Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ri0HuiNleNccABNIj-HvkXm20Kc.roa
File:                     ri0HuiNleNccABNIj-HvkXm20Kc.roa (raw, json)
Hash identifier:          5O0VbPqeZVDNkrfnA7piJ1hLJjqzjwWNGAiYwZzoIj8=
Subject key identifier:   AE:2D:07:BA:23:65:78:D7:1C:00:13:48:8F:E1:EF:91:79:B6:D0:A7
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181DAA56F628C3086952FF5EC2D54B63D2A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ri0HuiNleNccABNIj-HvkXm20Kc.roa
Signing time:             Thu 07 Jul 2022 21:51:23 +0000
ROA not before:           Thu 07 Jul 2022 21:51:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204268
IP address blocks:        2a06:a005:1000::/44 maxlen: 48
                          2a06:a005:a0e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:da:a5:6f:62:8c:30:86:95:2f:f5:ec:2d:54:b6:3d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  7 21:51:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ae2d07ba236578d71c0013488fe1ef9179b6d0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:0c:42:6c:bb:c7:54:d4:e4:7a:38:ec:3e:
                    2b:4f:68:96:a9:03:cf:fa:26:7f:a8:08:e7:3d:b1:
                    b7:33:27:14:38:03:2f:75:b0:6a:07:89:27:54:1d:
                    6b:66:c7:1f:19:d8:fc:f6:df:d9:a4:c8:a7:eb:ee:
                    32:7c:13:d6:c8:59:13:32:be:9a:86:92:7f:72:ed:
                    86:56:b1:bf:c0:05:92:45:f6:02:12:ea:33:c9:a9:
                    49:23:05:7c:a9:55:50:a7:02:82:c0:ff:96:fb:8e:
                    7e:ed:84:4b:47:a3:af:53:a6:d1:77:af:85:c9:fb:
                    a9:17:c9:89:fe:e8:ed:6b:86:a9:12:84:62:d7:c6:
                    56:37:6c:69:bf:42:1f:19:da:60:13:32:d6:54:65:
                    58:c8:12:74:79:6c:58:44:a0:70:0a:3b:86:e2:19:
                    75:90:02:6c:94:58:82:88:d2:22:51:eb:ca:57:db:
                    5d:78:bc:c1:78:4f:0b:bb:d8:24:de:45:9d:87:f9:
                    04:10:85:ac:43:d5:05:cf:ad:36:fc:b9:f5:19:e0:
                    42:36:e1:5c:91:51:6f:5f:53:a5:0b:bb:7b:71:95:
                    fc:2e:a5:d8:f9:06:75:69:ca:88:1f:ed:d6:e9:08:
                    44:86:ef:67:46:7d:4c:7b:c0:6e:e5:bd:70:e2:57:
                    ae:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2D:07:BA:23:65:78:D7:1C:00:13:48:8F:E1:EF:91:79:B6:D0:A7
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ri0HuiNleNccABNIj-HvkXm20Kc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a0e::/48
                  2a06:a005:1000::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:ec:be:b5:69:18:51:ca:6b:1f:aa:eb:19:2e:49:d4:f0:02:
         0b:aa:50:6b:c7:62:76:d2:b8:6a:84:dc:0a:ad:a4:b3:90:cd:
         75:b4:f2:32:2b:2f:73:31:e2:04:83:1b:d9:ea:a9:75:5f:11:
         2a:a6:e8:bc:32:ae:8d:48:8e:6e:da:c2:ff:67:38:01:9e:83:
         62:ae:dd:a0:5a:6c:f6:c7:e5:65:de:60:9d:63:fd:5d:ca:d5:
         ca:11:ab:b5:88:99:fd:ec:a1:ee:09:00:29:a2:68:37:8d:23:
         4b:2d:29:d3:91:d0:c8:3a:e0:df:61:97:fa:d8:0e:65:d3:73:
         74:99:3f:6b:df:38:7d:82:33:ea:61:c5:86:cb:b6:47:a6:6f:
         67:b2:bf:41:37:1a:c1:f5:3e:ce:76:df:8c:00:0f:7f:b2:6a:
         4e:d2:a5:07:cf:8a:18:06:30:9d:7e:5b:9e:21:19:85:37:87:
         f5:86:d6:60:41:cb:4f:4f:f6:32:e0:f1:56:c6:fd:f2:43:50:
         6b:87:8f:3b:a1:ef:84:96:c9:92:54:61:68:30:b4:15:d5:b1:
         4d:c1:6f:8f:f0:b8:2f:8d:1d:23:2f:27:fa:5f:ec:b7:81:78:
         17:b4:9e:2b:51:96:ed:d6:6b:14:7f:14:d0:73:d6:c5:15:fa:
         e3:6c:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----