Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j9yb73INlGpReZlnMiDSTDmqwtg.roa
File:                     j9yb73INlGpReZlnMiDSTDmqwtg.roa (raw, json)
Hash identifier:          zHjtahLars9pvoZlhG/3m8rkxD22f6XYRhEXzb6yn6s=
Subject key identifier:   8F:DC:9B:EF:72:0D:94:6A:51:79:99:67:32:20:D2:4C:39:AA:C2:D8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       160DD75C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j9yb73INlGpReZlnMiDSTDmqwtg.roa
Signing time:             Sat 08 Jan 2022 14:46:49 +0000
ROA not before:           Sat 08 Jan 2022 14:46:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210260
IP address blocks:        2a06:a005:40::/44 maxlen: 48
                          2a06:a005:50::/44 maxlen: 48
                          2a06:a005:20::/44 maxlen: 48
                          2a06:a005:30::/44 maxlen: 48
                          2a06:a001:a0b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370005852 (0x160dd75c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  8 14:46:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8fdc9bef720d946a517999673220d24c39aac2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:28:ca:6b:67:00:4a:0a:a1:c3:9b:b1:92:42:
                    d6:c4:a6:7c:8b:0c:74:58:00:c9:02:4e:66:44:2d:
                    0c:05:fc:1f:29:16:5d:05:87:04:f9:8f:77:01:ab:
                    95:84:a7:ad:12:7c:f3:17:69:16:d7:33:94:c4:e5:
                    cd:3a:4b:b5:10:6c:48:7a:2f:8a:d5:4b:8f:aa:ee:
                    2d:26:ba:62:97:6a:5b:2a:2c:4f:32:45:be:f7:2b:
                    82:fb:58:20:15:33:2e:c6:ce:b2:b9:fc:dd:01:31:
                    ea:90:db:c9:4c:1f:23:f6:14:11:2f:0c:c8:4f:00:
                    0d:f5:a8:20:50:cf:1e:b0:12:c2:4d:8a:d7:78:3d:
                    cb:97:9b:d3:b9:30:f9:d1:4e:0a:fd:6b:b2:4e:07:
                    d5:70:b6:6d:52:9f:c9:16:be:b6:37:fb:31:b0:33:
                    31:9a:31:69:1b:c3:28:9d:bd:85:0a:78:ef:02:42:
                    bf:4f:d1:20:40:df:84:8b:25:c2:40:63:61:5a:dc:
                    76:7a:74:e0:ef:da:b6:5f:ce:2d:37:2d:9f:a0:fe:
                    8e:3d:72:99:4f:1b:c4:d8:4a:18:5f:a9:eb:dc:0e:
                    60:b8:7a:52:0a:0e:3a:a5:a6:27:e1:f0:00:cb:2d:
                    d6:27:91:ef:ab:c9:d0:bf:7a:92:dd:ad:96:c1:05:
                    f6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DC:9B:EF:72:0D:94:6A:51:79:99:67:32:20:D2:4C:39:AA:C2:D8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j9yb73INlGpReZlnMiDSTDmqwtg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a0b0::/44
                  2a06:a005:20::-2a06:a005:5f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         83:d9:0a:13:a9:d1:49:f4:e4:02:7e:f5:79:f7:5d:64:92:cc:
         ad:99:f0:03:98:94:9e:23:59:8a:bf:8a:34:72:7e:3c:b1:4b:
         db:e2:88:71:71:15:32:84:3f:55:c2:64:b2:aa:90:16:12:e6:
         f0:75:90:59:43:17:90:0e:a7:65:f3:eb:bb:b0:fb:b4:f6:b3:
         ae:e7:0b:f1:9f:de:42:4d:95:d0:65:66:f6:11:39:e3:ca:81:
         7f:14:ee:8b:58:d6:94:b8:0c:81:98:75:de:44:ac:64:a9:0b:
         cf:3f:51:b8:e6:1c:38:67:15:a0:15:78:f7:0d:86:43:96:74:
         bd:a5:79:85:d8:ac:dd:b5:93:46:1d:dc:fe:76:c5:76:26:30:
         d3:69:eb:a0:d4:82:28:43:2e:d0:df:be:71:02:ca:45:cc:17:
         dd:09:54:09:4c:bf:96:b3:fb:2b:ef:50:07:01:c4:91:49:25:
         2e:35:78:8d:d8:85:b3:2d:62:2f:51:3d:6d:93:65:a2:72:8a:
         47:4d:c9:1c:fa:f3:b8:55:e3:5d:5d:41:8a:3a:f5:0f:65:b1:
         36:62:2f:4a:d3:c0:45:8b:54:7f:08:71:2f:b0:cb:b4:10:7b:
         8e:48:18:ac:3e:f5:2b:03:63:44:be:eb:87:2c:e5:96:40:f5:
         fa:5f:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----