Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dsdHGIl71IK_ZO0xgM86_WUcPbM.roa
File:                     dsdHGIl71IK_ZO0xgM86_WUcPbM.roa (raw, json)
Hash identifier:          7eDGZzYpJmHzF81SQhHVWZCiy980lH/LN9Ih3uzY4T0=
Subject key identifier:   76:C7:47:18:89:7B:D4:82:BF:64:ED:31:80:CF:3A:FD:65:1C:3D:B3
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184C4547D3A5DC8952E6E1726BEC2E8C78C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dsdHGIl71IK_ZO0xgM86_WUcPbM.roa
Signing time:             Tue 29 Nov 2022 16:59:42 +0000
ROA not before:           Tue 29 Nov 2022 16:59:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211484
IP address blocks:        2a06:a005:2440::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c4:54:7d:3a:5d:c8:95:2e:6e:17:26:be:c2:e8:c7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 29 16:59:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=76c74718897bd482bf64ed3180cf3afd651c3db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:4e:13:1c:3c:67:15:e9:a6:3c:18:75:4f:
                    af:b4:32:1c:5d:39:30:9f:39:f9:27:08:e9:d2:fb:
                    85:85:73:59:9f:05:74:2a:1e:5f:37:37:73:20:88:
                    1b:c9:8e:82:9d:71:0a:6a:ab:f2:94:ae:14:80:a6:
                    2b:a1:f2:08:f1:52:5e:3b:24:0c:83:5f:e8:19:c5:
                    d8:98:69:97:02:a9:dd:2b:cf:c5:98:6d:1f:62:12:
                    97:3b:85:da:e5:13:c6:42:51:60:8a:ab:c1:66:5b:
                    fc:2f:0c:58:9e:5d:a6:4a:d3:6e:65:7d:b9:6e:02:
                    8c:3f:cd:b0:a4:9b:5d:b9:ab:0b:33:1a:ef:53:7f:
                    dc:3f:1a:49:6c:6a:9c:cb:0c:f3:ae:5a:fa:d1:45:
                    58:30:a5:1b:f5:07:35:88:d5:ba:ad:39:70:0b:8d:
                    fb:85:ca:da:a1:92:d0:3d:1e:c0:ab:85:1f:dc:10:
                    fb:63:aa:1f:ac:bc:92:65:c4:bc:ba:cc:9a:c5:11:
                    94:52:75:7c:2b:47:59:0c:a5:18:43:fe:be:f8:23:
                    9c:55:cc:87:56:24:35:be:d1:61:e2:b9:0d:77:0e:
                    b2:12:f6:ac:c6:10:92:d1:43:89:19:1d:93:33:cb:
                    83:ff:ac:f4:18:ac:2d:cc:0a:05:dd:e4:1e:eb:d5:
                    f0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C7:47:18:89:7B:D4:82:BF:64:ED:31:80:CF:3A:FD:65:1C:3D:B3
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dsdHGIl71IK_ZO0xgM86_WUcPbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2440::/44

    Signature Algorithm: sha256WithRSAEncryption
         30:92:b5:8a:47:7b:02:4a:33:06:e6:d5:c4:5b:9c:73:80:ad:
         ce:cf:ab:b6:f5:bb:f8:f6:3e:46:69:67:86:a4:73:42:81:4d:
         57:77:4d:00:f6:4b:a9:5c:79:ac:47:90:f2:08:cc:4f:80:54:
         e4:2f:93:cf:4c:17:e4:a5:80:a8:e2:1b:81:6d:39:85:89:bf:
         e0:36:56:fb:4f:47:58:f9:36:ba:80:04:71:d1:e5:3a:68:76:
         b2:77:97:46:bc:4a:02:85:de:33:53:8c:47:59:a6:ba:5f:38:
         f8:c3:82:31:66:40:5e:aa:a9:9a:e0:56:5c:f7:36:e3:c1:e2:
         49:4a:0d:4d:6b:79:d0:5d:c5:41:99:fb:96:21:cb:b1:48:28:
         25:7e:ca:15:05:33:98:42:55:0a:5b:42:1d:bc:1a:bd:58:da:
         06:1d:8d:fc:68:5e:b2:45:6b:38:9b:88:39:02:5e:af:93:31:
         71:21:c7:1b:bd:67:be:82:d7:05:83:0d:14:58:34:08:38:b3:
         5d:2d:3f:09:cd:b7:78:10:3c:79:ea:e5:bf:65:27:fc:fd:ec:
         76:18:d7:94:ca:f4:65:a8:71:03:86:6d:d7:25:ef:b3:7c:55:
         e0:f5:08:cc:d1:34:ac:d9:4e:08:e4:bc:1b:c2:a5:03:06:c6:
         67:11:48:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----