Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lk3NAm9A736__SV1AT97yvoxpRQ.roa
File:                     lk3NAm9A736__SV1AT97yvoxpRQ.roa (raw, json)
Hash identifier:          pbpaHp4xVtT8WA2w/bHoQaOmGPKeXIZHRM0dJqPxPqg=
Subject key identifier:   96:4D:CD:02:6F:40:EF:7E:BF:FD:25:75:01:3F:7B:CA:FA:31:A5:14
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       192E38D3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lk3NAm9A736__SV1AT97yvoxpRQ.roa
Signing time:             Wed 04 May 2022 15:19:09 +0000
ROA not before:           Wed 04 May 2022 15:19:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211360
IP address blocks:        2a06:a005:1f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422459603 (0x192e38d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  4 15:19:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=964dcd026f40ef7ebffd2575013f7bcafa31a514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:64:fc:a0:c3:5a:48:08:dc:c3:98:b4:aa:
                    d1:9e:f6:7b:b3:e0:8b:17:d0:f2:a0:39:32:96:27:
                    a6:c2:4d:e1:2b:f6:8c:8f:bb:a9:0f:03:76:f5:97:
                    2e:9e:78:4d:c5:60:ce:a0:2d:2f:71:a8:ab:a8:ec:
                    42:87:04:94:2c:99:28:0d:d0:bb:2c:eb:86:0b:5b:
                    97:bb:2e:bb:da:91:82:d3:3c:36:63:7a:cd:62:cd:
                    ef:10:bd:b7:b2:f2:9d:dd:c8:3e:48:0e:f4:0c:b5:
                    30:42:81:5a:90:ae:a8:f2:d8:9a:ae:da:62:57:10:
                    61:f1:6c:3a:6f:e1:35:ea:1c:6c:d4:d6:ce:87:a8:
                    d7:45:10:71:8f:d0:1b:1e:20:0b:41:2d:6e:24:d7:
                    41:ad:51:f7:b9:f0:de:51:2e:e3:08:0a:e7:a5:ed:
                    e9:71:a9:4a:cd:6e:af:07:d8:94:1c:d4:55:02:cd:
                    f8:8b:1e:82:c4:c9:30:dc:1e:54:33:97:45:3b:95:
                    7a:a1:5b:10:72:7a:4b:42:2b:c6:3b:00:27:af:73:
                    e9:e4:25:57:42:95:e1:62:a6:47:67:d5:f4:a9:f5:
                    35:69:84:05:41:e8:3b:d5:82:27:9c:e6:d1:2d:e1:
                    90:3a:f5:d9:2d:15:3e:09:65:35:0e:3e:da:8a:4f:
                    36:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4D:CD:02:6F:40:EF:7E:BF:FD:25:75:01:3F:7B:CA:FA:31:A5:14
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lk3NAm9A736__SV1AT97yvoxpRQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:57:e6:8e:e2:d3:5c:2e:95:f3:90:63:25:39:a9:b9:20:89:
         d9:9d:a0:46:30:16:e1:12:5e:f7:c0:b6:98:da:96:f9:79:2f:
         6b:ab:2f:2c:de:ff:07:e6:d8:af:98:04:17:d6:f4:9a:af:64:
         08:41:07:19:48:fa:50:fb:38:0c:7e:dd:f4:b2:ed:b0:5d:a3:
         aa:13:ce:65:33:7b:16:24:07:6c:70:9d:52:85:b6:9c:87:3e:
         24:8b:1e:c5:1b:0f:a5:2b:88:16:85:70:ba:b5:ff:86:26:28:
         98:37:ce:39:8b:cd:66:56:d8:3e:36:f3:2c:3f:7c:09:98:33:
         1e:d7:65:b2:27:93:fa:83:8a:ab:ba:57:22:06:5a:8a:42:14:
         b3:27:92:90:c2:ef:75:26:a6:4f:7f:c3:85:9b:c0:00:6b:aa:
         06:a5:74:f6:79:a9:33:7a:ab:2e:63:81:7e:51:22:3f:53:4b:
         7e:30:05:94:08:80:f4:6f:26:d4:5e:ac:b3:d6:37:16:4f:ac:
         3a:ac:38:d5:ec:50:db:73:38:f7:11:cc:ba:69:e9:9a:14:5a:
         57:b3:c1:a8:39:74:0e:eb:42:71:59:fe:55:51:27:17:86:22:
         4b:8f:12:82:dd:79:00:5f:f8:82:06:9a:2f:22:4e:b8:0b:19:
         c6:43:44:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----