Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m4vgSntDPWNZ5JixY6mhlITvNQs.roa
File:                     m4vgSntDPWNZ5JixY6mhlITvNQs.roa (raw, json)
Hash identifier:          qkrdHiAGDyo/Hii7tpAIJ/kgGS5+sxnrwcDaYHqJcCg=
Subject key identifier:   9B:8B:E0:4A:7B:43:3D:63:59:E4:98:B1:63:A9:A1:94:84:EF:35:0B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       16A5FF8B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m4vgSntDPWNZ5JixY6mhlITvNQs.roa
Signing time:             Mon 07 Mar 2022 05:22:24 +0000
ROA not before:           Mon 07 Mar 2022 05:22:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207941
IP address blocks:        2a06:a005:b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379977611 (0x16a5ff8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Mar  7 05:22:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b8be04a7b433d6359e498b163a9a19484ef350b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:4b:53:18:b3:55:63:52:d6:1b:d3:46:3b:
                    98:49:82:06:38:1a:e6:04:60:59:ba:ec:dd:6b:09:
                    81:1d:46:77:9d:e4:d5:25:53:8d:df:3c:2f:4d:1b:
                    0a:0c:f8:3c:10:1b:fc:66:b9:ac:94:de:be:41:fb:
                    78:02:e2:b4:36:37:5b:17:7c:5e:68:8e:10:fc:67:
                    ab:2b:3f:09:c0:66:ca:a0:b7:25:7f:58:bc:be:08:
                    37:60:4c:af:57:fd:31:fb:60:74:88:ac:c4:3e:c5:
                    89:a2:d6:cc:d1:d8:ab:3d:20:42:9d:3f:08:e9:0c:
                    7d:64:78:b7:7f:f4:f2:2f:75:e8:8b:2c:9b:64:17:
                    6f:5a:bf:c9:88:0b:2c:f7:89:7e:80:cb:cb:ea:4d:
                    b3:b7:0b:bd:f5:28:ba:00:c4:b5:2b:1e:36:9a:cd:
                    d1:d3:7e:04:23:d0:9b:06:0f:96:1f:23:92:bc:c6:
                    32:92:c2:c4:3b:62:a7:8d:52:c9:0e:aa:4b:60:34:
                    7d:70:e0:a9:a6:c7:20:e0:d4:d2:77:4d:bb:32:94:
                    c1:29:0f:10:43:70:c7:80:c9:62:8d:ff:c5:03:02:
                    d6:ae:23:61:ec:ba:8e:aa:7c:95:7d:41:6c:57:3b:
                    c9:97:53:29:be:d1:92:b1:c8:ad:6d:b8:36:68:89:
                    bb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8B:E0:4A:7B:43:3D:63:59:E4:98:B1:63:A9:A1:94:84:EF:35:0B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/m4vgSntDPWNZ5JixY6mhlITvNQs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         15:68:64:7a:b6:dd:96:1c:17:1c:60:0f:2f:03:42:aa:aa:e0:
         24:ea:1e:33:80:a9:3a:4a:b3:f2:9c:e5:04:3a:43:7c:cd:dc:
         89:b4:93:a9:20:c3:6b:c9:5d:80:aa:ca:5f:ad:1e:fc:b9:5f:
         ec:ce:d0:66:9e:76:61:cf:d1:72:08:e0:0e:c0:5b:b6:8d:e5:
         ae:89:7d:14:20:a2:ee:d2:8d:93:17:ca:2d:6c:a1:8d:98:6c:
         d7:84:2c:09:a6:8d:6b:6f:5b:1f:48:6d:a1:ae:72:d6:cf:0c:
         2c:f7:43:12:e8:99:59:00:2f:46:b8:c2:8d:c8:b0:47:54:12:
         d8:62:8b:8e:63:ec:37:a4:36:a2:8f:7d:c4:5e:e6:17:a7:30:
         cc:bf:95:d8:fd:a4:d9:e5:59:14:15:92:02:bd:31:a6:fb:15:
         3d:d8:68:08:d1:f8:05:92:78:bd:98:ec:98:55:57:3a:b6:03:
         de:0e:ee:a0:b0:89:0b:76:ef:15:bb:4b:9d:2b:f7:f6:25:5c:
         9a:0c:88:26:af:a8:a3:e8:ca:64:17:6c:db:39:75:7c:d6:00:
         53:22:28:e7:c4:7e:68:a1:b7:5b:5e:55:9e:75:2f:a0:19:86:
         d1:eb:bf:21:b0:b2:93:b4:88:b4:16:8a:bf:66:79:e7:50:3b:
         76:34:cd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----