Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pB0cnFwOVVvh9JhfUCGhaFAE_GI.roa
File:                     pB0cnFwOVVvh9JhfUCGhaFAE_GI.roa (raw, json)
Hash identifier:          1/Ur61bpr+AjJeoxS+QzCLn+2xCuwX0DVdKeZTAY4YE=
Subject key identifier:   A4:1D:1C:9C:5C:0E:55:5B:E1:F4:98:5F:50:21:A1:68:50:04:FC:62
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184095F18743A5086A4A63BE33A96EDBD70
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pB0cnFwOVVvh9JhfUCGhaFAE_GI.roa
Signing time:             Mon 24 Oct 2022 09:42:17 +0000
ROA not before:           Mon 24 Oct 2022 09:42:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210935
IP address blocks:        2a07:54c4:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:09:5f:18:74:3a:50:86:a4:a6:3b:e3:3a:96:ed:bd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 24 09:42:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a41d1c9c5c0e555be1f4985f5021a1685004fc62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:69:a2:20:93:a7:04:a7:0d:41:7b:a0:62:
                    5d:09:1b:39:82:8d:c4:fa:30:20:e5:8b:aa:20:bd:
                    ef:4c:9f:92:1a:a6:f3:c3:7f:3b:6c:9e:ee:cb:59:
                    19:7e:5f:4c:2a:65:86:7a:b1:cb:51:b3:6f:94:1a:
                    c1:39:9a:71:59:9f:6c:3c:75:21:75:c9:79:4a:fa:
                    46:de:70:13:13:95:1b:1d:d0:86:58:34:1a:ad:4e:
                    a2:bf:a6:92:3f:1c:7b:92:62:82:10:ab:ba:4d:65:
                    1a:e8:15:6e:85:f6:c9:20:b6:8a:8f:d7:a2:ef:b1:
                    84:5f:ea:2f:f5:86:a2:04:5c:be:ed:96:04:a1:ae:
                    4c:b7:28:1a:56:ca:2a:37:85:e8:4b:75:18:e8:d3:
                    08:1d:61:39:ea:d7:64:19:4f:ba:c0:cf:06:be:ad:
                    0a:e0:26:a5:46:2c:a8:52:e3:03:bf:e7:1e:f7:ab:
                    27:f9:60:f4:18:c9:bb:91:29:51:34:c3:e0:8d:e3:
                    ab:63:fc:d4:64:f7:ce:26:b6:7d:08:9b:fb:3b:9f:
                    6d:85:11:41:85:3b:e7:24:d0:c3:82:ec:a5:29:6b:
                    28:9c:ff:dc:d2:fa:e8:50:fb:29:54:1d:cb:c1:87:
                    56:15:a8:23:3a:4c:1f:bb:28:23:84:e4:31:54:74:
                    35:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1D:1C:9C:5C:0E:55:5B:E1:F4:98:5F:50:21:A1:68:50:04:FC:62
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pB0cnFwOVVvh9JhfUCGhaFAE_GI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:20:4a:1d:4c:38:57:35:a2:5b:d6:ce:86:2a:ef:99:a5:f9:
         dc:32:b9:31:ec:6a:cb:01:76:cf:0d:de:1f:01:55:51:b8:58:
         82:cd:fa:d2:3d:f1:0a:05:3c:cb:d3:0a:1c:2f:69:79:00:5f:
         f6:20:f3:ff:63:5a:70:e7:7b:ac:6e:57:bc:eb:76:1f:de:1d:
         8d:64:7f:a1:6c:1e:2c:95:a9:b2:21:fd:27:74:1e:7b:8d:df:
         7e:55:67:c7:d2:df:65:7e:8f:25:7c:2e:3a:de:b2:7a:2f:8b:
         8a:5e:36:ad:0a:8b:fd:4a:dd:52:2c:b0:eb:86:a9:ae:e0:3e:
         9e:bc:3e:28:d2:a5:7d:9c:80:31:4d:80:a8:4a:fb:ff:9d:07:
         06:c3:a8:e7:45:fc:ca:2e:3e:e5:39:df:ac:0f:34:ff:5a:73:
         01:d4:37:e1:33:c5:bc:d2:82:80:d2:d6:cb:b1:6a:b5:81:3e:
         da:c0:8c:e3:ff:a4:97:c4:a0:bc:88:db:ae:ce:11:34:21:32:
         1f:b5:77:ad:c5:0a:19:43:1d:d9:af:f7:ee:aa:60:b4:5d:ce:
         58:aa:99:52:fa:b6:49:c6:02:2f:43:a3:29:42:32:04:89:d1:
         55:b9:bf:ab:1e:a5:21:c8:4b:9c:15:91:d8:1b:67:f0:65:3d:
         26:68:ad:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----