Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kwYu6zB6jVnVRq84cg7l_byf6Vg.roa
File:                     kwYu6zB6jVnVRq84cg7l_byf6Vg.roa (raw, json)
Hash identifier:          XuMpOm3EjvbP7RYC0mKqfHEdIRSDCIGD7Tqek+QMAns=
Subject key identifier:   93:06:2E:EB:30:7A:8D:59:D5:46:AF:38:72:0E:E5:FD:BC:9F:E9:58
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1ABF6D68
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kwYu6zB6jVnVRq84cg7l_byf6Vg.roa
Signing time:             Sat 11 Jun 2022 09:02:08 +0000
ROA not before:           Sat 11 Jun 2022 09:02:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     132282
IP address blocks:        2a06:a005:c70::/44 maxlen: 48
                          2a06:a005:bb0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448753000 (0x1abf6d68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 11 09:02:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=93062eeb307a8d59d546af38720ee5fdbc9fe958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:29:1c:87:2d:ce:04:e5:74:65:fc:47:71:
                    bb:46:e0:6a:12:5e:d9:18:a8:6d:80:32:54:34:3a:
                    ec:09:bd:ec:32:20:45:94:c1:dd:d7:08:c9:8f:47:
                    c8:b6:ea:94:47:23:89:bc:63:cb:09:38:df:65:fe:
                    3c:71:e8:08:a1:ee:3a:58:78:49:99:81:5a:ba:1f:
                    d4:39:ff:7e:be:9f:8c:7e:9c:b3:a1:f2:19:6c:40:
                    f4:bb:6d:b5:1b:f3:ab:16:81:7f:57:10:f7:53:a2:
                    5f:9f:92:e0:72:61:98:5b:85:3d:a8:76:f5:19:98:
                    e4:86:92:7b:03:f7:cc:28:76:a8:9f:de:d0:84:2e:
                    ec:11:70:71:ef:f2:bf:f9:c4:f3:d3:da:80:e3:1f:
                    d9:fe:61:5f:2d:6f:8d:33:ed:b7:ee:be:37:fb:30:
                    a3:94:fa:b8:9a:3f:72:6f:e8:3c:69:3e:a6:b7:e2:
                    ea:d5:b8:43:90:6a:66:eb:21:4c:32:e5:47:f5:88:
                    57:64:0f:a5:9e:79:c3:3a:b8:91:42:87:d8:c6:2f:
                    30:a2:25:06:38:07:a3:1e:69:2e:ed:e9:45:a7:dc:
                    d0:7c:72:fd:0d:4a:73:41:24:ef:53:b5:8a:04:0a:
                    e2:2f:b8:df:a5:a4:43:f9:df:b4:c5:05:47:73:97:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:06:2E:EB:30:7A:8D:59:D5:46:AF:38:72:0E:E5:FD:BC:9F:E9:58
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kwYu6zB6jVnVRq84cg7l_byf6Vg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:bb0::/44
                  2a06:a005:c70::/44

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:ef:74:d3:4b:21:24:8f:6a:f1:02:61:da:8c:a0:ca:62:
         ea:59:d0:8f:90:55:df:45:d6:16:51:d7:27:48:ee:1e:c3:09:
         e3:cb:b2:b0:ca:8f:f5:e9:28:d3:39:13:ca:ab:b5:27:72:dd:
         ee:ad:5d:7d:fa:90:21:41:5d:7f:58:6d:fb:eb:a6:24:5f:dc:
         48:5c:f8:d7:46:ad:1b:d0:0a:42:92:76:a6:a6:51:d4:02:89:
         72:bc:e0:ab:a1:ec:32:dc:8f:a9:7d:d1:cd:07:54:08:6b:78:
         71:e5:fb:93:c0:19:27:5b:79:06:0b:e2:d9:d7:49:33:2a:08:
         8c:de:f4:02:51:f0:e1:0d:33:5c:00:df:ed:aa:90:ff:78:a4:
         29:69:e7:57:e0:04:c0:54:d3:17:72:7d:0a:58:e9:18:0d:76:
         7c:c8:a6:76:a2:ff:7c:ca:bd:e1:93:92:a9:0a:a1:c2:40:3d:
         fb:0b:aa:1f:9b:a8:c3:9b:95:a0:fe:96:e0:33:6e:2f:b7:46:
         6d:1b:59:c7:5d:55:0f:74:b5:59:db:9e:9f:7e:db:cb:ea:0d:
         0a:c5:89:3d:1b:4e:0a:0a:5c:fb:64:e9:8f:ac:52:9b:9b:61:
         28:1b:ca:e3:ed:5a:09:49:f3:0b:89:ea:bf:b5:5c:03:d8:14:
         8c:9c:36:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----