Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gDJYDx_FG7TD499UJG-wscvfK7g.roa
File:                     gDJYDx_FG7TD499UJG-wscvfK7g.roa (raw, json)
Hash identifier:          ixuvCSnkag7m8AzNApxTOsSr8g/qWoy8M66gF8ZZgns=
Subject key identifier:   80:32:58:0F:1F:C5:1B:B4:C3:E3:DF:54:24:6F:B0:B1:CB:DF:2B:B8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01849ACFC037C815A47370E2C8B866FFBA79
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gDJYDx_FG7TD499UJG-wscvfK7g.roa
Signing time:             Mon 21 Nov 2022 15:30:17 +0000
ROA not before:           Mon 21 Nov 2022 15:30:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201242
IP address blocks:        2a06:a005:855::/48 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:9a:cf:c0:37:c8:15:a4:73:70:e2:c8:b8:66:ff:ba:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 21 15:30:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8032580f1fc51bb4c3e3df54246fb0b1cbdf2bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:18:8e:77:67:c9:a6:ab:38:cb:01:6f:5b:49:
                    f4:18:b6:2b:4b:ce:50:9d:df:fa:b1:f3:0c:76:f4:
                    a0:99:a9:f1:05:7c:0e:9b:6f:a6:e8:6a:a5:84:f2:
                    d4:25:02:4a:6c:0e:45:45:5f:f7:5a:2a:71:a8:10:
                    4f:09:05:90:48:a2:e1:88:dc:94:0a:e3:3b:eb:6f:
                    e1:bf:ad:ea:8a:3f:0d:a0:ba:16:7e:13:5e:97:e9:
                    28:28:44:d5:d3:03:d4:8e:f5:ce:e1:6a:ea:bd:e8:
                    4c:21:fe:72:2f:d0:eb:03:38:6e:5b:4d:c7:8c:be:
                    76:2b:c5:84:02:36:aa:dc:05:9a:e7:50:af:79:0b:
                    25:79:5e:53:42:a6:73:7f:57:c5:75:7d:99:23:35:
                    b9:de:ed:11:6a:4e:3f:c1:07:fe:62:a3:30:ed:56:
                    78:f6:b1:83:4c:4d:e5:8a:77:d7:c6:12:0c:81:75:
                    72:38:46:33:94:30:40:53:1e:7b:0e:6b:2a:09:d9:
                    ee:a8:38:45:05:0f:a3:ab:f5:95:e3:95:26:ee:d2:
                    a1:64:07:f1:4e:a0:f5:83:3d:88:76:e8:9c:51:09:
                    10:99:bd:27:e5:ba:28:8b:ff:9d:a7:39:0f:90:3b:
                    20:89:2b:e1:c8:96:60:46:62:fa:cc:ae:e3:b0:49:
                    a4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:32:58:0F:1F:C5:1B:B4:C3:E3:DF:54:24:6F:B0:B1:CB:DF:2B:B8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gDJYDx_FG7TD499UJG-wscvfK7g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:855::/48
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:2b:29:83:a5:a7:8f:d9:50:98:36:d4:9c:5c:12:2f:e8:06:
         79:9c:13:69:14:f6:b6:9d:d3:33:8c:82:1b:32:62:57:6d:fb:
         21:c0:26:be:9e:15:4c:a9:0c:9f:fb:72:01:64:83:42:3d:8b:
         7e:03:c6:ff:93:b5:57:94:be:c2:41:15:fc:ed:38:05:30:cb:
         af:30:a8:bf:6b:95:1c:88:d6:81:cd:de:ca:ce:fa:98:92:2d:
         ad:39:e7:00:60:33:69:aa:a2:65:79:c6:6c:36:44:3a:fe:ef:
         df:b6:68:a4:84:af:ef:35:f6:73:8b:47:00:f9:0e:83:65:01:
         64:90:ea:f6:93:9b:46:7f:34:b6:26:36:3b:c1:aa:53:3d:97:
         3d:9b:37:d7:a5:f8:05:2e:d7:85:7b:0c:c2:f1:32:bf:00:84:
         64:e8:a3:dd:5b:fe:4a:8b:4f:c2:dd:c5:0c:99:b4:bc:c1:f1:
         27:d0:13:bf:f3:1c:b8:3a:1b:29:68:9d:76:91:fe:8e:59:b6:
         28:0c:5b:a2:2b:16:5d:d3:8a:a6:bc:40:8a:00:9d:c7:b8:5a:
         d5:e3:d4:dc:66:ae:e8:fe:91:0d:c2:06:9a:58:7f:e5:ed:6e:
         c7:1c:4f:21:14:ff:e6:79:5a:1d:f3:3d:3d:88:e8:2f:90:95:
         34:a0:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----