Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Jh6CPdcNdr7vcIFGcAzS6y88PPA.roa
File:                     Jh6CPdcNdr7vcIFGcAzS6y88PPA.roa (raw, json)
Hash identifier:          LtHatJZ3Ef5OJB1byuOzoN0z34Ub+lLH7UUtWJlc/q8=
Subject key identifier:   26:1E:82:3D:D7:0D:76:BE:EF:70:81:46:70:0C:D2:EB:2F:3C:3C:F0
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18863333
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Jh6CPdcNdr7vcIFGcAzS6y88PPA.roa
Signing time:             Fri 22 Apr 2022 05:35:01 +0000
ROA not before:           Fri 22 Apr 2022 05:35:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213383
IP address blocks:        2a06:a005:5a0::/44 maxlen: 48
                          2a06:a005:480::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411448115 (0x18863333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 22 05:35:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=261e823dd70d76beef708146700cd2eb2f3c3cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:67:c3:5e:6d:19:36:a8:e8:ee:dd:77:83:
                    d7:c5:98:31:30:da:fd:1a:f6:9b:a8:94:30:86:8a:
                    00:a7:1f:08:e1:73:32:d1:c0:20:bd:fc:db:3a:ac:
                    bb:e3:2c:cf:d1:0c:df:7f:e3:e5:6f:91:ea:94:66:
                    f7:36:31:4c:35:36:9d:47:9b:dd:6a:e0:c0:f8:c6:
                    c7:77:b2:71:b9:ef:6c:1f:30:28:da:c9:36:02:a7:
                    65:0d:01:15:05:42:e3:0c:34:92:d8:04:03:17:cc:
                    99:1c:54:77:1d:0d:55:f0:32:4f:27:eb:4a:ab:4f:
                    3d:4a:bf:f7:9d:81:ce:c8:d5:72:70:16:3a:ba:8c:
                    6e:27:c8:1a:0c:16:7c:28:1d:44:a6:ef:1c:6b:e5:
                    83:85:8d:96:bf:26:54:18:7b:53:d8:3a:9a:75:3d:
                    08:da:06:86:c1:98:b3:a1:01:1d:64:c9:ec:05:30:
                    3a:0c:60:13:74:d4:30:10:f0:78:43:73:1a:90:33:
                    0a:89:a3:fd:04:1c:3a:52:e2:d3:34:d6:a8:1d:0f:
                    18:2d:c7:12:1d:0c:f0:ab:7e:c4:6c:cc:2c:7a:72:
                    a5:92:eb:19:dc:1e:15:35:d0:87:e8:40:41:1b:d6:
                    90:c7:ef:87:b7:34:c0:96:c4:48:4d:b5:65:61:04:
                    85:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1E:82:3D:D7:0D:76:BE:EF:70:81:46:70:0C:D2:EB:2F:3C:3C:F0
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Jh6CPdcNdr7vcIFGcAzS6y88PPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:480::/44
                  2a06:a005:5a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         25:f0:ac:bb:ce:20:38:b6:3a:54:f5:1f:55:c7:4d:61:e9:64:
         85:f7:b8:92:9c:34:7a:0c:02:91:90:5d:5e:5c:f6:03:7b:61:
         12:a5:39:61:7a:9e:e4:dd:83:62:13:d6:f7:48:e4:64:5a:bd:
         99:e8:0e:7b:70:a9:dc:b1:de:e7:2d:a2:69:21:eb:e9:1b:5e:
         0b:cd:1c:b9:96:e1:16:59:d0:5f:1e:18:f5:88:39:5e:ad:74:
         67:db:b3:c3:17:54:0b:ab:17:3c:50:cc:a8:3f:a2:a4:82:68:
         21:aa:f9:5e:04:6e:fc:a5:1b:67:b3:f3:73:7b:04:82:c8:57:
         e2:c3:52:39:50:84:c4:54:b5:34:a1:24:08:b1:19:00:dd:ab:
         d4:7d:be:f2:8d:60:64:d1:43:7d:80:97:04:e5:93:6f:61:63:
         64:37:f3:63:8c:7f:07:9d:d0:25:58:a4:5c:3e:16:84:e5:37:
         c9:18:27:4a:ee:a6:d2:4b:9c:56:02:6b:db:56:fd:22:3a:14:
         63:c7:46:37:e4:a7:3f:4e:82:76:2a:e3:f7:47:37:ea:79:04:
         09:8e:c3:6a:0d:ff:21:b4:34:4c:59:67:7b:37:a8:3c:1a:64:
         64:9c:e9:88:f6:29:72:cf:61:f4:f4:8c:b2:43:ef:4d:db:41:
         8e:58:5c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----