Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/X6sISOJ_PWwkShdsb2ITDV4XO9M.roa
File:                     X6sISOJ_PWwkShdsb2ITDV4XO9M.roa (raw, json)
Hash identifier:          dtc8WF5lI8PNbckU1Z9NOEp5BJt5sbLg3RNUHr6eNfM=
Subject key identifier:   5F:AB:08:48:E2:7F:3D:6C:24:4A:17:6C:6F:62:13:0D:5E:17:3B:D3
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1AEA86C6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/X6sISOJ_PWwkShdsb2ITDV4XO9M.roa
Signing time:             Thu 16 Jun 2022 09:46:45 +0000
ROA not before:           Thu 16 Jun 2022 09:46:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206016
IP address blocks:        2a06:a005:a0c::/48 maxlen: 48
                          2a06:a005:d20::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451577542 (0x1aea86c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 16 09:46:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5fab0848e27f3d6c244a176c6f62130d5e173bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:99:38:41:e6:f1:dd:7c:b5:4f:51:e3:cd:
                    36:7e:f4:49:cc:ec:95:c4:64:19:07:13:3d:38:1e:
                    4f:01:1d:0f:ac:a9:ab:af:2a:06:18:ba:f2:f0:3e:
                    95:1a:46:ca:a9:17:f2:6a:47:56:11:57:62:3e:f6:
                    5a:ac:02:8d:03:6d:d8:fe:67:c1:ec:a9:7d:95:e2:
                    58:a5:41:ed:9c:54:3c:98:fa:0d:a0:48:43:c8:bd:
                    cf:e9:49:7e:3f:9d:8d:65:01:fc:c7:1c:e5:c6:37:
                    ff:63:aa:98:ae:fa:cb:18:37:ca:cc:d9:8d:25:b2:
                    9d:0a:7f:cf:50:5a:af:a2:16:6c:c1:ef:ef:dd:cd:
                    81:9e:9c:bb:fb:35:b6:d2:0f:94:07:d5:52:7c:3a:
                    96:32:83:5e:8d:fd:74:c2:59:26:df:23:07:66:6c:
                    93:29:e7:16:c6:c0:6f:78:ea:b4:bc:34:f2:52:83:
                    d4:dd:85:f1:20:ee:bf:f8:16:95:d5:c5:b6:77:61:
                    99:e9:03:e5:7a:90:9a:6b:45:f0:de:24:8b:4d:54:
                    20:11:a2:58:fd:12:ad:fc:20:9f:ad:01:f9:60:93:
                    a0:41:f2:46:52:09:36:4d:c4:a0:da:34:0c:54:77:
                    77:14:c4:bc:7a:00:48:f8:96:2c:bd:cc:3f:a5:b3:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AB:08:48:E2:7F:3D:6C:24:4A:17:6C:6F:62:13:0D:5E:17:3B:D3
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/X6sISOJ_PWwkShdsb2ITDV4XO9M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a0c::/48
                  2a06:a005:d20::/47

    Signature Algorithm: sha256WithRSAEncryption
         54:75:22:c8:f7:9a:42:31:17:ac:5f:21:eb:5a:98:ae:99:2c:
         b6:cc:55:8e:bc:cc:e7:d0:ad:88:79:ba:14:85:65:ae:c5:43:
         31:3f:1a:a3:4a:a5:62:34:03:2f:8c:89:a9:e4:a9:08:7d:b7:
         c3:54:07:74:6d:fe:61:a9:c3:16:d9:38:71:e2:c7:80:9d:11:
         67:3b:65:d1:7c:2e:37:4a:9a:66:90:b2:4e:a6:bc:62:2e:ab:
         b4:da:0e:1d:0c:c0:af:94:43:01:54:20:54:59:fa:fb:b0:24:
         1f:8e:72:ef:28:a9:af:09:7e:94:b3:df:d2:08:16:9a:65:64:
         cf:72:b4:52:8e:c2:0d:7f:84:7b:5d:90:49:d7:3d:3f:c1:42:
         57:f3:f7:3b:32:6e:8d:b8:17:23:ec:bc:3f:6a:12:3d:0e:f9:
         96:6b:33:be:d4:2c:3c:47:9f:3e:c7:d5:9b:cf:2b:eb:16:42:
         c5:68:58:8f:4b:fe:7e:c5:4b:3a:9b:50:cd:20:4d:fd:54:43:
         f8:e2:24:79:c8:f0:63:dc:35:81:ec:95:1e:1f:a0:32:9e:56:
         6f:b0:4a:c1:26:4b:72:6b:cf:ef:50:84:2c:29:50:7c:44:78:
         23:2e:bd:93:93:a7:d6:c2:9d:32:55:33:1d:64:30:45:6b:08:
         52:c7:f2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----