Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SQJ1Xz9OIXT25TCX-Z5PmM8TR08.roa
File:                     SQJ1Xz9OIXT25TCX-Z5PmM8TR08.roa (raw, json)
Hash identifier:          yg1j4jA3n0qXEe6St/taGYMszuP3I9e99w1Lv0xuOzI=
Subject key identifier:   49:02:75:5F:3F:4E:21:74:F6:E5:30:97:F9:9E:4F:98:CF:13:47:4F
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183A85B38452A4FB003D848FDBFE3D568CE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SQJ1Xz9OIXT25TCX-Z5PmM8TR08.roa
Signing time:             Wed 05 Oct 2022 13:34:53 +0000
ROA not before:           Wed 05 Oct 2022 13:34:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212817
IP address blocks:        2a06:a005:ba0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a8:5b:38:45:2a:4f:b0:03:d8:48:fd:bf:e3:d5:68:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct  5 13:34:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4902755f3f4e2174f6e53097f99e4f98cf13474f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:df:72:4a:2c:35:e4:80:9a:95:07:7c:62:
                    08:e2:85:86:a4:8d:70:79:0e:5c:22:d7:93:13:31:
                    fa:8e:fc:08:40:72:35:0e:5e:50:42:34:33:5e:58:
                    d7:e9:d5:d3:8f:2e:bf:24:77:d7:3e:f7:7d:34:3a:
                    99:65:ef:51:0a:52:e2:09:e7:6d:01:09:12:3b:b8:
                    17:8e:71:bc:eb:7b:cb:f5:00:9e:ae:6d:b6:c9:d9:
                    48:df:ed:ce:d1:32:3f:3c:04:58:3b:6a:43:33:60:
                    67:53:aa:26:d6:46:19:57:64:da:81:10:8d:5e:82:
                    16:86:bc:8e:c7:91:2e:77:68:cc:3b:d5:c4:a8:92:
                    51:10:11:79:a7:b3:6b:8f:4a:03:fd:04:95:38:37:
                    28:44:6d:00:08:a6:6a:de:23:4e:62:74:b9:ba:38:
                    8a:3b:59:b0:b8:dd:58:50:ce:6f:8c:a0:36:57:30:
                    57:de:cf:b5:79:86:47:eb:c8:02:40:d8:4d:22:7e:
                    b6:58:fa:8f:05:f2:99:b2:f5:05:de:c3:1b:23:9b:
                    c6:70:98:a5:fb:49:67:d9:ff:01:d3:87:73:1f:8c:
                    34:43:8f:7b:b5:a2:64:b3:12:2e:16:b3:2a:fb:6f:
                    a6:49:dc:3c:ef:61:2c:c2:d1:89:15:5d:e6:0a:8e:
                    6d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:02:75:5F:3F:4E:21:74:F6:E5:30:97:F9:9E:4F:98:CF:13:47:4F
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SQJ1Xz9OIXT25TCX-Z5PmM8TR08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:ba0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9c:22:d9:13:0b:eb:10:f7:5a:da:c8:f2:d7:5c:04:a6:33:1e:
         27:46:69:8c:c9:63:ae:4d:02:82:73:fe:53:59:b5:e0:da:60:
         f0:a4:4f:dc:ce:61:e3:06:a2:46:3d:e4:49:14:81:98:17:22:
         f4:30:a7:b1:82:9b:de:2e:11:9f:09:ed:9b:13:38:ac:84:f8:
         2b:b3:45:19:db:89:d4:ec:4d:f8:a2:04:0f:c2:65:b4:55:06:
         22:a4:f3:03:23:11:b9:86:68:7a:b0:c7:cf:77:00:1d:dd:0c:
         1c:9d:3e:05:63:37:c1:13:1c:c4:00:b5:bf:e7:4b:37:40:d4:
         d2:63:67:64:65:4f:24:c6:60:e5:2b:84:f9:01:67:b7:62:80:
         73:76:ba:6c:65:09:4e:ec:d2:98:c8:a9:73:70:a2:c5:15:de:
         a1:ce:1b:14:5e:c0:2c:a2:e2:94:d1:f3:21:d9:16:00:ad:75:
         c2:9d:84:fd:af:a9:2d:79:cf:ed:88:84:09:e7:82:4c:00:a8:
         0b:6d:ad:e4:dd:c1:f7:01:1c:2e:50:57:6c:36:d3:af:27:52:
         a7:d4:36:9f:06:d3:bf:f7:4e:43:6e:f1:7c:ab:db:14:cb:00:
         a6:3a:cf:45:ae:2d:9d:3e:f2:da:bd:e5:07:85:8a:cc:f4:54:
         79:e3:c4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----