Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bq96r8gAxe1QJIxSm8KZ2NOSZvI.roa
File:                     bq96r8gAxe1QJIxSm8KZ2NOSZvI.roa (raw, json)
Hash identifier:          7+ddiT+G4Jjw2kFXbU7qjFGvuaOhQ7iM9eXpJaUVp2E=
Subject key identifier:   6E:AF:7A:AF:C8:00:C5:ED:50:24:8C:52:9B:C2:99:D8:D3:92:66:F2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018259257779612D436478C1F0445AA8E93F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bq96r8gAxe1QJIxSm8KZ2NOSZvI.roa
Signing time:             Mon 01 Aug 2022 11:23:23 +0000
ROA not before:           Mon 01 Aug 2022 11:23:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204841
IP address blocks:        2a06:a005:434::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:59:25:77:79:61:2d:43:64:78:c1:f0:44:5a:a8:e9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  1 11:23:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6eaf7aafc800c5ed50248c529bc299d8d39266f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:1a:c5:00:84:ed:c4:84:e9:f7:7e:19:7f:
                    91:04:11:31:3a:99:d4:7e:c0:32:4b:56:da:75:bf:
                    dc:b0:bb:0c:ce:4d:40:ac:8f:7b:84:07:24:f8:dc:
                    a2:3b:e9:03:ab:09:6a:06:60:45:7f:a8:5a:84:f8:
                    76:58:33:1b:bd:76:0e:88:52:63:47:51:de:3f:ff:
                    20:12:6f:5e:d0:53:82:b1:8d:f3:b6:fe:7a:1c:33:
                    fd:6f:8c:2a:7f:38:cc:2d:0c:a9:bb:c5:c7:e7:60:
                    30:39:be:f3:1f:47:e5:0d:0c:6f:60:6e:b0:67:45:
                    96:70:6f:2b:df:4c:84:90:37:a0:cc:44:4c:de:4f:
                    e4:86:23:34:9a:fc:27:c3:a9:10:d5:04:de:7a:fd:
                    15:67:5c:68:5f:02:ef:9b:1c:76:3c:a5:c9:5a:54:
                    a1:8e:54:16:29:fa:95:9f:f1:8a:c1:1b:e4:e6:af:
                    a0:1f:19:9c:15:17:2f:c8:57:1f:32:0b:a4:61:2d:
                    b1:68:d8:c7:0d:ea:ab:18:be:87:2b:87:88:b2:79:
                    b8:bf:3b:cc:59:06:1c:98:1f:7c:0b:97:53:69:c8:
                    c7:8c:e4:f5:66:cd:e7:ee:96:9a:57:69:b1:16:a8:
                    69:ac:dd:fc:3b:b9:64:ab:51:06:cf:8b:d8:93:81:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AF:7A:AF:C8:00:C5:ED:50:24:8C:52:9B:C2:99:D8:D3:92:66:F2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/bq96r8gAxe1QJIxSm8KZ2NOSZvI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:434::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:af:3b:c3:6d:43:a0:0e:a1:f8:94:6f:b3:92:f6:b8:8f:ca:
         be:c8:eb:e1:3a:d3:c5:ee:9a:ba:ec:4a:10:a3:d7:8c:28:24:
         bf:fc:26:d2:3e:2d:3a:10:cb:b3:0d:03:01:86:d6:a1:b6:73:
         1b:cf:91:3b:df:13:67:ef:a5:04:59:19:15:3b:86:1e:8a:a9:
         38:e5:53:c7:a6:a2:01:b8:d4:da:09:84:c7:f2:bf:be:da:a1:
         68:3f:63:7f:e1:c4:2c:d7:ec:67:82:61:5c:ff:f1:fb:75:b6:
         32:96:a7:4b:c4:bd:a1:b2:8c:2f:d0:ce:0d:36:9d:71:7e:ef:
         29:1a:5a:e4:20:a5:5d:4d:7f:08:e4:8e:ea:b8:19:4d:b2:d4:
         cd:d4:cb:24:9f:d5:d1:b8:cb:72:12:62:34:c5:09:56:48:16:
         84:af:a7:52:d8:37:38:c8:60:fd:ea:e2:d9:5f:33:9d:ff:34:
         38:0b:08:7e:cf:27:d4:c7:eb:c5:ee:2a:56:cc:16:c8:f3:8e:
         08:d6:f7:09:f7:8c:cc:2b:6a:fd:bf:91:51:77:23:64:38:ee:
         33:71:9c:a4:30:fb:8c:52:17:5d:13:1b:a8:28:91:b8:1d:35:
         5b:3f:5a:54:ee:94:ad:6c:ed:ae:21:1f:5a:61:5f:38:ee:2a:
         56:dd:68:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----