Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gxgRGKZVpnNBC9SO93fLM4gTYCI.roa
File:                     gxgRGKZVpnNBC9SO93fLM4gTYCI.roa (raw, json)
Hash identifier:          y3KM2oSPgqrP1q1njkVpjuedht3AvoeP//Ob5Qgsmjk=
Subject key identifier:   83:18:11:18:A6:55:A6:73:41:0B:D4:8E:F7:77:CB:33:88:13:60:22
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1AABD754
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gxgRGKZVpnNBC9SO93fLM4gTYCI.roa
Signing time:             Wed 08 Jun 2022 07:08:03 +0000
ROA not before:           Wed 08 Jun 2022 07:08:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212983
IP address blocks:        2a06:a005:2d9::/48 maxlen: 48
                          2a06:a005:43e::/48 maxlen: 48
                          2a06:a005:13::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447469396 (0x1aabd754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun  8 07:08:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=83181118a655a673410bd48ef777cb3388136022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a3:65:f7:27:eb:46:92:4e:d9:bf:fb:32:50:
                    ce:42:0c:66:32:83:27:c6:e5:2f:d6:24:3f:57:9b:
                    7a:e4:15:e1:e1:ee:ea:78:1d:dd:87:d7:59:7b:fa:
                    14:60:d8:50:f5:4b:14:6e:cf:62:d3:d7:45:5f:b0:
                    63:8d:47:a5:75:c7:fd:42:b6:0f:7a:59:6b:5f:63:
                    7a:fd:91:42:8f:44:46:64:c6:83:f9:d6:b8:e2:81:
                    1b:73:29:24:2c:a4:a4:3b:1b:06:d5:60:8a:e7:8c:
                    be:1c:bb:25:11:11:44:1b:99:f4:2a:84:7c:cb:25:
                    a3:39:2a:f0:4e:4e:b7:73:ac:9e:3a:56:9a:f8:25:
                    ff:eb:aa:a4:3b:23:5c:54:a3:a1:e1:05:bd:20:6e:
                    7f:9d:f6:33:74:83:14:ff:b3:86:02:aa:56:3c:5f:
                    1d:ee:02:c1:a8:28:ca:03:ff:1e:0f:d3:b3:c5:a7:
                    f8:53:60:ac:76:8e:9a:6b:b5:ac:28:31:ff:95:f7:
                    49:2d:19:ab:59:d6:d3:f3:3e:eb:82:ef:88:37:7f:
                    4c:82:4d:2d:1c:24:b0:a1:d3:5d:54:c0:b1:d7:39:
                    13:4c:ed:f5:e9:ce:0e:8d:ec:45:6f:65:05:7c:cd:
                    90:b3:d0:ef:3f:a9:72:cd:07:66:b6:35:a0:e5:5d:
                    93:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:18:11:18:A6:55:A6:73:41:0B:D4:8E:F7:77:CB:33:88:13:60:22
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gxgRGKZVpnNBC9SO93fLM4gTYCI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:13::/48
                  2a06:a005:2d9::/48
                  2a06:a005:43e::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:bc:93:d3:d8:c8:72:ec:4e:69:b1:63:f5:0d:15:9a:a8:53:
         5a:2d:ab:59:a0:43:dd:57:f4:4d:3e:b7:cd:05:bf:c8:fb:d6:
         15:c1:f1:e1:f8:a2:68:7a:15:26:45:3e:7a:98:54:1a:8b:93:
         f3:c4:87:d9:c6:ed:bb:bd:f5:09:df:97:f8:36:fb:25:ca:33:
         31:96:4e:31:ce:4d:3f:08:85:c2:b3:f4:66:93:f8:17:a6:06:
         9c:c0:3f:b1:7a:d3:b5:47:9d:5b:52:11:49:11:43:ea:0e:6e:
         3c:38:2b:28:b9:ae:e4:b2:03:47:d6:89:22:8b:2d:b5:77:19:
         cd:00:37:3c:e9:80:93:71:ed:3c:bd:ec:42:4c:5b:a8:cb:cc:
         04:19:0c:b2:07:89:3a:8f:ba:f7:ec:55:1a:30:27:3c:12:ba:
         ae:21:eb:f8:ab:86:4f:0a:fc:51:ef:bd:e2:04:48:a9:f5:2a:
         0a:d2:c0:ac:4b:bb:b8:69:64:64:6b:c8:9f:65:60:f5:ef:d0:
         8e:dd:77:2e:73:7e:f8:ab:10:70:f1:21:49:3a:c7:28:96:bd:
         f3:fa:2b:c3:c2:6a:33:75:02:51:cf:e1:42:61:d4:53:8e:2a:
         4b:7c:cd:33:9d:a6:9b:93:40:cb:fa:9e:a7:52:ea:65:fd:37:
         eb:0c:30:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----