:12:e0:af:38:bd:a5:22:b4:d0:c5:5e:90:85:b0:
         ef:e2:76:b1:99:43:a2:66:d9:39:47:d9:31:0e:45:20:80:76:
         ee:93:49:6f:ce:d1:2c:b3:15:62:3a:06:f3:5d:d1:42:48:74:
         49:82:71:68:80:6b:aa:0e:35:e2:be:95:0f:d4:c4:6e:d0:33:
         c8:43:c1:8c:b4:3e:3e:3b:7b:e7:3a:ca:1d:cb:64:a6:b5:c7:
         34:7f:fe:23:73:9a:cf:86:9d:e4:2e:86:14:8b:1a:55:ee:60:
         99:49:7e:64:23:7a:0f:c6:ad:7d:06:65:61:20:50:77:20:26:
         9e:71:01:4a:8f:24:10:9e:e3:9c:a4:36:8f:2c:96:7f:d3:88:
         82:eb:a4:ae:f6:b5:c9:82:e4:13:55:3f:cf:30:bd:d0:27:05:
         42:5c:c8:33:7a:7e:a8:d6:e3:b6:43:c4:0c:21:7d:45:60:3d:
         1d:a2:43:87:83:f7:d5:7a:ca:42:48:7c:44:ae:29:aa:ff:1a:
         fd:e0:8f:b8:65:8f:b0:7e:db:fc:5d:9c:5e:3f:33:65:36:6b:
         46:0b:16:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----