Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/U_z3POlDzQyncwaqLQhChK9b0CM.roa
File:                     U_z3POlDzQyncwaqLQhChK9b0CM.roa (raw, json)
Hash identifier:          7iGSFDHhoVngG107iIqB5zpW9500a5ON/dLKOIpFXX4=
Subject key identifier:   53:FC:F7:3C:E9:43:CD:0C:A7:73:06:AA:2D:08:42:84:AF:5B:D0:23
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       167DB536
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/U_z3POlDzQyncwaqLQhChK9b0CM.roa
Signing time:             Sat 19 Feb 2022 04:32:35 +0000
ROA not before:           Sat 19 Feb 2022 04:32:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48266
IP address blocks:        2a06:a005:90::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377337142 (0x167db536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Feb 19 04:32:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=53fcf73ce943cd0ca77306aa2d084284af5bd023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d5:9b:05:dc:8d:8c:7f:3c:f6:24:81:42:7f:
                    18:d1:31:83:cc:19:b3:76:08:62:ae:4f:f3:c1:19:
                    bb:1a:24:da:9f:95:94:04:85:d1:d8:6d:05:b9:b8:
                    6c:e5:06:b8:c4:98:3f:d9:19:27:e8:05:b3:cc:e2:
                    5e:3a:d8:52:c0:70:e7:79:3c:cb:b0:37:25:7c:5c:
                    99:c0:84:54:8f:82:5a:8d:61:6a:cb:60:e5:16:30:
                    89:26:9d:1b:ee:4c:77:80:a2:d0:e3:55:cd:dc:49:
                    dd:1d:88:84:0f:59:e5:be:54:53:aa:9e:b5:43:e7:
                    ab:84:ce:70:2a:4c:6f:65:0c:a8:09:2d:1c:76:51:
                    17:ac:48:5a:2f:92:95:30:f2:8b:e9:30:05:7c:ce:
                    d8:50:21:c4:8f:99:91:e4:1d:38:85:a0:ab:ad:f3:
                    39:13:af:2c:a1:ec:0b:98:9b:96:28:e5:00:70:f8:
                    3a:36:a8:e9:c6:57:f8:bb:ad:a1:3b:d8:25:a3:af:
                    f4:23:aa:b9:49:b4:10:70:32:61:82:57:0c:13:20:
                    d0:92:c6:0f:fa:7a:35:f6:b1:81:c4:ac:f8:4c:74:
                    17:ed:4c:7b:b8:61:4a:45:1f:be:41:3c:5c:96:29:
                    83:39:40:87:2d:63:40:84:c9:a8:c9:78:2f:65:e8:
                    e2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FC:F7:3C:E9:43:CD:0C:A7:73:06:AA:2D:08:42:84:AF:5B:D0:23
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/U_z3POlDzQyncwaqLQhChK9b0CM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:90::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:36:36:1f:99:34:d4:54:44:87:7c:08:f4:e8:de:3a:d5:f1:
         08:6a:24:ac:51:79:f7:5c:3d:d3:39:76:51:5e:b2:3f:7d:96:
         7e:28:b1:f3:e3:0a:fb:35:25:a7:ca:43:b3:33:fe:61:26:f6:
         a1:83:83:a6:d8:4a:f2:8d:2e:37:c4:2d:aa:06:7b:c9:ee:8d:
         8c:a0:2c:f3:e4:6e:01:28:e8:90:6b:02:3d:de:65:8d:e6:47:
         00:02:d9:58:d5:18:5d:ab:42:e9:7b:a1:85:a3:be:a7:35:fe:
         b3:94:ae:02:16:a7:7d:f5:15:a4:60:f3:b4:4f:7b:80:58:4e:
         d4:98:61:a5:ae:16:43:70:7c:7a:63:88:3f:ad:2b:3e:bd:24:
         0a:81:e0:17:37:15:96:55:86:0e:3b:9b:cb:6a:46:33:e0:e5:
         ce:23:0e:63:71:8c:44:e3:d5:3b:a3:5e:7e:aa:d3:be:26:9f:
         49:8e:f2:8e:0e:8e:ff:c2:20:64:de:92:50:a2:ce:08:4b:22:
         bf:cd:f2:78:6b:60:bb:0d:35:9e:1f:b8:e6:3d:af:12:8a:7f:
         af:f2:fd:80:a9:eb:d3:11:fe:e8:e7:62:1d:df:77:c5:c6:37:
         bd:c9:4c:9e:3d:67:1a:d5:3d:85:cb:8d:5d:70:80:98:58:a8:
         e6:52:08:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----