Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_PfvZ3RKREXkKL6E1Tz7qDqgXco.roa
File:                     _PfvZ3RKREXkKL6E1Tz7qDqgXco.roa (raw, json)
Hash identifier:          A0kVKl8yHczTkWvox3Et5oDWx9De6yM+scPHCwkY30U=
Subject key identifier:   FC:F7:EF:67:74:4A:44:45:E4:28:BE:84:D5:3C:FB:A8:3A:A0:5D:CA
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182C9476E9AD10036EE71BF97C3DD64F4B5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_PfvZ3RKREXkKL6E1Tz7qDqgXco.roa
Signing time:             Tue 23 Aug 2022 05:57:57 +0000
ROA not before:           Tue 23 Aug 2022 05:57:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212888
IP address blocks:        2a06:a005:1::/48 maxlen: 48
                          2a06:a005:1990::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c9:47:6e:9a:d1:00:36:ee:71:bf:97:c3:dd:64:f4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 23 05:57:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fcf7ef67744a4445e428be84d53cfba83aa05dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:fc:61:75:f5:83:b0:e0:6c:c3:87:3f:ae:
                    ff:23:f9:08:1f:de:44:fc:9a:1f:c2:b8:ba:6f:7c:
                    fc:fb:c5:49:09:ee:aa:3f:1e:78:16:24:e6:b3:07:
                    dc:0c:bd:17:80:b6:89:02:0c:f6:b3:58:bf:e7:50:
                    ab:b9:86:11:a0:5a:43:69:0a:5c:69:d3:5c:07:fe:
                    68:95:25:d0:55:52:79:a8:c2:e8:d3:e8:48:e8:e5:
                    cb:2b:25:ba:50:39:39:16:7a:ff:e2:fd:e7:7b:e7:
                    35:6f:76:e2:98:dc:a8:8a:93:9c:be:3a:7c:32:1a:
                    4e:58:10:c8:57:47:2f:40:62:0d:74:b6:d7:af:46:
                    b9:75:f3:66:b1:ca:88:39:ff:d9:83:ab:55:c5:65:
                    ed:8c:72:a2:4f:eb:d0:95:6b:d5:d9:49:c6:fb:84:
                    07:f7:9a:3b:55:cd:7a:bf:cd:95:f9:6f:0a:eb:d4:
                    6d:51:87:17:8a:ed:69:b8:c9:b9:2c:1a:37:67:88:
                    8c:95:87:86:b4:81:83:3c:0c:ca:c3:53:a3:4e:a1:
                    e9:2f:40:52:7f:d3:1e:fb:03:ea:ff:b5:90:02:73:
                    6a:44:64:24:4b:67:41:68:e9:d9:76:52:e5:b1:02:
                    ae:a0:98:15:ce:04:56:cd:24:c6:d3:61:da:0c:c5:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F7:EF:67:74:4A:44:45:E4:28:BE:84:D5:3C:FB:A8:3A:A0:5D:CA
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_PfvZ3RKREXkKL6E1Tz7qDqgXco.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1::/48
                  2a06:a005:1990::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:20:c1:67:a5:b0:d0:3e:bf:44:d3:33:46:1f:a1:7f:85:14:
         b6:cb:b7:2e:45:1b:6c:b5:9e:de:55:c5:68:c6:92:da:81:34:
         cb:f5:fa:ac:f0:7b:f3:53:95:9c:cd:fc:f5:0b:99:13:d5:cc:
         ee:b4:32:dc:a7:e6:70:94:c8:a4:72:62:ca:d4:ae:1d:79:4f:
         57:99:d3:7c:cc:e4:3a:eb:c1:57:ff:90:eb:ee:dc:f2:32:12:
         c9:b6:d6:98:6c:b7:0b:72:d6:2c:46:32:3d:6e:25:5a:ef:52:
         61:e2:5e:83:88:ee:c5:95:7c:d7:84:61:01:69:f9:a6:92:8c:
         37:f1:c6:57:a9:eb:16:1e:78:b7:a9:ea:ae:58:82:62:c0:62:
         84:e0:8e:d1:39:0e:4d:76:8a:3b:e1:30:68:a6:56:e3:e2:bd:
         dd:f4:bd:3b:74:95:4e:58:0a:c8:20:cf:87:7a:af:f7:5d:6a:
         b4:c5:d4:05:da:a6:ec:34:8d:c0:1a:34:31:c9:ab:0f:fa:7d:
         9c:a9:28:2b:72:8c:e5:e6:f1:a3:17:a2:97:c9:81:3b:21:b2:
         b8:b1:be:2c:25:f1:6d:84:b9:ea:3f:ae:d4:b9:94:0e:0f:b5:
         ab:b1:e7:2c:32:6f:22:fd:f5:2d:e9:d6:23:f5:c3:5d:d9:78:
         c6:d3:e6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----