Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_tGM3SqwsGqopUWUhgVIRgnjp-8.roa
File:                     _tGM3SqwsGqopUWUhgVIRgnjp-8.roa (raw, json)
Hash identifier:          CpTJwBQZAduOEzfXboP4pE308LnCdQWgc+ezbKCBu1A=
Subject key identifier:   FE:D1:8C:DD:2A:B0:B0:6A:A8:A5:45:94:86:05:48:46:09:E3:A7:EF
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183BEFC34198D0436BE7468209AF170F965
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_tGM3SqwsGqopUWUhgVIRgnjp-8.roa
Signing time:             Sun 09 Oct 2022 23:02:22 +0000
ROA not before:           Sun 09 Oct 2022 23:02:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47924
IP address blocks:        2a06:a005:18e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:be:fc:34:19:8d:04:36:be:74:68:20:9a:f1:70:f9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct  9 23:02:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fed18cdd2ab0b06aa8a545948605484609e3a7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:ca:ce:35:ba:bb:5b:55:48:08:ec:97:72:
                    fd:37:5e:28:b4:a6:2e:f6:a1:31:b5:68:a3:16:0f:
                    64:bf:98:8a:1a:76:11:0f:7a:61:b4:eb:3e:a7:9a:
                    5e:b7:f1:27:cb:2f:cb:7a:bd:05:84:b7:7e:21:66:
                    b1:e1:d2:03:bf:61:b1:b4:65:1b:08:21:eb:6c:92:
                    9e:82:e3:b5:8b:e1:c8:9d:7a:b8:0a:e4:46:00:02:
                    e8:27:21:19:96:4d:b2:ac:d3:55:af:40:e2:e3:c5:
                    b8:f2:3e:27:8f:a1:8e:e9:dc:57:1b:79:d5:ff:88:
                    0d:a3:5a:c2:4d:f2:6d:81:55:3e:9e:53:f8:d8:7f:
                    2e:d9:d7:1a:d4:7a:db:42:16:d0:c3:18:47:dd:56:
                    2d:ec:77:cf:bf:b1:a8:32:57:a6:51:f5:89:8e:8d:
                    f7:b4:6d:25:8e:b2:93:83:ca:8b:8d:71:69:5c:67:
                    66:c9:ca:8a:62:1b:ff:bc:31:d2:84:4b:e2:7e:0c:
                    29:9e:d2:5c:ab:9d:5f:be:7a:aa:66:36:51:ae:e3:
                    5d:09:79:b4:f9:62:2e:8a:ef:1b:67:b8:e1:0a:89:
                    f6:48:d8:86:6c:c1:0a:96:1e:94:7d:25:69:91:49:
                    29:44:ce:14:50:de:1c:af:84:f0:f3:45:98:ed:eb:
                    66:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D1:8C:DD:2A:B0:B0:6A:A8:A5:45:94:86:05:48:46:09:E3:A7:EF
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_tGM3SqwsGqopUWUhgVIRgnjp-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:1a:c5:f9:60:5b:f0:62:cd:72:9d:e6:6b:1d:b8:ff:b4:1d:
         f8:21:af:71:58:40:c8:94:b9:ae:15:59:e0:d0:ad:5b:ed:72:
         45:bf:7b:84:50:c3:85:2b:45:34:f2:65:b3:7c:f4:ad:66:66:
         a9:5a:a7:47:8d:f4:af:d3:c6:e5:41:f6:74:bd:14:ae:70:66:
         ff:b2:bb:7f:c2:58:05:58:ff:69:09:6c:6f:31:50:b6:12:ae:
         61:60:79:72:8a:75:72:76:07:ba:bb:65:c6:d3:c2:53:63:6a:
         5f:b4:6a:91:ae:df:c3:e1:6b:a5:da:87:99:da:ee:fe:a3:97:
         50:53:8c:ed:21:31:6d:99:23:e5:7f:32:a8:8e:bb:c3:34:10:
         ad:4a:59:81:38:cd:73:c4:3a:b0:bd:c4:01:99:32:bc:ef:ce:
         20:97:ab:e3:84:67:97:68:bc:f6:60:74:9b:0c:ea:ba:b3:f0:
         cc:94:17:a0:c0:0c:38:ec:d1:23:76:17:e3:28:d4:4f:4f:59:
         85:bd:42:1a:a2:22:2e:d5:45:89:a5:51:04:97:e5:2e:4b:15:
         9b:63:6a:e1:33:25:b6:00:bc:13:ef:34:fd:6c:b9:40:d6:28:
         19:e0:85:29:ef:33:17:7a:8b:77:8e:74:48:e8:2a:87:68:8c:
         7c:f0:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----