Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/i1WxOaOxeIWOInjuhDTLTKr2zPY.roa
File:                     i1WxOaOxeIWOInjuhDTLTKr2zPY.roa (raw, json)
Hash identifier:          Ow8HGUe1r+OTkTv7QKs4U8yscjcji4+vR8FGvInn5rY=
Subject key identifier:   8B:55:B1:39:A3:B1:78:85:8E:22:78:EE:84:34:CB:4C:AA:F6:CC:F6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182D081FEE51432719CD3792E37B5D933E5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/i1WxOaOxeIWOInjuhDTLTKr2zPY.roa
Signing time:             Wed 24 Aug 2022 15:39:16 +0000
ROA not before:           Wed 24 Aug 2022 15:39:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203199
IP address blocks:        2a06:a005:19d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d0:81:fe:e5:14:32:71:9c:d3:79:2e:37:b5:d9:33:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 24 15:39:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8b55b139a3b178858e2278ee8434cb4caaf6ccf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:86:1f:20:1c:69:21:62:ed:06:0a:8c:d9:
                    67:b5:08:22:5e:e9:84:cf:6f:31:7c:79:f0:17:d8:
                    b6:b9:64:64:41:b1:29:b5:1f:a9:8a:f2:df:ba:55:
                    4e:ee:d1:8f:58:e2:09:49:2f:ed:24:fa:ff:b2:15:
                    d9:bd:be:46:f2:31:ba:92:80:40:38:39:e0:51:3e:
                    65:a0:28:00:4a:ed:b4:15:9f:e0:e5:4a:99:e6:cd:
                    e2:5e:df:e4:9b:db:47:d3:92:7e:43:ab:50:c5:20:
                    1e:38:38:c0:b1:a1:9d:f0:55:ea:b4:ec:f9:68:38:
                    62:77:f1:c7:16:02:1f:ca:b6:36:65:31:0c:59:7c:
                    bb:da:f5:f4:e5:96:31:2b:f8:e5:c0:f6:22:01:1b:
                    ef:d1:22:34:93:a5:75:1a:32:ec:a1:0d:56:73:66:
                    e9:d2:9f:14:47:99:25:bf:43:fc:14:83:2b:b3:b6:
                    9a:74:e7:45:56:81:15:fc:91:1c:f6:87:dd:9a:28:
                    75:32:0a:44:0a:48:b6:90:dd:0d:dc:88:55:05:c8:
                    85:f7:f5:ee:fc:87:2d:67:4c:4c:ea:5b:d7:cc:d2:
                    2c:c1:ef:54:7e:18:40:65:f5:87:32:5f:ce:79:d1:
                    5b:b7:65:d4:d9:bd:7f:8f:df:1d:c4:c7:fd:3e:b5:
                    17:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:55:B1:39:A3:B1:78:85:8E:22:78:EE:84:34:CB:4C:AA:F6:CC:F6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/i1WxOaOxeIWOInjuhDTLTKr2zPY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:19d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         79:0c:cb:d1:92:e3:fd:df:bd:69:2f:4b:14:da:29:0c:f7:10:
         e6:59:ce:6c:15:63:ba:cc:27:e1:3c:35:ea:69:c6:a6:18:ce:
         c5:1e:f2:0b:4d:6b:a2:44:33:85:24:6b:be:56:6b:b1:0f:6d:
         5c:6e:34:38:6c:96:8a:29:24:a5:9f:e9:dc:08:f4:68:74:12:
         6e:9b:57:4d:a1:5e:02:c4:b3:2a:bb:cb:52:26:35:88:82:83:
         74:b4:ea:7b:7c:dc:3e:8e:96:24:70:55:63:04:71:55:f3:35:
         cf:2e:27:36:96:d5:b7:23:47:a3:b7:3e:f4:b1:94:e2:2d:af:
         dd:e6:76:e2:61:c6:23:6b:7d:2f:68:89:cd:ea:a8:f6:2f:d2:
         5e:34:10:96:a6:6b:2e:64:65:10:7e:de:a2:c3:af:a0:34:0d:
         a4:cd:e7:b9:f8:41:38:68:ae:98:2c:dd:30:88:46:93:15:fa:
         d9:ce:27:b1:91:33:ab:fd:25:ba:84:6b:72:92:a4:33:05:0b:
         72:f1:17:cb:20:41:84:26:d7:8d:f7:a2:67:c3:a9:ba:09:45:
         94:53:6a:9c:ac:eb:77:7b:1d:27:d8:85:4a:83:64:db:b3:4c:
         c4:b2:56:fa:45:85:34:8a:62:f2:cb:51:aa:7b:6e:40:ec:57:
         48:92:a0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----