Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bhp3CXgkDkY1zJmfXQ0naWkJQzQ.roa
File:                     bhp3CXgkDkY1zJmfXQ0naWkJQzQ.roa (raw, json)
Hash identifier:          XZ44Oy/GC9u4aK0sPF3E+L4MQ+sPTOy78LXTrjiPfZk=
Subject key identifier:   6E:1A:77:09:78:24:0E:46:35:CC:99:9F:5D:0D:27:69:69:09:43:34
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018226377112EB174E36ED04B914F0BA3C70
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bhp3CXgkDkY1zJmfXQ0naWkJQzQ.roa
Signing time:             Fri 22 Jul 2022 14:02:23 +0000
ROA not before:           Fri 22 Jul 2022 14:02:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206271
IP address blocks:        2a06:a005:437::/48 maxlen: 48
                          2a06:a005:a15::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:26:37:71:12:eb:17:4e:36:ed:04:b9:14:f0:ba:3c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 22 14:02:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6e1a770978240e4635cc999f5d0d276969094334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:f3:27:ae:f7:92:c3:16:55:d4:38:44:aa:
                    e9:32:91:33:d4:cc:6c:1e:9a:44:07:f6:7d:68:1e:
                    b6:ca:0f:66:88:0a:38:35:6f:4b:7b:be:9c:25:5b:
                    ee:cb:5e:3b:d4:39:6d:b0:44:22:2f:c2:ef:ea:54:
                    a1:aa:e3:c7:2c:9b:54:89:f9:66:2c:ab:76:38:69:
                    78:a9:c6:24:b6:f9:9f:36:e0:96:cd:01:79:57:7c:
                    25:34:1b:c3:d2:ec:24:86:e9:e4:2d:c2:30:b7:e2:
                    44:c6:1e:9b:63:ca:27:72:86:de:c1:b1:50:28:5c:
                    76:94:04:07:9b:96:e5:76:d9:6e:bb:d3:f4:b6:a6:
                    8f:dc:85:39:76:1e:d8:1b:ff:45:7f:29:05:94:e5:
                    6f:52:49:fe:55:f5:ab:f8:0b:ae:c2:d1:1c:98:1f:
                    04:ac:5b:d7:d2:75:7d:7a:b5:25:f7:22:22:95:09:
                    e0:1f:42:1b:ab:02:fe:1a:c6:5d:57:cf:c8:b6:7b:
                    46:b1:33:ee:54:37:bc:d5:bf:14:37:bc:0f:a7:33:
                    02:ad:18:df:14:d0:dd:25:28:76:1e:bb:16:fd:08:
                    48:46:6d:a3:ac:30:f2:04:56:2b:2f:d7:0c:1a:79:
                    96:05:34:b4:71:7e:27:3f:a4:26:8a:c9:5d:6d:f1:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1A:77:09:78:24:0E:46:35:CC:99:9F:5D:0D:27:69:69:09:43:34
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bhp3CXgkDkY1zJmfXQ0naWkJQzQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:437::/48
                  2a06:a005:a15::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:87:12:68:ff:9c:81:5f:de:6f:bd:88:bd:f3:82:19:30:a9:
         94:29:b8:7a:5f:b0:ab:46:44:06:1c:df:0e:25:fd:87:78:00:
         d0:07:e1:09:74:17:fd:52:5e:7c:09:1b:b6:2e:b2:f5:15:a4:
         47:a6:92:7e:eb:98:eb:30:60:01:63:6b:7a:18:bb:56:b4:f6:
         34:a8:b0:87:c4:5c:b8:75:10:db:16:88:db:f3:83:0f:6a:a1:
         41:d5:ec:48:36:6e:92:7e:05:9f:f7:84:c5:35:8f:d4:e4:1d:
         e5:ec:c1:00:f7:ff:45:6e:38:a9:44:cf:52:ad:ec:cc:9b:50:
         fd:78:66:83:11:ef:03:55:76:30:f8:8f:a0:26:fc:a8:54:42:
         8a:a4:83:02:a9:32:a9:79:89:cf:cb:6e:ff:a4:72:99:60:6e:
         96:c2:30:6f:f8:26:3e:43:b8:82:2f:49:ae:a7:f6:2e:0c:80:
         47:6c:8d:0a:2d:2c:86:26:9d:26:b2:6f:17:8f:f4:93:09:d6:
         5d:37:49:e6:79:fb:28:55:fe:42:87:2a:a0:0f:2b:53:27:3a:
         c6:fa:a4:7d:e2:af:af:7a:0c:96:e0:92:ab:a5:5e:fe:ed:4e:
         f4:01:57:a8:fa:8b:df:27:6a:05:1e:0c:c1:76:b9:d9:c7:0d:
         02:f7:52:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----