Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hofEJs9qU99fE1FjGdsFo62fTZw.roa
File:                     hofEJs9qU99fE1FjGdsFo62fTZw.roa (raw, json)
Hash identifier:          io0uHHnjvO9dPf1L15+8BFOcUK+tb6KIVWf1xijOuD4=
Subject key identifier:   86:87:C4:26:CF:6A:53:DF:5F:13:51:63:19:DB:05:A3:AD:9F:4D:9C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B0C29AA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hofEJs9qU99fE1FjGdsFo62fTZw.roa
Signing time:             Mon 20 Jun 2022 14:25:45 +0000
ROA not before:           Mon 20 Jun 2022 14:25:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204518
IP address blocks:        2a06:a005:d90::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453781930 (0x1b0c29aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 20 14:25:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8687c426cf6a53df5f13516319db05a3ad9f4d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:97:c5:fc:43:f9:72:70:d4:ab:ad:27:b1:
                    2c:77:03:f2:8b:36:45:30:86:09:a8:a6:65:5c:40:
                    ce:cd:09:22:f6:b6:c9:bb:93:2e:be:f7:b9:44:cc:
                    59:00:b2:cf:99:f3:dd:a6:b2:e3:76:7a:9a:c9:36:
                    b3:1a:74:64:bb:bb:b5:c7:04:39:5e:7c:aa:aa:1e:
                    cb:f9:64:30:8c:31:6c:d9:f2:6e:07:37:4a:72:bc:
                    8b:35:e2:d8:3e:b4:54:95:89:5e:41:78:f8:dd:5e:
                    b5:c6:50:c5:fa:6d:b4:a3:de:97:1b:55:8c:45:9e:
                    e2:7b:15:8f:09:ba:15:85:78:46:e0:e8:49:e8:92:
                    25:e8:3a:3d:28:4a:15:9c:c8:7a:3f:d8:de:36:8a:
                    c7:c7:39:8c:bf:29:4c:5e:55:c0:96:d3:66:5a:d1:
                    d2:3b:b2:f2:5c:08:74:79:a2:d8:3d:6d:a0:11:ab:
                    37:01:5f:28:3d:b5:66:e0:cb:b0:94:e7:67:a2:3d:
                    7d:42:94:cb:93:fb:d2:6a:75:8e:28:58:9e:d9:47:
                    c9:78:0c:30:1b:b9:62:1c:a6:a4:34:db:9e:95:35:
                    3d:57:5a:e9:2e:65:3b:aa:5a:ca:17:c8:85:b2:df:
                    6d:27:79:e6:72:13:dd:82:5f:48:7a:e8:3b:cc:aa:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:87:C4:26:CF:6A:53:DF:5F:13:51:63:19:DB:05:A3:AD:9F:4D:9C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hofEJs9qU99fE1FjGdsFo62fTZw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d90::/44

    Signature Algorithm: sha256WithRSAEncryption
         3b:c9:12:9c:4e:38:1e:34:8e:cc:6c:6a:ad:3a:4f:5d:c7:14:
         86:a2:82:15:37:16:56:e5:a8:a9:c8:e3:08:2d:0b:a7:58:99:
         f9:6d:ab:72:e5:3d:db:65:d0:af:40:b2:ce:13:1f:62:ea:0b:
         ba:16:c5:3a:9e:ff:49:43:65:12:00:a4:38:18:96:1c:a7:f9:
         8a:99:26:3f:a7:9d:eb:3d:32:0a:f6:1d:6e:f4:b3:1e:f3:eb:
         ad:dd:bb:43:3e:56:96:c4:fc:67:03:b7:a6:5c:5d:09:8f:2e:
         d0:a4:f1:38:66:7c:d7:cc:5d:c6:54:90:e0:2d:c8:4f:69:65:
         ae:39:08:b4:26:c3:87:f4:76:a6:9f:bb:33:dd:35:cd:ab:08:
         ed:7e:8f:9b:33:6d:1f:c8:92:6e:47:5c:79:1e:03:09:8f:66:
         cc:d2:f7:64:b4:b8:44:d2:41:73:19:d0:72:57:42:b7:cc:db:
         b9:55:db:a6:90:b1:e9:d4:2c:00:d2:5c:0f:81:e3:a4:12:8e:
         ed:9b:0a:35:cb:fb:8f:a1:16:12:47:5b:79:68:7c:c5:d2:04:
         02:cd:f1:df:33:52:15:8f:38:b8:da:2f:ee:c0:d6:af:3d:05:
         6e:53:f0:64:cb:f3:db:41:23:14:9d:7d:e8:e4:55:f1:60:45:
         bc:0d:27:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----