Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qjecg-PekU1nXqOdbUrpnMZxaRs.roa
File:                     qjecg-PekU1nXqOdbUrpnMZxaRs.roa (raw, json)
Hash identifier:          6izHgEg5Jp+cUW+yECOn2cdk0dyZ4uwRsv3ec1wRSAE=
Subject key identifier:   AA:37:9C:83:E3:DE:91:4D:67:5E:A3:9D:6D:4A:E9:9C:C6:71:69:1B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A522A0B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qjecg-PekU1nXqOdbUrpnMZxaRs.roa
Signing time:             Mon 30 May 2022 22:27:56 +0000
ROA not before:           Mon 30 May 2022 22:27:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213386
IP address blocks:        2a06:a005:2d7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441592331 (0x1a522a0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 30 22:27:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa379c83e3de914d675ea39d6d4ae99cc671691b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cb:2f:5e:ed:7d:8b:28:53:73:09:24:d4:f2:
                    18:8f:49:e8:c6:99:86:d2:39:5f:6a:8a:2d:9c:e9:
                    62:d7:86:bb:d0:2c:15:00:e4:88:9f:13:7a:0c:52:
                    6d:96:12:31:4e:80:44:0b:6b:57:1a:b3:8a:41:f5:
                    d8:37:1a:67:8b:20:ff:aa:27:36:98:5e:84:e6:46:
                    a0:ac:91:a0:cf:d6:d4:9d:35:c1:5b:7d:06:82:2e:
                    d9:63:65:6a:21:ed:4b:18:59:c9:8c:94:7d:7e:5a:
                    fb:57:02:8a:9b:9b:8d:ff:62:21:be:51:27:a3:8d:
                    67:a0:5f:26:f4:75:d2:26:31:59:a6:3c:c5:df:c2:
                    e8:0e:0d:ab:6b:51:69:38:3a:55:ce:0f:fb:b4:b8:
                    76:c4:f4:ba:73:bd:f0:fb:25:8f:94:95:a8:9e:78:
                    e2:37:8f:40:b3:32:12:b7:c4:a6:c9:e2:d7:1f:e4:
                    24:58:df:f5:90:f5:eb:9b:42:8f:e3:cb:63:f0:64:
                    b7:aa:d4:5f:57:ec:54:1c:d0:6b:d3:38:a7:a6:ea:
                    fa:06:81:6b:b9:8d:52:fa:2a:92:87:b6:1f:82:ad:
                    03:e5:36:44:34:71:c2:0c:24:91:3a:07:5a:f9:89:
                    81:6d:0a:8a:0c:a5:0c:00:47:79:81:14:12:b9:bb:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:37:9C:83:E3:DE:91:4D:67:5E:A3:9D:6D:4A:E9:9C:C6:71:69:1B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qjecg-PekU1nXqOdbUrpnMZxaRs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2d7::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:2d:d9:2a:fd:cb:83:e9:a5:30:d7:14:49:3c:21:6a:99:62:
         8b:ca:cf:b5:d9:51:9f:c5:40:47:14:df:d0:b6:ff:1b:46:c1:
         48:a4:d1:9d:90:a3:ab:ca:f2:97:c6:c7:aa:75:2a:c9:bd:59:
         51:4b:4a:cb:74:e0:8f:93:bc:45:15:a0:4c:8d:55:6a:96:fb:
         bb:d9:2e:ac:55:08:67:4e:6d:67:fa:8a:62:f7:29:8b:9d:cb:
         b3:26:0c:33:ab:04:5d:dc:a7:d1:3e:96:a6:ab:a6:6c:09:c8:
         1f:aa:d8:06:a0:c9:93:1f:d2:38:0a:07:be:34:f9:95:b1:b4:
         79:34:1e:5e:1b:79:23:23:67:ac:83:f6:6a:00:5c:36:7b:13:
         26:26:f1:c0:a7:a6:38:09:a7:5f:8d:2c:3a:01:18:4a:34:25:
         97:6c:0b:64:4b:1d:59:61:fe:8a:ee:96:76:aa:70:91:0a:a5:
         8b:ed:ae:3a:0f:54:c7:9b:97:61:20:e4:6e:10:90:94:a5:32:
         c0:65:c6:cb:a7:17:19:f3:c7:25:b5:b9:0f:06:b1:2c:9d:16:
         e7:34:c7:c8:ac:5a:55:71:aa:13:e9:11:3b:54:c3:7c:bb:30:
         54:09:a2:34:8a:b9:ad:73:8d:b8:23:56:32:16:4f:9d:c3:d2:
         d0:39:92:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----