Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/p8iBTulfyvkYB-mgqP4cbs_-hKw.roa
File:                     p8iBTulfyvkYB-mgqP4cbs_-hKw.roa (raw, json)
Hash identifier:          ZI2DFMlzeCP8KN2g9QuWAmAiOu5YD/dgVob4XeO61ug=
Subject key identifier:   A7:C8:81:4E:E9:5F:CA:F9:18:07:E9:A0:A8:FE:1C:6E:CF:FE:84:AC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B258911
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/p8iBTulfyvkYB-mgqP4cbs_-hKw.roa
Signing time:             Tue 21 Jun 2022 13:23:47 +0000
ROA not before:           Tue 21 Jun 2022 13:23:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213045
IP address blocks:        2a06:a005:e20::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455444753 (0x1b258911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 21 13:23:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a7c8814ee95fcaf91807e9a0a8fe1c6ecffe84ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b1:a4:c9:bc:9f:aa:32:ad:e5:1f:7a:3b:d4:
                    d4:7c:cd:68:dc:83:4d:f0:b4:44:a7:65:de:3e:b5:
                    37:a0:2d:ae:a8:01:01:b8:c9:4e:55:30:1b:18:c0:
                    29:bf:3f:63:b0:05:c2:94:87:b3:e0:3e:1c:62:e5:
                    17:34:de:3f:dc:fb:99:66:11:46:ef:19:d8:5d:46:
                    ea:c3:58:7f:f7:7d:ef:1f:03:6a:fb:57:35:45:39:
                    6d:93:7c:99:24:09:6e:80:d4:d1:17:09:71:28:66:
                    54:2b:3b:b0:1e:89:d4:74:2d:da:3d:87:58:8d:f3:
                    6f:e3:98:21:f8:4b:99:38:83:b2:19:61:14:a8:40:
                    af:66:d8:4d:11:ea:f8:56:c7:a9:d2:ca:5f:28:5c:
                    94:81:48:04:44:14:b0:a3:47:01:92:dd:a6:6c:04:
                    b0:10:8a:9a:7d:90:79:74:0c:99:bd:af:01:a5:78:
                    fe:a7:b3:4f:c4:82:96:03:af:d6:79:62:d9:69:07:
                    6e:4a:9f:4d:e6:d0:94:2b:19:dd:e2:7c:26:37:fe:
                    84:9f:2a:e8:9f:d9:5b:f9:c2:39:a5:c2:a2:a8:94:
                    d6:3c:18:63:46:5b:96:1f:17:92:37:27:0f:09:83:
                    a0:55:25:ae:b5:b6:98:a5:7f:99:93:75:7f:09:41:
                    db:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C8:81:4E:E9:5F:CA:F9:18:07:E9:A0:A8:FE:1C:6E:CF:FE:84:AC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/p8iBTulfyvkYB-mgqP4cbs_-hKw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:e20::/44

    Signature Algorithm: sha256WithRSAEncryption
         6d:d3:0e:95:39:1a:54:9e:02:97:40:b3:66:3c:3f:84:60:e3:
         fb:d5:0f:fd:01:2f:59:6d:43:8a:ce:19:3f:88:66:75:df:6f:
         68:4d:89:c3:64:8f:88:17:6c:96:85:d9:9a:14:d2:93:82:6a:
         f0:8e:cd:7b:ed:4b:95:e4:74:1f:03:b2:94:6e:57:3a:28:bc:
         2a:c3:ab:d1:21:69:22:e8:32:ab:1c:ab:80:e5:a4:73:cc:b6:
         5b:ce:31:bd:34:bb:e4:0f:f4:f9:a7:45:dd:7b:0b:82:98:23:
         4b:a1:b2:7e:39:e8:2e:51:0a:ac:c7:50:05:22:b9:fb:f4:14:
         44:40:e4:d5:0b:e6:1c:0e:b7:9c:1c:71:a0:00:dc:20:96:f8:
         50:01:66:c2:1e:3d:8e:fe:36:31:e6:2c:8f:cd:f2:1e:9b:7b:
         56:c5:cd:78:66:0d:aa:c8:fe:7a:f4:ef:89:bf:b1:7d:b7:ee:
         ed:3e:ce:61:4d:ee:e9:2d:99:b4:ae:b0:4b:c4:c3:cc:51:68:
         c9:e6:7a:d5:60:85:e2:70:96:96:bb:a7:3f:cc:30:c4:84:b3:
         f9:60:fe:b3:cf:4e:15:3e:ab:70:11:a8:ea:03:b7:73:09:65:
         0a:af:af:0c:a8:23:2e:7a:fc:ba:6d:4d:da:72:c0:b9:20:3b:
         71:11:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----