Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SnEBOuG_2-JrvLJRjiRIEjXqNvI.roa
File:                     SnEBOuG_2-JrvLJRjiRIEjXqNvI.roa (raw, json)
Hash identifier:          8x/57qpNiyiNOLefCDN/vgvrqfGtMFp6wynNU1eXcBw=
Subject key identifier:   4A:71:01:3A:E1:BF:DB:E2:6B:BC:B2:51:8E:24:48:12:35:EA:36:F2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182F93EE0372C7DA3553558B93B94901BF3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SnEBOuG_2-JrvLJRjiRIEjXqNvI.roa
Signing time:             Thu 01 Sep 2022 13:30:23 +0000
ROA not before:           Thu 01 Sep 2022 13:30:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     54681
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a06:a005:1980::/44 maxlen: 48
                          2a06:a005:f00::/44 maxlen: 48
                          2a06:a005:1960::/44 maxlen: 48
                          2a06:a005:ee0::/44 maxlen: 48
                          2a06:a005:f20::/44 maxlen: 48
                          2a06:a005:18a0::/44 maxlen: 48
                          2a06:a005:1970::/44 maxlen: 48
                          2a06:a005:ef0::/44 maxlen: 48
                          2a06:a005:1950::/44 maxlen: 48
                          2a06:a005:f10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f9:3e:e0:37:2c:7d:a3:55:35:58:b9:3b:94:90:1b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  1 13:30:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a71013ae1bfdbe26bbcb2518e24481235ea36f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:ad:b0:fe:ac:0e:37:48:9e:37:b1:41:ba:
                    03:1d:9a:d5:6d:c0:6d:66:83:eb:eb:4b:43:81:b0:
                    3b:9a:51:82:d7:74:eb:8a:b0:b7:6c:46:5a:f2:71:
                    17:36:df:cd:3e:f6:b7:7f:a0:ea:d7:60:72:67:55:
                    b9:72:40:64:56:e2:4d:73:bc:cd:d0:f1:bf:18:b7:
                    89:51:33:55:e4:d1:03:8b:53:46:04:9b:82:58:e9:
                    4c:1a:97:ae:2a:42:4d:2e:f3:84:0c:43:0d:c3:4b:
                    6f:fc:1b:d5:05:df:41:3c:72:19:77:ab:65:b9:d2:
                    2b:44:f4:23:be:5c:32:ad:84:ba:bd:c3:b5:ac:c9:
                    f6:c0:a4:c0:33:44:08:f7:94:26:fd:99:7b:ef:01:
                    96:85:4d:c7:33:1a:20:b8:8f:11:1d:1b:17:1b:36:
                    06:ff:05:03:68:bb:c6:d6:f3:9a:84:77:79:70:25:
                    e5:00:52:3d:c2:3a:c7:b9:36:78:ae:1a:a3:51:6c:
                    6a:7f:3e:b4:26:22:78:fd:94:8c:ec:ce:a7:6e:97:
                    35:9c:8d:ea:65:88:03:49:83:14:92:d9:32:80:11:
                    b2:75:45:d3:df:e3:43:38:de:9c:f5:c5:53:27:68:
                    84:b0:9f:c8:50:b7:e9:83:3b:00:06:7d:d7:03:d8:
                    ab:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:71:01:3A:E1:BF:DB:E2:6B:BC:B2:51:8E:24:48:12:35:EA:36:F2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SnEBOuG_2-JrvLJRjiRIEjXqNvI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:ee0::-2a06:a005:f2f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:18a0::/44
                  2a06:a005:1950::-2a06:a005:198f:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:1c:c1:77:8e:e7:2e:63:42:ee:c9:71:08:e5:f3:2b:84:97:
         12:e1:70:ba:1f:92:85:2e:e2:bc:e0:65:94:c3:10:46:71:7a:
         0e:83:66:3d:1b:e9:6c:4a:72:a8:05:b6:1b:ef:f0:9d:89:23:
         68:d0:31:c2:4d:43:2a:05:76:3a:81:04:74:c3:8d:19:af:d6:
         29:fe:24:a5:ce:4a:8a:a3:64:fb:bf:f0:62:20:bb:ed:59:7b:
         e3:ca:43:a9:7b:8d:12:7f:6e:8c:b1:2d:75:af:25:6a:f8:b0:
         8e:90:6e:88:62:11:a6:db:c7:60:2f:fe:6c:72:d2:59:71:02:
         50:4d:35:4c:65:37:7d:d6:14:8c:b9:e9:41:5e:8c:f4:96:38:
         9e:b2:5d:c6:ac:f9:79:7d:89:94:63:a0:3f:cf:51:75:cd:3c:
         9a:2b:b4:85:d1:ba:55:f5:78:db:2a:c7:1a:ee:c2:e1:62:d7:
         ea:20:6c:38:c6:1e:15:96:2f:c8:4a:8d:60:2a:12:79:40:24:
         f6:5d:cb:52:4c:d3:96:5e:83:f3:b7:79:e7:13:da:14:34:f3:
         39:a8:bb:fa:d4:7d:90:eb:64:c0:6a:84:6b:37:d1:bc:d9:7b:
         cc:38:ae:5c:72:d2:e3:6d:e7:20:a3:38:b5:6f:16:86:0f:5e:
         44:fb:9d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----