Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ORRD1ZotaZHgi43ZAvpNgOYBSbc.roa
File:                     ORRD1ZotaZHgi43ZAvpNgOYBSbc.roa (raw, json)
Hash identifier:          +6bXpGbvtseCXc9TQbxiIkbcwW6MuHoifJkdaz+rLK0=
Subject key identifier:   39:14:43:D5:9A:2D:69:91:E0:8B:8D:D9:02:FA:4D:80:E6:01:49:B7
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184EE8D81AE2CD62BB9D32C191750D1DF86
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ORRD1ZotaZHgi43ZAvpNgOYBSbc.roa
Signing time:             Wed 07 Dec 2022 21:46:01 +0000
ROA not before:           Wed 07 Dec 2022 21:46:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200775
IP address blocks:        2a0a:6040:c200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ee:8d:81:ae:2c:d6:2b:b9:d3:2c:19:17:50:d1:df:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  7 21:46:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=391443d59a2d6991e08b8dd902fa4d80e60149b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3d:d2:e6:f5:0c:57:ff:b5:04:62:12:e7:fc:
                    93:e2:48:76:9c:b3:f6:66:26:82:0f:c4:96:20:3d:
                    f2:7b:cb:36:b1:c4:f4:bf:38:9b:9e:38:f6:de:c3:
                    a7:16:04:e9:4c:f2:e5:32:94:f4:f6:8b:6c:62:41:
                    77:3d:74:56:f1:aa:dc:9a:5b:ab:f8:67:65:eb:8e:
                    49:b8:dc:8f:74:0c:36:22:73:3e:66:c0:36:be:b8:
                    d2:9e:bb:39:c1:1a:a8:3a:0f:67:97:02:4a:c4:3f:
                    07:76:5d:32:32:ff:71:df:86:8b:62:fb:e7:40:a5:
                    b8:40:de:a2:2f:4a:d2:be:57:c6:fa:4c:5c:d1:04:
                    53:68:b2:b2:f6:8f:73:fe:c3:14:f2:0d:93:7c:bc:
                    82:76:c0:f0:95:5c:b6:7c:32:47:db:88:1b:5f:3a:
                    b5:c7:0e:40:cf:cd:b4:c4:57:62:0c:31:0e:c4:c8:
                    b4:90:5c:c7:63:33:60:e0:78:c8:3a:f1:9b:e7:52:
                    59:1f:be:da:48:0e:87:d1:a9:83:73:53:ee:d4:74:
                    e6:89:85:a4:5e:25:cb:c5:db:b9:8d:47:18:2e:cb:
                    65:85:92:55:19:0c:57:c1:0a:ee:58:90:78:96:20:
                    f9:04:3a:26:23:dc:1c:28:02:eb:94:b3:07:17:ef:
                    02:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:14:43:D5:9A:2D:69:91:E0:8B:8D:D9:02:FA:4D:80:E6:01:49:B7
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ORRD1ZotaZHgi43ZAvpNgOYBSbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c200::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:c5:6c:bf:0b:12:f6:eb:b7:ff:70:0c:13:d8:e0:42:aa:11:
         c6:e3:a7:11:5e:a7:10:50:6e:06:a9:80:fe:1b:ee:d5:60:d6:
         cb:c6:ac:f7:42:f8:b8:a7:2b:e8:1c:7b:ef:c2:b2:b0:77:d2:
         65:80:81:e4:aa:d1:03:20:98:2c:66:81:7c:17:a4:6c:23:e5:
         10:d3:ad:b1:9f:fa:65:8f:b8:46:80:42:59:9e:97:35:2b:3a:
         ef:e3:20:dd:3e:50:b8:74:1d:0e:f5:35:6a:95:ce:cc:fc:93:
         f4:94:54:3f:89:e1:44:bf:dc:77:c0:24:03:b9:04:64:7f:b9:
         31:66:25:5e:a0:78:0c:27:a3:ec:26:5d:90:f8:d9:bb:fc:90:
         d3:00:70:30:9b:d6:ea:af:0c:a8:e6:51:d5:fe:68:c9:52:13:
         18:b7:83:51:77:d3:7d:4d:75:fb:7b:56:93:05:24:c5:b6:99:
         fe:83:5d:e2:99:a4:a3:09:5a:21:d3:f4:7e:3a:06:73:d0:65:
         d0:8d:b4:14:88:3d:6c:bf:7c:ab:e8:6e:4c:8c:7b:02:e8:59:
         91:79:f6:06:f4:45:6a:53:9c:ed:6b:a5:35:e8:32:52:e1:64:
         b7:59:b2:b7:9a:b4:56:90:d8:22:c2:31:93:d6:3d:67:d8:34:
         65:84:d1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----