Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iWEJKNhBQusS7GQMYKA3q9fYKJA.roa
File:                     iWEJKNhBQusS7GQMYKA3q9fYKJA.roa (raw, json)
Hash identifier:          060cxEVpu4e1r6NCLzIbu3V8Z07F/DAZxo1KHZKlT2s=
Subject key identifier:   89:61:09:28:D8:41:42:EB:12:EC:64:0C:60:A0:37:AB:D7:D8:28:90
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B995EF8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iWEJKNhBQusS7GQMYKA3q9fYKJA.roa
Signing time:             Wed 29 Jun 2022 17:39:02 +0000
ROA not before:           Wed 29 Jun 2022 17:39:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1012
IP address blocks:        2a06:a005:1010::/44 maxlen: 48
                          2a06:a005:1030::/44 maxlen: 48
                          2a06:a005:1050::/44 maxlen: 48
                          2a06:a005:1040::/44 maxlen: 48
                          2a06:a005:1020::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463036152 (0x1b995ef8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 29 17:39:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=89610928d84142eb12ec640c60a037abd7d82890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:09:45:b2:de:13:fa:d2:62:5d:2d:5b:33:
                    48:95:a2:e8:7c:1f:d8:d6:92:a0:6b:e3:d8:e6:40:
                    74:db:5f:45:b1:43:0d:aa:da:46:ca:33:dd:c7:1d:
                    c3:41:3a:28:fd:56:ee:01:eb:07:95:cc:cf:c2:55:
                    b2:ec:7e:92:5a:ee:e6:cf:b4:d3:b7:fb:4a:23:fa:
                    06:50:91:94:68:e2:58:cd:07:b8:8c:76:90:60:de:
                    48:6c:26:2a:fd:a9:25:8d:ea:e5:35:52:41:19:5c:
                    af:37:39:6f:92:62:8f:bc:9f:c7:0d:bf:aa:fe:9d:
                    ad:6c:56:72:6d:b2:8e:14:b2:9f:f3:06:72:42:e2:
                    67:72:2d:34:25:f3:f5:e7:88:3a:9c:7e:f3:32:18:
                    64:7c:df:08:48:46:21:7c:04:11:56:68:d7:3c:2a:
                    79:45:f0:91:e8:c6:10:73:b0:6e:ad:9a:16:f2:2d:
                    f2:12:89:68:70:59:1e:40:63:1f:c5:4b:62:21:1e:
                    5b:63:e8:21:45:39:3f:df:49:c1:8a:6c:6a:0a:30:
                    c0:ff:44:25:66:67:12:c3:05:be:93:8d:cc:9f:6c:
                    0b:52:a7:7a:86:6a:73:91:3c:fa:b5:be:31:d1:a1:
                    9e:79:77:0b:84:28:91:45:d6:0f:d8:b1:97:c1:63:
                    7a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:61:09:28:D8:41:42:EB:12:EC:64:0C:60:A0:37:AB:D7:D8:28:90
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iWEJKNhBQusS7GQMYKA3q9fYKJA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1010::-2a06:a005:105f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         78:e0:0f:61:3b:07:39:05:62:fa:0c:28:94:af:8f:c2:2b:9e:
         04:73:8c:0c:1c:bd:0f:6c:d4:6d:44:37:3b:e4:3b:a9:a3:9e:
         3e:70:79:9f:12:99:a4:ca:b8:f6:db:8c:1c:00:58:59:b5:dd:
         b8:46:38:15:03:57:32:48:4f:26:e5:6c:94:67:7c:bf:28:87:
         2b:be:3d:01:f4:ba:9a:6e:0f:50:d0:a5:90:b7:28:c0:4b:f2:
         4b:b8:26:6c:06:7b:62:1b:8f:9e:00:f5:cc:df:f8:a0:25:44:
         97:28:f5:6c:ed:09:45:73:83:4e:9b:00:26:2d:0e:8e:71:7d:
         a7:29:46:92:59:5d:ba:1a:bf:1e:f8:a3:10:c4:d4:b9:85:2e:
         35:de:04:db:2f:d0:0f:81:6e:1d:66:1b:23:28:b1:e6:5e:a2:
         45:20:4d:57:3e:7f:ac:ac:ec:1c:97:7d:0c:12:ac:b4:cc:d1:
         43:67:14:82:81:94:5c:45:56:10:4c:af:2f:be:f4:ef:a9:f6:
         d8:01:cd:51:90:23:72:7b:de:1e:03:65:5a:4f:8e:3c:b0:3e:
         29:7a:46:ab:eb:02:16:af:34:6c:56:0e:93:32:97:01:ca:fe:
         dd:86:d2:36:9c:d2:14:05:30:bb:50:e2:95:bf:a3:4c:eb:8c:
         cb:be:e8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----