Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UVxY6lfkDpCCozlvwGu8rbxJiLI.roa
File:                     UVxY6lfkDpCCozlvwGu8rbxJiLI.roa (raw, json)
Hash identifier:          JvBQlcYqQg5Dso5IF7rJJsSlDLA3QVM2Rrgd1ihEaP4=
Subject key identifier:   51:5C:58:EA:57:E4:0E:90:82:A3:39:6F:C0:6B:BC:AD:BC:49:88:B2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182216E772603AE6E8DFA5B8BB97EC6FFED
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UVxY6lfkDpCCozlvwGu8rbxJiLI.roa
Signing time:             Thu 21 Jul 2022 15:44:23 +0000
ROA not before:           Thu 21 Jul 2022 15:44:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203852
IP address blocks:        2a06:a005:2::/48 maxlen: 48
                          2a06:1287:1800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:21:6e:77:26:03:ae:6e:8d:fa:5b:8b:b9:7e:c6:ff:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 21 15:44:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=515c58ea57e40e9082a3396fc06bbcadbc4988b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ca:5c:ab:1d:b3:71:70:d6:bf:51:dc:8e:8c:
                    88:8d:d6:e7:f0:77:9f:97:64:4b:3f:0c:eb:b8:36:
                    2d:ff:14:43:68:f1:91:5b:b1:9a:f8:cd:c7:16:21:
                    2a:f2:bc:21:e4:fb:11:1d:78:45:c6:a7:b4:e4:bd:
                    6d:71:a0:09:2f:64:10:33:da:55:f5:61:af:5d:9f:
                    5f:4f:de:e6:d5:e9:61:02:4b:87:24:62:ef:a3:8e:
                    81:4f:be:b5:fc:72:1d:41:1b:34:94:3e:39:14:59:
                    93:52:29:2d:74:c4:91:87:76:0a:d4:a2:9b:01:19:
                    01:81:34:17:0e:3c:61:74:9d:68:71:24:ae:01:45:
                    60:9b:90:1c:8a:22:b2:ee:9e:a8:f5:33:c6:b6:13:
                    bc:6c:d0:f3:c9:0b:cc:64:07:da:ef:3e:06:f1:5c:
                    9d:bb:15:d4:0a:06:4c:ad:80:20:93:52:6e:46:c5:
                    dd:c0:8f:d1:7c:41:57:5d:4e:d7:06:5c:d6:c0:f7:
                    96:76:a3:42:1f:40:44:41:11:6a:35:a7:73:30:70:
                    80:f5:2d:0e:ae:42:9e:80:4a:79:bd:66:cf:fc:fb:
                    4c:b1:5b:68:c4:43:1b:e5:4b:36:c0:0e:90:04:28:
                    77:9d:60:30:28:15:95:82:97:d3:51:0b:c8:2c:00:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5C:58:EA:57:E4:0E:90:82:A3:39:6F:C0:6B:BC:AD:BC:49:88:B2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UVxY6lfkDpCCozlvwGu8rbxJiLI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1800::/40
                  2a06:a005:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:83:ec:d2:74:c4:02:d7:3a:ea:6b:18:f7:29:7a:02:c5:83:
         c8:e3:db:aa:4d:5c:a8:e8:ad:11:86:4d:be:c1:22:9c:28:71:
         3a:fc:bd:60:59:15:4e:20:f4:f1:1f:ae:95:21:98:ea:50:b1:
         3a:b1:24:d8:a4:41:da:f3:63:6f:44:d1:a5:53:7e:73:a8:da:
         39:37:00:5b:7d:f4:1e:d7:b7:a7:dd:32:00:2b:21:7f:34:24:
         21:b4:8d:2f:02:63:21:3e:9b:fc:0e:de:39:13:54:91:4e:96:
         6c:d2:1f:44:1b:f7:d1:40:5a:dd:fb:64:39:67:89:b8:48:5b:
         aa:7c:96:06:17:9a:79:d4:8c:91:11:c8:dc:6c:78:c9:df:71:
         69:dc:4f:2a:da:af:06:ef:f5:bd:15:d1:09:0b:20:ae:3c:ad:
         a5:63:83:2a:00:69:68:3d:2e:2c:31:82:b9:ee:f7:66:28:78:
         33:97:88:00:8a:94:42:80:97:5a:b0:bc:0c:af:85:40:be:8c:
         09:e5:d9:90:3a:ee:5c:8c:75:95:a5:43:5b:a9:78:bc:91:93:
         cd:d3:44:f3:0e:ab:70:3e:6a:02:4a:6a:05:e3:df:ad:1d:cd:
         63:c5:95:e0:bc:66:a5:40:dd:87:e8:80:2a:a5:b2:d2:fe:64:
         4d:ae:2b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----