Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JsB0atMiJw5U9QPDBMjztdlboGM.roa
File:                     JsB0atMiJw5U9QPDBMjztdlboGM.roa (raw, json)
Hash identifier:          SwA5/gTjguxy038TTix00HjAKx7W0/cgXjqUifDyYUk=
Subject key identifier:   26:C0:74:6A:D3:22:27:0E:54:F5:03:C3:04:C8:F3:B5:D9:5B:A0:63
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       16E8E687
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JsB0atMiJw5U9QPDBMjztdlboGM.roa
Signing time:             Sat 26 Mar 2022 02:04:43 +0000
ROA not before:           Sat 26 Mar 2022 02:04:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     141694
IP address blocks:        2a06:a005:f0::/44 maxlen: 48
                          2a06:a001:a0c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384362119 (0x16e8e687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Mar 26 02:04:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=26c0746ad322270e54f503c304c8f3b5d95ba063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:81:1d:5e:3a:14:a8:70:83:f2:db:94:d2:
                    c8:2d:0c:39:5d:ba:5d:7c:13:af:42:07:02:dd:e5:
                    9e:b4:c1:15:cb:88:c1:6f:04:1b:82:9e:1e:a1:f1:
                    d5:7c:7e:9c:ed:74:ab:e3:97:2a:06:3d:b3:43:1a:
                    74:07:4d:67:ff:fe:5a:1d:44:66:e2:ab:8d:90:7f:
                    2c:12:cd:88:da:25:b0:39:bf:42:e1:c4:b3:c9:31:
                    44:fd:62:92:b2:f9:11:a9:92:28:7d:57:54:12:31:
                    af:51:bd:45:b1:b6:ac:f1:f4:ea:12:c4:3e:41:f3:
                    d3:28:58:e8:27:5f:00:e7:50:8e:c8:28:4d:5f:0a:
                    c0:f2:aa:3e:17:07:78:0a:87:8d:0d:fa:83:0b:a6:
                    c2:93:17:de:4a:06:af:3c:b8:72:e2:f1:a4:06:f3:
                    69:83:f6:19:a8:f3:6e:56:c4:a2:f6:cb:d1:9a:09:
                    0d:8d:ff:ba:12:f2:ec:ee:83:6f:6a:ba:35:c9:73:
                    c2:8a:30:3e:f9:80:07:16:90:35:f7:af:82:18:b8:
                    73:05:00:39:f6:2d:45:c9:8d:81:1c:49:a4:8c:38:
                    a9:42:4b:56:95:f8:5b:9c:bb:64:e6:9c:70:63:21:
                    aa:2a:44:29:6a:82:26:59:0e:1f:a1:d7:73:e9:00:
                    f0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C0:74:6A:D3:22:27:0E:54:F5:03:C3:04:C8:F3:B5:D9:5B:A0:63
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JsB0atMiJw5U9QPDBMjztdlboGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a0c0::/44
                  2a06:a005:f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         99:f2:15:05:1b:4c:62:c1:a9:5c:1f:e6:69:92:34:12:d1:87:
         7b:37:8f:23:e6:0e:bc:92:e0:77:90:1e:68:bd:10:19:9f:7a:
         64:29:04:54:aa:0a:83:0d:93:e4:93:10:9e:46:ed:de:d5:c7:
         dd:ec:73:a7:4a:c3:b6:df:35:5b:27:20:38:7a:05:a1:92:da:
         1b:29:99:41:f7:f7:a8:19:46:9f:f0:d6:2f:20:e0:d0:fd:f3:
         96:27:7f:22:c3:63:4b:1c:95:de:0b:b3:a7:27:1d:14:9e:5b:
         08:fc:9f:ee:a2:e8:64:9d:fc:df:54:22:d8:45:ad:77:32:2e:
         5b:b4:9c:3a:cd:c8:13:9c:4b:a3:79:97:fd:43:3a:38:e6:cb:
         31:fd:af:1f:a7:f3:25:d5:6e:94:e6:bb:35:00:2b:cc:c0:55:
         67:7b:4d:99:30:8a:fe:c0:78:01:db:52:af:0c:01:00:32:52:
         9f:e2:72:2f:0f:1e:16:8d:90:cb:5c:bd:3a:3d:21:4a:05:da:
         ae:e5:61:7a:30:01:13:60:62:dd:06:fe:01:28:ae:b9:57:cb:
         59:2d:d9:c0:a2:a5:af:e6:81:5e:6d:10:f9:25:b7:7e:49:98:
         5b:0c:cc:e8:7f:23:c3:77:b1:bd:0d:61:79:34:57:da:18:46:
         42:7c:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----