Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lif8Gtk9_jqYdBFXXZba8Wi7mvU.roa
File:                     lif8Gtk9_jqYdBFXXZba8Wi7mvU.roa (raw, json)
Hash identifier:          yqrOS89G02s/k7EBKfAe03BJXF2M+GvP9VN1VENeS+U=
Subject key identifier:   96:27:FC:1A:D9:3D:FE:3A:98:74:11:57:5D:96:DA:F1:68:BB:9A:F5
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01836B4247034EDD0FABC9CDB2E47660EEBA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lif8Gtk9_jqYdBFXXZba8Wi7mvU.roa
Signing time:             Fri 23 Sep 2022 16:50:49 +0000
ROA not before:           Fri 23 Sep 2022 16:50:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210370
IP address blocks:        2a06:a005:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:6b:42:47:03:4e:dd:0f:ab:c9:cd:b2:e4:76:60:ee:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 23 16:50:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9627fc1ad93dfe3a987411575d96daf168bb9af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1b:0f:c9:be:ca:19:e8:ba:d0:fc:13:2b:90:
                    55:f4:96:d0:f8:4c:86:52:e5:ef:f9:3d:fc:40:a1:
                    8e:57:b6:1e:37:06:c6:c4:f7:75:35:f2:2a:6a:09:
                    a3:17:60:eb:de:64:75:b7:ec:87:48:9e:2e:f7:5b:
                    0d:62:3d:0b:09:ab:ce:cd:53:0c:ca:55:9f:a6:0a:
                    6a:a4:58:0e:d9:d0:cc:1c:bc:94:84:dc:57:1d:a5:
                    79:ee:7c:46:da:56:83:bb:5d:f7:35:02:f1:10:78:
                    38:b4:a0:79:29:72:ee:ac:1e:c1:e0:99:80:ff:0b:
                    0a:77:3e:0c:43:63:03:7b:29:3d:35:7d:3b:57:36:
                    a9:af:b3:29:55:99:1a:37:c2:17:12:fb:ff:b0:18:
                    d6:80:0f:f6:85:fe:08:0d:2f:9a:ce:62:12:af:73:
                    d2:97:d1:7f:f7:62:47:f6:e3:c3:9e:0f:0f:82:bc:
                    8f:5a:b8:b5:ad:1a:dc:e8:27:82:aa:84:9b:c5:da:
                    db:36:46:f5:0b:48:b7:29:62:69:6c:08:f1:e6:50:
                    46:e6:35:72:5d:e9:8d:83:08:f3:53:3f:e0:89:e9:
                    f6:59:18:31:2b:e2:8b:00:da:3a:b9:4b:4c:e2:5a:
                    d7:dc:08:3f:c3:a6:72:95:5e:c8:51:fd:73:84:6c:
                    23:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:FC:1A:D9:3D:FE:3A:98:74:11:57:5D:96:DA:F1:68:BB:9A:F5
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lif8Gtk9_jqYdBFXXZba8Wi7mvU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:63:b3:47:50:14:c2:2e:9e:b0:64:04:64:56:c7:a1:72:34:
         0c:a5:f8:1f:41:7c:1b:ec:0e:80:c2:f5:1a:3a:3c:21:5e:96:
         23:05:7f:e5:24:b8:58:81:61:dd:c1:aa:4c:0a:e2:81:81:80:
         b4:41:7a:06:2c:b0:03:35:58:23:44:7b:e7:f9:c7:35:84:b1:
         2f:12:41:44:4e:4a:f2:19:d3:f1:9f:a7:92:da:f0:90:d6:b7:
         18:d1:f4:96:2a:45:04:a3:f6:bd:15:a2:91:16:32:2f:9f:53:
         79:98:dd:73:fe:b0:8f:ae:5a:12:36:25:93:7e:85:87:5e:5c:
         8f:88:f9:24:92:27:6e:c8:ec:61:4f:84:3d:50:3c:5c:ca:69:
         f2:fd:b5:5a:57:32:bc:7e:21:a0:6a:56:84:13:c6:84:05:fa:
         1f:14:30:c6:7f:b6:6e:fa:b5:6b:47:19:4a:44:1e:7c:61:3c:
         d8:0a:a0:49:4b:54:6a:35:ac:38:f6:a0:12:76:8a:37:c9:eb:
         63:06:2a:86:fe:e5:34:46:1e:05:77:62:7f:2d:9f:6a:40:83:
         f9:ff:26:6e:98:36:86:e3:b4:59:5c:65:29:79:84:90:9e:e5:
         81:c8:fc:1c:0b:5a:48:31:d0:c7:e5:f0:6b:00:cf:6a:04:c8:
         17:44:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----