Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lxEDL63n0e4sTEwLTV5hxbUQ18U.roa
File:                     lxEDL63n0e4sTEwLTV5hxbUQ18U.roa (raw, json)
Hash identifier:          cwnOTvekHLB9BS5vAkvm3TOMX2W4kVTd/heOe64LjcA=
Subject key identifier:   97:11:03:2F:AD:E7:D1:EE:2C:4C:4C:0B:4D:5E:61:C5:B5:10:D7:C5
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181D1A26291A4238FB46B57914DE0128559
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lxEDL63n0e4sTEwLTV5hxbUQ18U.roa
Signing time:             Wed 06 Jul 2022 03:51:29 +0000
ROA not before:           Wed 06 Jul 2022 03:51:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147018
IP address blocks:        2a06:a005:a06::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d1:a2:62:91:a4:23:8f:b4:6b:57:91:4d:e0:12:85:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  6 03:51:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9711032fade7d1ee2c4c4c0b4d5e61c5b510d7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b2:25:97:50:2a:0a:3f:fb:14:12:8d:ff:a4:
                    4d:cd:2b:7a:ee:58:f5:23:9a:ef:2a:c9:48:32:d1:
                    ab:1d:5c:04:f5:73:52:5c:3d:1c:c4:5b:66:6a:e0:
                    64:43:ba:f5:84:71:31:5b:d0:16:90:4a:36:dc:f5:
                    05:43:b7:e4:04:9c:f9:86:77:60:ac:88:ed:93:49:
                    de:f5:0a:9f:0c:1f:16:df:d3:5d:a8:ca:7c:83:ef:
                    e3:5f:95:44:22:dd:af:f1:7a:6e:d6:7a:4a:81:3d:
                    bb:fe:14:a8:c0:16:97:d6:fc:6f:33:68:74:6f:87:
                    d7:e7:df:3c:79:d2:e7:25:ea:02:40:57:c0:50:16:
                    f3:8b:53:39:55:fc:b9:87:50:21:4a:ac:4e:84:84:
                    a5:d5:ea:2e:e2:d2:5f:83:d2:4a:dc:35:32:7e:12:
                    bd:4d:ac:22:ec:f1:dc:df:28:e4:0d:89:01:0a:26:
                    4c:60:a4:9c:bd:c6:a9:81:98:89:7b:90:a5:79:1a:
                    fd:45:d5:2b:6c:32:f7:d0:59:3a:7f:4c:91:1a:3e:
                    93:b2:c6:f5:fe:5e:0f:08:29:84:76:7e:d4:79:3c:
                    22:dd:3b:f1:79:5c:44:59:f7:d8:af:e9:30:96:8a:
                    6c:77:f9:72:10:4a:35:45:aa:af:27:24:15:5b:89:
                    f6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:11:03:2F:AD:E7:D1:EE:2C:4C:4C:0B:4D:5E:61:C5:B5:10:D7:C5
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/lxEDL63n0e4sTEwLTV5hxbUQ18U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a06::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:92:c7:77:d5:c0:9f:ca:d7:d8:5a:9d:30:29:a2:e2:29:36:
         91:e9:f2:f7:94:4b:4a:85:9c:69:4b:4e:72:fd:6b:be:5c:e7:
         40:b8:ab:fb:da:50:df:81:f9:4e:a9:72:04:a1:91:b2:a9:fa:
         65:d0:c7:40:71:63:c3:29:03:06:83:be:0c:ab:c1:d6:6a:ec:
         3b:e9:84:db:bb:bf:d0:82:61:a1:7f:8f:47:e5:5c:81:dd:75:
         4b:7b:14:1c:10:10:f3:79:1e:67:b8:d1:ef:64:36:8a:aa:43:
         d0:ab:32:90:ec:8f:9b:e8:5f:3b:ff:f6:5b:b0:f2:ba:1e:56:
         7c:bb:69:f7:37:be:0e:f7:79:c5:58:a4:8f:92:d5:6b:d4:55:
         ef:c6:a8:af:17:1e:e1:ed:9c:cd:cf:dd:66:35:88:b9:23:6f:
         60:d3:67:40:e3:fa:c4:1b:31:0c:bd:bb:39:dd:42:00:94:f4:
         5c:9e:ef:27:f9:e7:5a:60:35:6d:1c:98:de:bb:1a:3a:d4:13:
         a4:22:c6:b9:77:b3:ac:6d:c0:63:1f:96:70:ae:cb:fe:6d:01:
         2e:f8:29:1d:9d:75:52:26:53:3a:68:30:76:e8:d4:9f:c9:eb:
         2e:39:5e:52:11:17:3d:d8:28:cd:49:1e:88:69:0a:9d:a4:c8:
         90:6e:b1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----