Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VAuG4xDU3rwB1y1C7_MxVKqOCik.roa
File:                     VAuG4xDU3rwB1y1C7_MxVKqOCik.roa (raw, json)
Hash identifier:          PzjwIGFRaJe+krphnC4hXTzbNUSVYAVKkC4ORurNNig=
Subject key identifier:   54:0B:86:E3:10:D4:DE:BC:01:D7:2D:42:EF:F3:31:54:AA:8E:0A:29
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184B95DF050A31823B762C3A24EEFB53A9C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VAuG4xDU3rwB1y1C7_MxVKqOCik.roa
Signing time:             Sun 27 Nov 2022 13:54:12 +0000
ROA not before:           Sun 27 Nov 2022 13:54:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     27040
IP address blocks:        2a06:a005:1c7a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:b9:5d:f0:50:a3:18:23:b7:62:c3:a2:4e:ef:b5:3a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 27 13:54:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=540b86e310d4debc01d72d42eff33154aa8e0a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2c:41:4b:8a:32:68:f9:ad:f9:60:4f:bf:48:
                    67:14:e3:a0:a2:34:ee:b5:84:e2:05:89:ca:ff:26:
                    2e:32:4a:78:86:db:3d:43:2f:96:3d:f4:3f:b0:e3:
                    bc:1c:53:7a:e1:16:e9:91:d9:5f:bf:8a:20:28:df:
                    b5:84:94:9d:d8:84:fa:b2:97:4e:c4:ad:b9:7b:d2:
                    ed:9f:a5:d2:d7:db:50:cc:d6:1f:31:d4:30:02:1a:
                    3c:1c:6d:8f:99:76:f2:a1:b3:0b:94:e6:7e:57:3a:
                    2e:a6:f4:32:f8:0c:f7:60:21:95:14:1a:0d:72:ba:
                    cc:a2:05:a7:90:6f:af:68:05:7c:25:fe:2e:71:1d:
                    91:ed:62:ed:da:d9:fc:1b:7d:1d:cc:a6:4e:56:5b:
                    d2:45:10:3d:d4:54:45:10:17:76:d2:dd:f6:97:28:
                    f0:5e:db:e0:85:32:55:91:f4:07:55:fa:1f:8e:d7:
                    fc:02:e6:4e:3a:4c:54:48:92:60:3d:66:25:a8:4c:
                    e6:8e:17:ea:29:1c:8b:f9:c7:2a:0d:35:64:11:ed:
                    17:4f:8b:31:aa:68:7c:13:6a:ce:33:f7:36:0e:d6:
                    cd:c4:7f:e6:52:43:0a:92:02:c1:26:9f:2a:d7:15:
                    8c:0b:3d:f0:bc:35:c0:9f:95:50:40:c1:c4:b7:13:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0B:86:E3:10:D4:DE:BC:01:D7:2D:42:EF:F3:31:54:AA:8E:0A:29
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VAuG4xDU3rwB1y1C7_MxVKqOCik.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1c7a::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:c0:8a:a3:b0:f4:e2:8e:aa:14:8d:26:8e:10:be:28:e3:1c:
         9e:8f:96:c7:ed:26:f9:ec:70:86:ca:f4:a3:09:f7:93:1b:b6:
         47:c3:85:ac:c4:e9:d7:cf:18:72:3a:86:fc:a6:6e:ea:cd:ba:
         dc:9e:71:e0:42:ea:84:5d:5e:b2:bb:c7:36:c4:ac:d9:a3:14:
         9a:c4:3c:55:6f:ca:06:ea:e1:85:d5:27:95:02:69:a5:07:1e:
         a4:bc:7f:a5:b8:c4:be:70:c7:0c:53:8c:02:56:18:f7:75:ef:
         f9:9c:de:af:56:c7:97:6f:ea:dd:5a:9d:40:a7:3a:80:4f:c0:
         51:20:ce:38:23:77:cb:6a:36:cc:7e:39:d8:71:8a:16:5e:e5:
         ba:77:06:ae:7b:d1:c3:90:6c:13:b8:bc:c5:0d:dc:22:71:1a:
         44:71:a6:2f:22:36:21:21:43:6f:cb:0a:4e:77:df:43:c7:db:
         45:ac:21:72:4c:87:f4:14:86:89:0f:63:bd:4c:aa:70:2b:22:
         10:60:b8:9e:75:eb:03:3f:2a:50:a4:52:4b:b9:18:a6:65:26:
         fe:8c:2e:81:0b:16:35:35:cc:6b:03:73:a9:52:09:77:89:b7:
         70:8b:30:7d:6e:fd:88:99:83:f6:2c:05:e0:13:64:43:3a:82:
         95:33:7c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----