Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f2ALjiRvyLL6VDQQkJkOrWW2vIE.roa
File:                     f2ALjiRvyLL6VDQQkJkOrWW2vIE.roa (raw, json)
Hash identifier:          DfexqvbSx9KL9mRUCZvwiVofcHDYt1zJnHeMhkMnNVI=
Subject key identifier:   7F:60:0B:8E:24:6F:C8:B2:FA:54:34:10:90:99:0E:AD:65:B6:BC:81
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       17E14C25
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f2ALjiRvyLL6VDQQkJkOrWW2vIE.roa
Signing time:             Mon 11 Apr 2022 08:16:27 +0000
ROA not before:           Mon 11 Apr 2022 08:16:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60438
IP address blocks:        2a06:a005:1::/48 maxlen: 48
                          2a06:a005:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400641061 (0x17e14c25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 11 08:16:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7f600b8e246fc8b2fa54341090990ead65b6bc81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:a1:70:5e:c9:eb:d5:a8:a3:9f:e0:bd:f3:
                    8b:2e:4b:7c:57:10:c1:42:a5:42:c8:5d:5d:97:c3:
                    1f:66:48:9d:c8:e1:62:2f:40:c5:99:59:83:79:5a:
                    15:53:2a:6c:5e:ac:f0:57:c8:36:f5:b0:5d:92:71:
                    31:70:8a:93:fe:d3:f9:95:2a:2a:4c:63:3f:39:76:
                    30:81:10:b7:02:40:e6:d8:04:9b:fc:69:81:e8:88:
                    2e:7f:43:b3:e2:2b:85:03:c4:60:39:8d:2d:ba:ce:
                    a9:a6:fa:cb:90:ec:a0:af:53:34:96:5f:94:20:91:
                    37:56:24:a9:f9:fd:c5:3e:4d:05:eb:7c:78:72:ea:
                    47:17:33:68:43:75:82:3b:44:45:87:11:86:95:ab:
                    41:09:5e:58:47:b1:2c:54:b3:c9:14:b8:48:8b:59:
                    bf:04:b0:13:08:71:80:fe:85:8d:d0:12:89:f6:c6:
                    75:68:52:e6:a6:26:95:ee:1a:7d:0e:c9:b8:a1:bd:
                    01:1d:4f:36:32:01:b5:88:04:9f:04:49:78:45:d0:
                    2a:c1:64:1d:2a:60:9d:ca:c3:e8:28:74:9b:44:0a:
                    84:c8:29:76:1a:89:54:bc:47:f8:fe:c6:65:79:2e:
                    8f:fa:76:2a:64:6b:e1:12:e4:ac:6c:09:be:4e:60:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:60:0B:8E:24:6F:C8:B2:FA:54:34:10:90:99:0E:AD:65:B6:BC:81
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f2ALjiRvyLL6VDQQkJkOrWW2vIE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1::-2a06:a005:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         18:cc:49:a5:eb:41:c3:60:4f:30:86:54:3b:62:28:0c:d2:a6:
         4b:54:b4:c2:82:94:c4:3c:67:a5:dd:3b:7b:da:88:23:51:39:
         f6:f8:4d:0e:2a:5e:41:6e:4f:91:24:bb:fd:e9:f4:37:49:c0:
         70:51:f2:d5:a3:cd:27:17:04:c1:30:86:08:93:74:21:ff:21:
         c2:5d:07:86:f4:37:08:21:a6:e4:c3:6d:e8:04:34:ce:59:b8:
         ae:6b:9b:8b:a4:43:4c:aa:e7:6a:b7:7d:be:4f:9a:63:b3:fb:
         6d:72:13:d8:3b:51:8b:61:2f:ad:c2:b7:f0:16:4a:a0:91:f5:
         c5:da:19:73:11:6a:ca:79:44:d8:42:20:9e:7c:4b:5e:b6:4b:
         33:b8:98:7a:eb:f0:5f:63:a6:17:67:5b:1c:19:97:dd:9e:69:
         b5:13:f6:f5:7d:42:c3:aa:70:0d:2b:25:29:3c:a2:80:68:cd:
         e6:0d:5b:d6:9e:fb:b4:d4:fd:44:8e:5e:47:b5:ad:cb:2f:62:
         fb:58:a9:32:c5:80:91:3e:32:6c:71:87:d5:d7:cf:32:ec:f2:
         d3:b0:48:a0:27:97:b1:23:54:25:99:1b:f0:63:42:a1:e6:09:
         ad:9f:38:79:7e:e4:9e:72:21:ea:da:1a:2e:a7:46:1a:32:43:
         b4:e8:4b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----