Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_I1v85GmZtpj74W-ra0KevAhmbQ.roa
File:                     _I1v85GmZtpj74W-ra0KevAhmbQ.roa (raw, json)
Hash identifier:          +HNPeWIFSPW4b8aDg2xzGlczye3rESscDVtxoP41cTo=
Subject key identifier:   FC:8D:6F:F3:91:A6:66:DA:63:EF:85:BE:AD:AD:0A:7A:F0:21:99:B4
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15C45944
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_I1v85GmZtpj74W-ra0KevAhmbQ.roa
Signing time:             Sat 01 Jan 2022 05:59:11 +0000
ROA not before:           Sat 01 Jan 2022 05:59:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211481
IP address blocks:        2a06:a001:a030::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365189444 (0x15c45944)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:59:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fc8d6ff391a666da63ef85beadad0a7af02199b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:a3:72:f1:92:67:fa:49:62:04:1e:d2:3a:
                    99:3b:25:c7:27:23:f3:6c:9f:4e:eb:76:24:84:20:
                    66:1d:3b:92:d4:40:93:a2:e4:19:98:d1:a2:bb:e4:
                    e1:49:e6:71:5b:41:36:b3:c3:dc:db:b8:b9:81:71:
                    75:8f:51:45:b6:2b:01:6f:42:b3:0e:a8:61:2f:8a:
                    34:9e:b5:28:f6:22:24:87:90:99:6f:76:c1:89:83:
                    ad:41:67:3b:7d:d0:5d:4e:00:a0:77:6a:1e:64:7f:
                    bd:14:70:23:7c:4f:fe:a3:11:4e:ce:44:9b:e4:d9:
                    5f:4b:5c:ec:3d:1a:cc:71:6e:03:0e:28:c1:ae:d4:
                    88:c7:49:50:e6:23:fc:f6:70:11:62:fa:64:b5:9f:
                    3f:b3:82:c7:f2:a3:d8:cf:ec:6e:f1:34:80:8a:b6:
                    62:d4:7b:4a:a0:6d:93:9b:df:f1:03:13:2f:02:ae:
                    fb:f8:e7:a1:21:8d:25:36:8b:44:e7:8f:2e:e3:db:
                    d4:f0:de:2b:14:c5:ee:4a:80:33:b8:92:8d:3a:47:
                    3e:f5:ba:4f:73:12:c5:10:91:7f:6b:75:7c:3f:3c:
                    12:ee:68:11:a0:01:c1:41:5d:e0:03:3d:c7:d6:be:
                    ec:14:8f:66:bf:6e:56:5f:42:d8:4d:c3:be:cf:25:
                    fe:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8D:6F:F3:91:A6:66:DA:63:EF:85:BE:AD:AD:0A:7A:F0:21:99:B4
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_I1v85GmZtpj74W-ra0KevAhmbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a030::/44

    Signature Algorithm: sha256WithRSAEncryption
         4d:fc:8f:1e:da:bd:0b:d7:3d:2d:4e:2e:bb:9f:08:d9:6f:3e:
         c9:4b:88:67:4d:6d:3e:03:05:14:6d:9a:11:68:db:3d:6f:3f:
         af:e5:ed:68:be:26:f0:bf:bc:f9:80:89:0e:5b:be:a8:55:28:
         de:7a:e0:00:f8:74:1d:87:3c:3e:59:64:48:ca:b6:f9:c7:51:
         1c:fe:41:db:a3:85:4e:ca:22:ef:d4:e1:6c:a8:42:a8:24:7e:
         d9:78:31:6c:65:be:d2:54:7c:7e:3f:ce:8c:25:95:a9:6a:a0:
         05:49:f6:c1:ad:cb:88:9b:03:c4:01:d8:a5:8e:fa:ef:e4:e0:
         ae:9f:d5:4b:e5:98:cc:e4:26:a5:be:6b:b0:80:14:f3:02:24:
         e6:11:ec:7f:f9:0e:0a:63:49:3e:df:49:77:07:93:13:53:57:
         92:a8:80:f0:05:cf:e8:d6:9c:57:df:cd:92:4e:de:ec:26:6b:
         5f:db:f9:77:3d:f5:a5:14:43:f9:be:31:ea:ec:81:ac:59:f4:
         bb:29:d1:0e:3e:dc:ae:fb:3d:66:2b:34:72:d2:7b:ed:85:87:
         51:fa:66:2e:00:bf:9c:1c:5e:9d:ff:85:03:23:5a:d7:e6:4f:
         29:8a:61:2d:82:7b:6e:06:c1:12:a4:c8:cf:25:93:09:73:9f:
         18:5a:57:1b
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEFcRZRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDEw
MTA1NTkxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmM4ZDZmZjM5MWE2
NjZkYTYzZWY4NWJlYWRhZDBhN2FmMDIxOTliNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALwvo3Lxkmf6SWIEHtI6mTslxycj82yfTut2JIQgZh07ktRA
k6LkGZjRorvk4UnmcVtBNrPD3Nu4uYFxdY9RRbYrAW9Csw6oYS+KNJ61KPYiJIeQ
mW92wYmDrUFnO33QXU4AoHdqHmR/vRRwI3xP/qMRTs5Em+TZX0tc7D0azHFuAw4o
wa7UiMdJUOYj/PZwEWL6ZLWfP7OCx/Kj2M/sbvE0gIq2YtR7SqBtk5vf8QMTLwKu
+/jnoSGNJTaLROePLuPb1PDeKxTF7kqAM7iSjTpHPvW6T3MSxRCRf2t1fD88Eu5o
EaABwUFd4AM9x9a+7BSPZr9uVl9C2E3Dvs8l/oECAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBT8jW/zkaZm2mPvhb6trQp68CGZtDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L19JMXY4NUdtWnRwajc0Vy1yYTBLZXZBaG1iUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGoAGgMDANBgkqhkiG9w0BAQsF
AAOCAQEATfyPHtq9C9c9LU4uu58I2W8+yUuIZ01tPgMFFG2aEWjbPW8/r+XtaL4m
8L+8+YCJDlu+qFUo3nrgAPh0HYc8PllkSMq2+cdRHP5B26OFTsoi79ThbKhCqCR+
2XgxbGW+0lR8fj/OjCWVqWqgBUn2wa3LiJsDxAHYpY767+Tgrp/VS+WYzOQmpb5r
sIAU8wIk5hHsf/kOCmNJPt9JdweTE1NXkqiA8AXP6NacV9/Nkk7e7CZrX9v5dz31
pRRD+b4x6uyBrFn0uynRDj7crvs9Zis0ctJ77YWHUfpmLgC/nBxenf+FAyNa1+ZP
KYphLYJ7bgbBEqTIzyWTCXOfGFpXGw==
-----END CERTIFICATE-----