Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LyHHNjuEidCJzFQp5dSSXXP4hDM.roa
File:                     LyHHNjuEidCJzFQp5dSSXXP4hDM.roa (raw, json)
Hash identifier:          YHz+g1IJylDjdScCkdGJfo0+NdQu1uC6U3gcX4Bmy1c=
Subject key identifier:   2F:21:C7:36:3B:84:89:D0:89:CC:54:29:E5:D4:92:5D:73:F8:84:33
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       167F18C5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LyHHNjuEidCJzFQp5dSSXXP4hDM.roa
Signing time:             Sat 19 Feb 2022 04:56:34 +0000
ROA not before:           Sat 19 Feb 2022 04:56:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48266
IP address blocks:        2a06:a005:90::/44 maxlen: 48
                          2a06:a005:a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377428165 (0x167f18c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Feb 19 04:56:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f21c7363b8489d089cc5429e5d4925d73f88433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a6:78:dc:24:fa:e3:ab:83:0f:0f:98:1c:2c:
                    9d:0e:1f:2d:ac:c8:8b:f7:11:27:a0:30:34:72:73:
                    4b:ec:40:77:34:ea:d2:1d:7f:b5:64:a2:9c:2a:3a:
                    44:ce:79:58:94:16:60:6d:06:8e:1c:06:69:c0:ec:
                    e7:42:de:a0:9b:db:17:5d:3a:f7:64:a7:71:13:d1:
                    5c:b3:02:1e:cf:0a:eb:80:43:91:ce:2c:85:83:69:
                    6b:dd:41:14:5b:3f:5c:87:7c:95:1a:83:4b:52:a8:
                    38:7c:f6:37:24:06:d9:23:90:d6:3a:f1:55:47:26:
                    3d:22:55:dd:cd:36:d7:24:34:dc:57:82:41:44:ba:
                    05:23:46:0e:37:ad:7a:65:ec:17:f5:62:3c:19:a9:
                    5b:e6:4a:05:8b:42:4a:b9:3d:d4:52:ca:7f:3d:76:
                    90:b0:35:c4:12:8f:62:52:9b:02:5c:56:fc:79:a6:
                    5c:75:99:0c:9b:b1:59:6c:33:a1:41:50:40:ee:2d:
                    79:d1:80:02:a8:28:85:75:a3:07:bc:e3:50:97:82:
                    de:fd:1c:9b:08:0d:93:a0:00:b8:91:d3:5d:89:a7:
                    3d:28:8e:a2:27:09:81:5d:50:2d:e4:3f:dd:85:77:
                    80:64:1f:a7:87:89:19:d8:10:c6:56:fa:c2:ac:19:
                    5a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:21:C7:36:3B:84:89:D0:89:CC:54:29:E5:D4:92:5D:73:F8:84:33
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/LyHHNjuEidCJzFQp5dSSXXP4hDM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:90::-2a06:a005:af:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5d:00:00:21:2b:a2:b2:33:bd:9c:35:02:ef:b0:24:0e:14:6c:
         0e:f5:ec:07:b5:10:b0:fb:ca:f3:95:26:e3:83:f7:c0:0d:43:
         2e:66:85:c6:5c:8d:c9:cd:97:ab:69:8c:f6:95:c7:37:92:d1:
         f4:c5:6e:be:2e:c3:90:27:ec:59:fc:e6:4e:8c:f3:ac:d7:28:
         ab:29:50:08:ad:64:38:97:c0:1c:51:06:9c:f8:45:52:24:2a:
         f8:64:2c:2a:93:f7:21:37:ec:c6:57:c2:b8:af:79:03:29:c1:
         29:ee:74:41:4f:c3:dc:c4:8c:94:54:c2:88:fd:aa:01:e6:e9:
         50:ca:5f:38:ba:92:91:c8:f6:dc:2a:37:29:7c:fb:6a:8c:de:
         1e:93:36:17:10:3b:6d:44:ab:d2:90:d8:59:11:5a:14:ad:10:
         3c:88:53:00:cd:ee:e5:40:73:a0:90:f3:55:28:5a:ee:83:b4:
         a2:3a:3c:df:22:a7:66:ad:25:bd:4a:e8:6e:7b:2e:4c:6f:4e:
         8a:84:3c:6a:1b:5c:d7:08:78:68:1c:e3:8a:eb:52:20:9d:07:
         7f:75:8a:7a:3c:8f:b3:6f:ea:03:80:34:a1:42:d3:92:d6:09:
         ff:19:25:49:39:a4:ee:c1:73:8f:8b:b9:b5:d5:88:04:01:46:
         d9:d0:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----