Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pDEnt3rCh8hcPpYaA6u9PrVRxPk.roa
File:                     pDEnt3rCh8hcPpYaA6u9PrVRxPk.roa (raw, json)
Hash identifier:          sSBGT99/FLPNO2fnUYcmod7BvU2D/Qu67I5jUAI0wFU=
Subject key identifier:   A4:31:27:B7:7A:C2:87:C8:5C:3E:96:1A:03:AB:BD:3E:B5:51:C4:F9
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       17E764CD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pDEnt3rCh8hcPpYaA6u9PrVRxPk.roa
Signing time:             Tue 12 Apr 2022 03:14:28 +0000
ROA not before:           Tue 12 Apr 2022 03:14:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200681
IP address blocks:        2a06:a005:1c::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401040589 (0x17e764cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 12 03:14:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a43127b77ac287c85c3e961a03abbd3eb551c4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:55:5b:28:c6:6e:56:6d:d1:f5:3c:8f:6c:
                    73:fb:e8:64:c2:eb:d2:2a:91:b6:2a:59:89:d1:65:
                    3c:8a:14:ce:46:7c:15:a2:8f:c6:39:47:82:d2:f8:
                    62:8b:7a:e5:17:b5:ab:f4:22:bc:89:85:14:42:de:
                    73:83:42:7e:a5:42:d5:f1:69:7f:9e:40:03:35:46:
                    78:e5:dd:d5:14:b0:34:26:63:5d:eb:9a:20:a6:c6:
                    cf:c9:b9:64:d0:2a:fe:ef:68:7c:d9:3a:51:d1:27:
                    78:bf:37:84:4f:2e:8b:41:07:ba:06:47:db:9e:10:
                    39:b6:a8:f8:f0:d8:9a:a4:88:1c:3b:4f:f2:98:19:
                    e3:68:45:02:70:9d:40:87:88:7c:b9:e8:c2:25:87:
                    56:4c:cd:bc:68:a2:2d:19:eb:8d:7e:2c:e6:5b:70:
                    a9:11:24:0e:44:5f:7f:e9:49:ec:27:fe:78:d8:47:
                    06:44:0d:1a:de:c5:a1:6c:53:b0:0a:9f:6d:e9:c3:
                    e0:2f:7f:62:ae:39:6f:14:04:24:2d:3b:c3:e3:48:
                    33:9d:f1:07:77:29:2e:30:1c:75:a3:94:a6:1b:12:
                    13:aa:f7:20:a2:da:3e:0d:76:35:87:f5:5a:d0:41:
                    1e:c9:9d:3e:4e:ec:de:94:2e:b5:88:c4:5b:13:27:
                    83:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:31:27:B7:7A:C2:87:C8:5C:3E:96:1A:03:AB:BD:3E:B5:51:C4:F9
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pDEnt3rCh8hcPpYaA6u9PrVRxPk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1c::/46

    Signature Algorithm: sha256WithRSAEncryption
         8e:72:9c:28:11:10:6a:57:ac:a8:bb:41:a4:f9:94:bc:e2:96:
         c3:30:80:a6:82:ce:f9:f4:a7:21:6f:8f:de:bb:ea:b9:33:82:
         f4:69:3b:d0:43:25:17:9a:b4:5d:12:43:5c:56:53:53:9c:fc:
         91:e7:5e:4f:87:d8:35:97:76:05:3d:21:61:04:af:ab:a2:39:
         84:5d:60:35:f6:ac:1f:ab:7d:9b:31:dd:37:22:c0:fb:16:c4:
         f2:dd:c5:ff:e3:7b:cf:50:88:b7:5f:50:c4:d7:b3:f4:35:b6:
         eb:a8:97:a2:39:d2:3c:8c:01:22:c5:17:9a:54:f2:0f:72:81:
         78:5e:74:9e:e1:15:75:aa:14:5b:18:74:40:b3:47:5b:96:d1:
         ed:76:b1:9f:db:a9:3e:20:5b:41:4c:fc:dc:65:b6:67:91:58:
         4e:c8:60:87:f5:83:76:f5:53:c5:0b:09:fa:01:0f:01:57:e7:
         82:64:ed:1c:d6:37:e3:60:d8:b8:22:82:dc:01:88:62:df:d5:
         69:91:c1:b0:4d:50:c7:53:b6:05:db:5f:32:6d:de:0b:1e:46:
         a3:db:0f:49:d0:cb:86:ce:90:0a:e5:25:b2:a6:71:e5:78:77:
         6b:11:ab:5d:0e:c0:a3:02:4c:e6:3b:84:8b:41:9f:f1:2f:1e:
         9a:96:76:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----