Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VK39XOlHcu0FLiAiLkiJu7MNyEY.roa
File:                     VK39XOlHcu0FLiAiLkiJu7MNyEY.roa (raw, json)
Hash identifier:          sYu39c748BNgH0o7qz/unNtCBKoMfZJxuqcE2+CxEVo=
Subject key identifier:   54:AD:FD:5C:E9:47:72:ED:05:2E:20:22:2E:48:89:BB:B3:0D:C8:46
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18DA87AE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VK39XOlHcu0FLiAiLkiJu7MNyEY.roa
Signing time:             Thu 28 Apr 2022 15:06:43 +0000
ROA not before:           Thu 28 Apr 2022 15:06:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205432
IP address blocks:        2a06:a005:680::/44 maxlen: 48
                          2a06:a005:6a0::/44 maxlen: 48
                          2a06:a005:690::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416974766 (0x18da87ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 28 15:06:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=54adfd5ce94772ed052e20222e4889bbb30dc846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:55:1e:16:34:37:b0:25:14:b9:de:a8:c8:65:
                    fd:e1:99:9e:9c:10:a2:6c:28:e5:ec:be:89:91:dd:
                    ae:35:f3:94:b7:b2:89:84:45:c1:b4:d1:8d:ce:13:
                    91:1b:27:09:92:8c:53:b6:8d:db:5d:6f:b2:78:20:
                    6c:1e:ae:5b:ed:cc:b5:4b:bc:14:ca:54:9a:c5:6d:
                    7c:b9:12:52:60:09:90:90:09:37:d1:a1:56:43:d4:
                    64:70:d4:fa:09:a3:8a:0d:d2:c1:3a:0d:fb:b2:95:
                    3c:b9:4c:65:3f:3f:22:c8:e9:40:29:ee:69:60:37:
                    ae:b5:f5:b8:fd:38:c4:54:13:41:77:d0:83:06:e9:
                    1e:ce:0c:d7:26:09:ba:3e:af:95:62:7f:80:68:84:
                    9d:71:24:78:e2:89:5f:03:46:57:49:55:b0:1c:03:
                    23:d3:bf:fe:cf:eb:31:3e:f3:34:94:cd:71:9b:ec:
                    ad:d9:13:9d:0e:d8:89:20:1c:a0:af:c5:d1:7e:08:
                    0e:60:4c:36:ca:63:41:b9:3f:87:c0:bd:31:cb:41:
                    61:54:8b:8b:93:4d:fd:63:70:88:9a:90:f6:c7:84:
                    f7:a0:d6:28:16:9b:2f:ec:56:92:44:72:a2:2b:f3:
                    54:ec:6b:e7:0a:3e:22:5c:0f:be:a9:10:ee:dc:08:
                    87:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AD:FD:5C:E9:47:72:ED:05:2E:20:22:2E:48:89:BB:B3:0D:C8:46
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VK39XOlHcu0FLiAiLkiJu7MNyEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:680::-2a06:a005:6af:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         43:bf:a7:e3:6b:e6:30:69:f4:37:45:7c:ae:86:50:a7:e3:35:
         ac:35:61:24:31:87:0d:fa:10:67:1d:a7:9e:20:8c:fd:24:ee:
         68:14:d5:59:7c:87:4e:57:ab:95:97:31:06:8c:2f:63:b0:8f:
         ec:3e:42:14:4a:31:95:13:90:fa:59:83:98:85:e8:f1:fe:ea:
         51:aa:b5:e2:2d:33:37:03:0f:91:c5:d8:32:db:ad:58:43:23:
         ec:62:ca:7e:50:91:e7:b6:25:d2:78:97:4b:ff:2e:bd:aa:9c:
         dd:0b:74:91:5e:64:72:ba:5c:f3:13:3a:4e:a0:a5:fc:f3:e4:
         1a:33:30:2a:c9:4f:dd:09:90:df:a8:7e:7e:9e:7c:93:af:ad:
         6a:44:7c:b9:4e:6e:bc:ea:87:29:25:5d:93:8e:e5:ef:e4:05:
         5d:ad:6d:87:9d:e7:3e:22:fa:14:94:6b:03:95:67:50:15:15:
         a7:09:2e:5f:9c:f8:2a:80:82:cd:28:c2:3b:94:f3:56:f7:b3:
         4c:f9:be:fe:04:ea:38:16:e9:01:f8:31:65:65:50:00:13:15:
         b5:ba:34:92:58:ac:bf:00:6f:a7:7c:ec:41:d5:10:51:78:de:
         de:06:c9:57:ab:da:3f:42:ef:4d:e6:43:5f:a4:e3:88:08:7e:
         2a:1c:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----