Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rLumcKI5wpLI_rFJVfPRd3yFQwk.roa
File:                     rLumcKI5wpLI_rFJVfPRd3yFQwk.roa (raw, json)
Hash identifier:          b8hTVuUVqu2n34ps+LykgTuAx5ULFVDIftCgC+ql6Bo=
Subject key identifier:   AC:BB:A6:70:A2:39:C2:92:C8:FE:B1:49:55:F3:D1:77:7C:85:43:09
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15B921B0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rLumcKI5wpLI_rFJVfPRd3yFQwk.roa
Signing time:             Sat 01 Jan 2022 05:59:05 +0000
ROA not before:           Sat 01 Jan 2022 05:59:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142554
IP address blocks:        2a06:a001:a0a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364454320 (0x15b921b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:59:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=acbba670a239c292c8feb14955f3d1777c854309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:a4:75:27:eb:16:de:75:ec:63:e4:44:65:
                    70:73:b1:9b:b7:72:25:fe:39:c2:51:e1:32:f0:df:
                    7f:bb:94:07:bc:46:d4:6d:fb:5e:b4:f1:35:f8:3f:
                    11:e1:c6:b4:ef:35:f3:97:38:17:bf:e7:cd:e1:3f:
                    5b:3c:8c:a0:bf:7d:8e:e0:5a:b1:fa:20:ab:1c:dd:
                    e4:76:8c:10:1f:16:cc:f2:ac:0d:2e:04:11:10:97:
                    cd:09:0e:da:f6:97:0c:a3:b6:6e:d2:1a:83:24:d3:
                    cf:b0:5d:91:8c:ed:20:d8:91:5c:09:60:fd:41:ed:
                    f5:17:a1:99:5f:2b:a3:01:1d:50:05:c7:70:da:1a:
                    82:bc:c6:ad:b3:32:c6:a4:45:2e:28:47:c4:d3:25:
                    81:49:23:bb:d4:c4:66:b5:2c:c2:1a:8f:78:b9:6e:
                    25:59:6a:fb:1a:e2:70:1c:c2:9e:5b:82:c6:bb:4e:
                    20:32:6d:55:45:01:88:10:9a:81:6e:21:2b:1f:07:
                    8a:f3:f5:59:7b:ef:57:e8:76:d0:72:cf:60:87:8e:
                    58:75:2d:81:83:ed:d8:65:79:45:d3:bc:06:0d:44:
                    ba:e9:55:be:68:8c:b6:71:9d:0b:e6:e9:69:f1:a0:
                    41:d5:c1:db:7b:c5:2b:cf:79:91:55:e9:a9:4c:7e:
                    ab:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BB:A6:70:A2:39:C2:92:C8:FE:B1:49:55:F3:D1:77:7C:85:43:09
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/rLumcKI5wpLI_rFJVfPRd3yFQwk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a0a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3c:41:c4:c3:4b:5f:25:32:4f:2a:fe:a8:a2:84:9c:a5:a2:63:
         4b:db:db:3b:e7:3a:b2:11:ac:78:3c:bd:02:11:67:08:64:1f:
         13:d1:5c:18:51:db:c3:4b:bf:82:d2:a0:12:c7:8e:b4:3b:34:
         cd:ca:11:32:11:13:1a:f1:f0:c8:9a:f4:1e:33:5f:0c:1e:7b:
         aa:b2:29:9e:8e:68:7a:31:ad:35:f4:d1:e4:97:c0:39:4f:d5:
         db:f4:0c:a9:ac:67:5e:11:e3:f8:4f:97:75:b0:02:bc:2f:d2:
         20:f7:9d:c5:d7:51:ac:f1:91:a5:ed:27:b7:ee:90:35:37:46:
         39:bb:61:f2:27:71:60:a0:72:56:97:56:29:8f:d8:ba:0f:72:
         de:4f:da:58:16:24:29:62:95:e2:3f:ac:c2:66:18:cc:cd:89:
         46:b4:57:b4:68:72:64:b3:0e:0b:6d:ea:41:2f:54:c3:18:5c:
         e1:5d:0f:8d:a1:a6:93:c8:78:ed:7e:cf:cd:cc:8c:19:29:cb:
         d6:76:2d:c3:f8:6d:3e:0f:bb:21:97:ba:3f:bd:81:f2:59:4a:
         75:35:d9:56:28:6d:8c:58:fd:79:fb:48:14:2c:1f:ac:44:34:
         4a:57:6c:9f:2c:46:57:12:7a:7e:e4:fe:f2:7d:f9:b3:8f:dc:
         0b:6a:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----