Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TczKnbGJKjfdTIXXyFFAh7FbRGM.roa
File:                     TczKnbGJKjfdTIXXyFFAh7FbRGM.roa (raw, json)
Hash identifier:          BDpf1VVAry3iN4e2wcA5apA27VpF+z6TL9DeTt+OcvM=
Subject key identifier:   4D:CC:CA:9D:B1:89:2A:37:DD:4C:85:D7:C8:51:40:87:B1:5B:44:63
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01849D9E703AC210931A99668B2A0FCF6794
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TczKnbGJKjfdTIXXyFFAh7FbRGM.roa
Signing time:             Tue 22 Nov 2022 04:35:17 +0000
ROA not before:           Tue 22 Nov 2022 04:35:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212715
IP address blocks:        2a06:a005:1089::/48 maxlen: 48
                          2a06:a005:108a::/48 maxlen: 48
                          2a06:a005:1087::/48 maxlen: 48
                          2a06:a005:1088::/48 maxlen: 48
                          2a06:a005:108b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:9d:9e:70:3a:c2:10:93:1a:99:66:8b:2a:0f:cf:67:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 22 04:35:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4dccca9db1892a37dd4c85d7c8514087b15b4463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:60:0e:ea:b9:bb:bf:7b:d5:3c:c3:c5:33:
                    de:fd:22:39:2f:ab:9c:71:e0:bd:2b:40:d1:97:61:
                    8e:a4:af:e4:54:69:9f:28:73:cf:21:e9:88:10:05:
                    8c:52:76:f6:52:3b:57:12:00:cd:bb:f0:77:5e:de:
                    52:8e:37:9a:be:42:d1:ad:30:cf:fb:71:e3:5a:ec:
                    db:ce:4b:92:0e:c7:16:39:81:71:0e:5f:03:1f:3e:
                    00:ea:1d:8c:5f:cc:b1:9f:f8:2d:bc:dd:7a:da:ee:
                    33:d3:9f:8b:5c:e5:0b:eb:d2:0f:16:1e:03:c7:fb:
                    37:bc:ec:53:38:1f:1e:61:2a:1c:5a:8e:d6:92:6c:
                    f0:46:8a:bc:ff:94:a1:55:16:8e:d1:7a:de:0f:3f:
                    9b:7b:1f:38:f4:fd:87:ff:44:8c:97:cc:84:94:20:
                    ba:29:fc:cb:52:79:fc:f2:69:85:6e:ca:ed:40:62:
                    eb:93:37:b5:61:ca:db:49:58:bc:2a:c2:9f:fb:f6:
                    48:b5:ce:53:38:d7:fa:09:3b:c6:8c:e3:41:d0:58:
                    97:01:bc:64:a5:bd:f8:89:b8:72:a5:65:68:36:d2:
                    46:af:00:08:1e:58:4b:11:b8:21:cf:8f:17:ad:36:
                    f4:f8:0a:ec:1f:55:c8:a1:c0:c0:1b:e3:e2:8c:8c:
                    ec:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CC:CA:9D:B1:89:2A:37:DD:4C:85:D7:C8:51:40:87:B1:5B:44:63
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TczKnbGJKjfdTIXXyFFAh7FbRGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1087::-2a06:a005:108b:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         40:55:fd:86:05:67:07:24:5f:59:c4:7b:13:51:4b:8c:27:4c:
         db:dd:03:d4:77:18:0b:f2:5d:5f:ff:41:07:46:00:65:4a:56:
         9b:93:a8:ec:0e:72:6e:b4:e3:c5:30:3f:da:64:01:eb:20:69:
         76:87:80:3a:82:74:d4:3c:80:68:85:12:3a:69:8a:10:04:51:
         ce:7e:36:07:95:40:22:1e:82:20:87:37:03:c6:a2:e8:cf:cf:
         3e:8f:ef:74:b1:d7:90:91:02:7a:1d:b5:a5:3d:94:51:77:ec:
         b1:4d:1f:77:8c:d9:e1:fc:62:af:76:0b:cf:09:1e:16:0a:bf:
         f7:76:9c:4c:f5:93:3f:3f:76:84:c6:42:6f:de:41:e6:c5:eb:
         a3:21:eb:9a:00:3b:23:94:63:2a:12:ab:0a:68:2e:6a:ed:85:
         d8:42:25:bb:3e:12:aa:cc:24:8c:70:a9:4a:78:f6:44:3e:79:
         c7:d6:fd:47:8c:8c:fb:4c:b1:12:97:34:b5:46:17:a8:3c:61:
         17:0b:2f:c8:b9:3d:6f:a6:de:f5:f1:e6:b3:d3:04:df:f5:47:
         fd:ab:8a:e0:6f:66:77:be:6b:0b:5d:b1:76:b4:37:9e:43:34:
         1b:0d:a2:60:35:bb:a5:56:b2:d4:82:de:0c:a5:55:ee:ff:b4:
         55:4c:44:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----