Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UH2S9s71G1ippnyvLNFO42BDumk.roa
File:                     UH2S9s71G1ippnyvLNFO42BDumk.roa (raw, json)
Hash identifier:          bXwn5Kday8VjWWYjPh6Eo3yVns5ZCwTOMh2dUbhJA/o=
Subject key identifier:   50:7D:92:F6:CE:F5:1B:58:A9:A6:7C:AF:2C:D1:4E:E3:60:43:BA:69
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19FD9B9B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UH2S9s71G1ippnyvLNFO42BDumk.roa
Signing time:             Sun 22 May 2022 13:27:30 +0000
ROA not before:           Sun 22 May 2022 13:27:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206804
IP address blocks:        2a06:a000:1e2::/48 maxlen: 48
                          2a06:a000:1e0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436050843 (0x19fd9b9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 22 13:27:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=507d92f6cef51b58a9a67caf2cd14ee36043ba69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:f5:99:01:e8:14:75:5d:96:f6:02:e4:00:
                    f2:f9:bb:fc:1b:73:20:a5:7f:c6:97:96:81:70:9b:
                    b0:79:c8:d1:3a:2c:31:54:48:05:4a:b6:09:27:6c:
                    1f:34:06:62:3e:d4:d3:75:3a:03:f6:db:eb:76:d3:
                    fd:b6:46:eb:ed:f7:e5:13:49:c3:4c:a8:a4:b3:1d:
                    85:f3:33:a6:88:2a:8f:63:ce:9e:19:61:66:b7:4d:
                    58:db:d5:f4:f8:3f:d8:40:43:ff:b5:98:76:fb:5b:
                    88:38:6e:9a:45:4c:5e:c5:5c:ae:97:c8:34:11:ed:
                    99:5b:18:ff:e1:46:f5:df:dc:e4:3e:66:84:d4:d8:
                    25:18:3f:c5:ca:0f:a3:a9:59:c8:c4:79:2e:a6:a3:
                    71:24:8e:6a:82:df:cb:32:80:1f:4d:16:4f:58:3d:
                    3f:17:3b:da:6b:b8:ac:c4:03:8c:62:e3:7c:79:e0:
                    08:6c:0c:a8:0f:34:bc:4d:5e:3e:06:ab:f8:32:8a:
                    64:44:7f:7e:37:1c:23:54:a5:18:ca:2f:19:d6:f7:
                    e8:15:93:1e:7c:a4:e0:94:3e:e1:d0:0f:4c:9c:05:
                    36:e2:d9:df:f1:ea:39:ad:9f:cf:f7:51:a1:e1:e1:
                    b2:41:64:f6:82:81:78:df:98:7f:b1:46:86:75:e4:
                    69:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7D:92:F6:CE:F5:1B:58:A9:A6:7C:AF:2C:D1:4E:E3:60:43:BA:69
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UH2S9s71G1ippnyvLNFO42BDumk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a000:1e0::/48
                  2a06:a000:1e2::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:1f:8d:d6:cd:fc:91:77:30:ab:78:ce:4b:50:21:b0:5a:73:
         f4:c6:d4:fd:a4:3a:0e:0b:cc:c3:5c:96:67:84:32:a4:4b:48:
         2f:6c:6a:4c:28:7e:b7:99:da:05:04:27:c5:ec:42:dc:8e:42:
         46:9a:0b:54:51:0d:0a:23:7d:2e:31:7e:e5:50:d4:0a:77:22:
         16:eb:8d:91:f9:a1:9c:72:df:97:14:30:dc:f7:15:97:f3:01:
         d2:86:d7:5b:4f:95:b6:b3:49:5e:76:56:8b:a3:d0:52:83:e1:
         73:c3:88:99:d9:26:d2:df:d8:a1:8f:50:a5:98:1f:1f:64:51:
         12:f0:41:6f:c5:5f:5f:e5:aa:32:c5:ff:62:5e:cd:f8:7e:9a:
         0d:2d:71:49:d3:68:62:b8:0d:b4:44:45:60:8e:e9:c5:a5:48:
         60:a7:f9:df:52:c5:f0:f0:45:d7:10:6f:e7:18:23:30:b2:ab:
         39:f2:d1:54:f2:7b:35:22:30:08:c5:40:ff:29:87:e6:ca:ae:
         1f:dd:a2:0b:89:e8:18:b4:70:8c:40:86:b0:f6:a1:35:6e:0e:
         1d:08:27:6c:ba:3a:36:31:0d:ff:42:b8:77:e2:db:83:f4:e9:
         62:87:82:3f:90:dd:13:44:37:ea:2b:ce:1c:e7:28:00:8b:eb:
         a2:3f:b2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----