Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jz0gl2dhbkTLEjeJgWv6Dndueoc.roa
File:                     jz0gl2dhbkTLEjeJgWv6Dndueoc.roa (raw, json)
Hash identifier:          Y376wXEf1vGM4t8xqR8x41A5JZ1CUk9aatuL/VHHRgw=
Subject key identifier:   8F:3D:20:97:67:61:6E:44:CB:12:37:89:81:6B:FA:0E:77:6E:7A:87
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184EE845C0FC505EC921C66288210FFE61E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jz0gl2dhbkTLEjeJgWv6Dndueoc.roa
Signing time:             Wed 07 Dec 2022 21:36:02 +0000
ROA not before:           Wed 07 Dec 2022 21:36:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210912
IP address blocks:        2a06:a005:2600::/44 maxlen: 48
                          2a06:a005:2610::/44 maxlen: 48
                          2a06:a005:2620::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ee:84:5c:0f:c5:05:ec:92:1c:66:28:82:10:ff:e6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  7 21:36:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f3d209767616e44cb123789816bfa0e776e7a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2a:e1:dd:09:2e:e9:6f:8d:ee:24:d0:ff:59:
                    2f:43:db:d3:40:80:d1:44:19:93:f9:72:68:63:28:
                    1c:61:c0:52:6b:5a:56:c7:8a:e0:9a:0b:cd:0b:08:
                    67:4b:e3:96:03:09:46:eb:40:b0:2f:ac:95:71:b2:
                    ba:68:6b:d0:d4:e8:51:d2:c5:b9:34:36:a7:3a:72:
                    d2:0b:73:e5:ea:79:8e:f3:18:ed:5c:a3:2b:2a:1c:
                    86:ae:fe:5b:e1:25:d2:74:48:08:42:df:59:4d:6b:
                    01:7f:59:13:4e:67:66:e9:dc:2b:41:27:82:42:b4:
                    de:e7:5d:5c:18:ac:7a:39:5d:2c:2d:a6:9e:f1:d6:
                    bb:90:4f:3e:70:cc:80:30:09:e5:01:08:63:db:c2:
                    fb:8d:28:b0:3b:f9:10:28:3f:48:91:39:38:76:5b:
                    79:ac:b1:a9:47:b7:1f:5f:75:7b:3c:59:8c:a0:d4:
                    d1:d9:5e:3e:cb:95:56:41:3d:cd:c1:2c:51:9b:d0:
                    39:b4:4e:9a:85:07:ba:3c:44:ce:22:80:9c:83:16:
                    23:bd:36:ed:c9:8f:f7:8b:cb:36:12:a5:00:61:ec:
                    4a:d3:ef:b5:1e:fe:ce:ce:84:49:ba:e1:19:c5:9a:
                    75:7b:97:a8:ac:3f:76:aa:1f:5e:cd:c1:1a:53:0d:
                    ee:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3D:20:97:67:61:6E:44:CB:12:37:89:81:6B:FA:0E:77:6E:7A:87
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/jz0gl2dhbkTLEjeJgWv6Dndueoc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2600::-2a06:a005:262f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5b:05:fd:ae:54:a5:40:f1:e5:98:72:1d:11:e0:a5:e0:0b:61:
         45:58:7b:e7:71:83:e3:fe:2e:9e:56:7f:21:06:90:6e:e3:66:
         cf:5c:53:d4:ff:96:51:6c:00:20:db:3a:2a:74:59:a8:46:39:
         0f:cd:ee:78:3d:cc:15:bd:6c:db:de:a4:3c:0c:20:30:3e:8e:
         94:b3:d0:1b:e0:19:76:19:79:c0:88:90:7f:f0:bd:47:6f:ce:
         97:04:85:06:ea:8d:bf:de:ac:f7:f4:ef:91:eb:b4:e2:b6:7d:
         d8:74:c7:3b:9c:07:c1:68:7e:23:ce:5d:a3:b1:fd:a5:c3:17:
         f2:99:fc:7c:d5:53:18:77:0d:11:37:46:f9:60:f6:69:f9:11:
         70:0a:57:1e:9e:a9:4a:9d:2b:eb:95:cf:d9:69:5e:14:97:2e:
         c5:11:36:0e:69:8b:62:18:6a:ab:df:3d:c0:e4:f7:73:a8:ec:
         e0:c7:cc:7f:6b:17:8a:fe:6e:88:d5:17:53:c0:35:8c:db:4b:
         02:38:27:9c:70:7e:c7:34:8f:c1:d9:8a:ee:ab:93:13:71:f4:
         cc:17:1a:15:b8:17:8a:66:1e:d2:39:8f:ce:bf:50:7e:97:bd:
         a0:e5:76:b2:44:0f:7b:0a:fa:9d:94:04:5c:3b:11:76:4b:1d:
         34:64:85:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----