Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pttNLfg46d3aBvpRSmtYAAAbWJk.roa
File:                     pttNLfg46d3aBvpRSmtYAAAbWJk.roa (raw, json)
Hash identifier:          YNxK5YdmApAYKO33040UBTFjs2129rW6qYX15TJ4Fd4=
Subject key identifier:   A6:DB:4D:2D:F8:38:E9:DD:DA:06:FA:51:4A:6B:58:00:00:1B:58:99
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       181C140D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pttNLfg46d3aBvpRSmtYAAAbWJk.roa
Signing time:             Thu 14 Apr 2022 06:38:32 +0000
ROA not before:           Thu 14 Apr 2022 06:38:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133098
IP address blocks:        2a06:a005:470::/44 maxlen: 48
                          2a06:a005:438::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404493325 (0x181c140d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 14 06:38:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a6db4d2df838e9ddda06fa514a6b5800001b5899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:43:b2:ed:9a:08:76:6a:bd:ef:8b:e8:3b:
                    86:fd:d1:62:a8:84:bc:d8:a8:f4:b1:84:b7:00:2c:
                    c2:ba:26:35:d8:85:0c:29:76:74:4f:95:25:bb:26:
                    e3:1c:08:1f:af:3c:de:c8:2f:8a:aa:21:4a:3a:51:
                    6b:22:01:a2:85:0a:15:cd:3d:52:ba:1f:53:19:f1:
                    ae:56:85:80:7f:27:aa:39:8f:c8:ca:6b:c5:96:47:
                    b8:25:6e:04:61:7f:e1:05:39:ff:f7:3a:7b:42:f2:
                    eb:c1:47:22:d6:30:91:5a:d3:f9:25:94:a5:70:6f:
                    5a:e9:3c:8a:0c:85:97:b1:98:f5:df:3c:78:20:10:
                    9c:49:c3:03:38:61:fb:e7:7b:42:45:4d:c0:23:26:
                    d3:17:f9:16:e4:ea:21:cf:70:e6:5a:12:bc:d4:a9:
                    64:ca:23:87:f3:b8:3e:37:a7:69:39:6a:5a:43:2e:
                    63:85:45:bc:1b:f0:0b:76:a1:70:a2:50:c9:3e:69:
                    1a:cb:ac:07:db:38:76:3e:72:59:58:0e:89:55:2e:
                    ef:70:c5:8c:dd:b4:27:78:c5:06:bf:8e:8a:15:4b:
                    e5:51:6e:23:ab:47:b4:ec:5e:06:6e:b5:27:c4:9a:
                    ca:70:84:a7:5d:91:9e:d9:6b:d6:ef:02:68:20:f6:
                    a6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DB:4D:2D:F8:38:E9:DD:DA:06:FA:51:4A:6B:58:00:00:1B:58:99
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pttNLfg46d3aBvpRSmtYAAAbWJk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:438::/46
                  2a06:a005:470::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:63:6f:25:a5:22:87:2c:db:d0:7b:1f:22:2f:43:44:4e:dd:
         df:45:38:a0:23:1a:b3:8c:23:c4:56:48:13:34:24:02:a6:a9:
         43:53:a3:b2:e9:b6:86:9e:0a:c0:4c:e6:12:cb:39:28:77:69:
         5f:f3:38:51:6b:f4:b7:bf:6b:50:6c:82:7a:8f:ee:10:c0:30:
         f3:da:74:2d:26:92:e6:92:f4:e2:fd:45:ab:8e:c4:22:7e:ef:
         a0:f9:60:04:b8:67:ab:44:57:ed:29:dd:79:68:8c:99:50:c3:
         2a:c9:d6:70:7d:ec:32:aa:5c:c3:9f:93:5e:52:9b:56:4a:12:
         d8:1e:9f:0b:a3:60:47:f1:6c:8c:59:6a:b0:10:43:09:97:9a:
         11:db:3f:de:b2:44:f8:2e:e3:f8:cf:ca:89:e0:89:f9:0f:bd:
         61:16:9e:75:a3:33:d7:18:a4:b7:49:60:39:39:92:29:75:47:
         e5:4b:50:00:cf:b9:fb:0a:ce:c6:73:9d:5f:e3:25:da:4f:c8:
         dd:f1:85:cd:b0:74:8d:5c:96:46:a5:02:48:09:e6:5d:97:e6:
         e6:9b:6d:b2:d6:9c:b6:5d:a7:c9:41:21:62:73:85:0f:65:8f:
         6d:b6:4f:f7:49:4e:a7:9c:7a:62:ee:f4:a7:a4:73:c5:c7:e1:
         7e:43:64:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----