Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TKVHGsOdEswBIRTV_876EnO4NfM.roa
File:                     TKVHGsOdEswBIRTV_876EnO4NfM.roa (raw, json)
Hash identifier:          8Ueiz6jXxXWvBUe8PRpZ1gUAVyuyTDGKsnocxfdI5Pk=
Subject key identifier:   4C:A5:47:1A:C3:9D:12:CC:01:21:14:D5:FF:CE:FA:12:73:B8:35:F3
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1965E1FC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TKVHGsOdEswBIRTV_876EnO4NfM.roa
Signing time:             Sat 07 May 2022 03:14:26 +0000
ROA not before:           Sat 07 May 2022 03:14:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211266
IP address blocks:        2a06:a005:850::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426107388 (0x1965e1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  7 03:14:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4ca5471ac39d12cc012114d5ffcefa1273b835f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:e1:b7:4f:b5:0f:9e:4a:07:37:94:30:03:
                    3a:23:37:5f:dc:7c:3f:de:19:8e:a6:41:9b:7a:4d:
                    ca:e0:43:49:98:87:e3:37:07:50:cf:7a:03:89:0e:
                    95:12:46:38:a3:00:b5:fc:d5:42:61:57:ad:94:8f:
                    88:ed:99:ca:fe:d7:2b:a2:0d:c4:7a:0f:25:8b:ac:
                    24:27:56:00:9b:a3:eb:2d:d1:a9:1c:e4:b3:35:2d:
                    05:e5:5c:4a:e3:ab:3d:45:e9:41:c5:85:09:3c:b2:
                    10:a5:93:71:f6:54:08:b9:b0:5c:63:a2:b2:72:eb:
                    70:15:17:dd:9d:70:78:f4:07:1a:7e:90:4e:4b:4e:
                    88:1f:23:16:bc:9f:15:02:63:c9:24:06:ff:1e:c2:
                    3a:13:32:8d:fe:28:2f:47:b1:2c:a8:64:3e:96:94:
                    82:be:a1:f2:71:a0:7f:05:60:55:99:1b:d0:37:e3:
                    0a:1e:e9:79:8b:ef:d1:1f:15:d0:75:11:3b:70:23:
                    77:84:e4:53:2c:ec:30:b5:8e:21:c0:c9:f6:65:01:
                    66:fd:12:23:0d:13:b4:de:b8:18:22:75:ff:79:7b:
                    9f:13:a2:f1:8f:10:ba:8c:d0:8a:de:6b:37:2b:6d:
                    66:2a:1c:82:1e:ef:96:08:ae:6a:9b:48:16:3b:b8:
                    54:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A5:47:1A:C3:9D:12:CC:01:21:14:D5:FF:CE:FA:12:73:B8:35:F3
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TKVHGsOdEswBIRTV_876EnO4NfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:850::/44

    Signature Algorithm: sha256WithRSAEncryption
         10:cd:f6:d9:3b:78:ed:45:be:d2:a9:28:00:b3:01:b5:9d:63:
         df:5b:a3:2c:f6:35:fb:fb:44:3d:99:c5:71:c8:d3:e6:11:e1:
         57:e0:31:d0:f0:12:3a:c2:53:c1:cc:87:a0:af:98:88:f9:7e:
         41:13:d9:be:73:68:f4:7d:9a:eb:63:a2:48:c0:03:cb:bf:2b:
         7d:ea:11:45:74:df:2e:5c:db:a8:b7:4c:62:e0:63:05:46:9b:
         a9:c8:01:6d:34:81:9a:f3:6e:cf:25:81:e7:b5:22:54:d4:08:
         d8:b0:df:31:e0:b3:04:bf:66:56:bd:bf:b5:ef:8c:43:5e:49:
         ee:fe:15:8b:93:0b:d8:c1:5c:06:35:84:6c:f4:cc:97:08:8d:
         e8:b7:f6:57:52:5e:b2:07:55:64:e7:f0:22:10:02:52:cb:39:
         d3:5d:73:eb:a6:79:be:da:a2:ab:8f:82:a7:86:08:9f:fc:f6:
         bc:60:6e:35:2e:f8:5f:45:5c:b4:c7:2b:c7:96:8c:a0:7e:0b:
         40:09:5a:18:05:ce:4e:d7:95:ce:68:ed:5f:a4:fb:81:d9:3e:
         c6:c5:97:4c:de:21:61:51:0c:ac:71:89:09:b0:2a:b8:11:0a:
         a7:c8:99:f7:5c:10:c2:0a:a9:0d:7c:2d:90:a3:93:b4:78:6c:
         90:ad:1c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----