Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/spTYspm05BEjScHMyM9rOLHicS8.roa
File:                     spTYspm05BEjScHMyM9rOLHicS8.roa (raw, json)
Hash identifier:          fc7cjqUdm1LbhP6UVz//cNyym4qikA+FkYENX+NmVsc=
Subject key identifier:   B2:94:D8:B2:99:B4:E4:11:23:49:C1:CC:C8:CF:6B:38:B1:E2:71:2F
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184906EE60735F8539B88F264EC5DF34D6A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/spTYspm05BEjScHMyM9rOLHicS8.roa
Signing time:             Sat 19 Nov 2022 15:08:17 +0000
ROA not before:           Sat 19 Nov 2022 15:08:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60391
IP address blocks:        2a06:a005:da0::/44 maxlen: 48
                          2a06:a005:2300::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:90:6e:e6:07:35:f8:53:9b:88:f2:64:ec:5d:f3:4d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 19 15:08:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b294d8b299b4e4112349c1ccc8cf6b38b1e2712f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:b6:f1:ee:ea:f1:bb:33:cf:5d:e4:1e:10:
                    a5:80:2d:c3:74:bf:90:70:db:3b:e3:f0:b8:77:bb:
                    a8:04:fe:d2:41:b1:78:b1:96:56:99:56:66:ae:b4:
                    5f:61:41:97:44:dc:9e:b3:35:a8:38:37:11:2f:87:
                    d2:ae:a0:24:8e:64:74:5e:be:23:64:1d:fc:17:cd:
                    62:55:26:63:a2:6c:97:b0:1a:a7:fd:cb:cc:b4:5f:
                    1d:d8:2f:37:cd:5a:fb:12:3d:9e:21:b3:64:92:72:
                    16:e6:06:fc:6a:99:31:ef:6f:e9:87:bc:f3:f5:95:
                    8f:ec:4c:ba:6a:30:86:95:1a:1a:96:43:b4:10:84:
                    b6:24:85:28:c9:23:50:b3:2b:2b:61:50:c6:47:7c:
                    35:0f:1a:4a:2b:e0:72:32:15:97:f3:c9:ee:0b:c0:
                    68:ec:20:fd:14:67:b4:67:38:44:51:22:9b:3c:64:
                    16:ca:ee:e6:fc:c3:05:3a:bd:4c:fa:62:02:07:c1:
                    c4:d2:fa:af:fb:56:77:c5:b0:7e:db:72:2a:c0:e7:
                    03:2b:74:ff:fc:05:34:ce:a1:94:ca:92:c2:e8:46:
                    27:0a:00:f5:26:ce:c4:4a:ff:28:39:f7:30:b5:aa:
                    5e:37:77:d2:b5:11:2f:bf:ed:01:48:21:e5:9e:b0:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:94:D8:B2:99:B4:E4:11:23:49:C1:CC:C8:CF:6B:38:B1:E2:71:2F
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/spTYspm05BEjScHMyM9rOLHicS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:da0::/44
                  2a06:a005:2300::/44

    Signature Algorithm: sha256WithRSAEncryption
         04:66:62:33:13:e6:18:fc:bd:15:09:d8:82:99:51:74:e2:ab:
         2d:02:58:71:d6:19:d4:78:b4:f0:d5:f2:40:f7:de:3a:9c:4c:
         90:6e:85:de:f4:e0:c3:2b:0f:d1:6c:f7:c8:af:3b:31:8e:5f:
         42:d9:60:c4:3c:71:12:01:11:41:a0:1d:f5:68:0a:28:13:03:
         93:ef:0b:0e:ef:5e:9d:3c:97:ca:c0:0f:dd:40:7c:b8:7e:76:
         37:0a:cb:49:6d:88:d9:75:5a:19:66:d5:94:29:e0:00:8c:ca:
         bd:b2:48:c7:d6:61:d3:66:94:6a:f1:5b:9f:37:04:fb:9d:3b:
         37:20:ce:d3:84:dd:02:e1:70:8d:ef:f3:9a:fb:47:09:64:b1:
         10:a8:e4:2d:42:19:3c:30:c0:f5:ac:ce:d8:bd:07:21:f8:58:
         ef:41:c9:3f:a1:72:4b:29:72:06:1b:db:3e:76:54:d4:01:43:
         4b:10:64:19:5d:60:ed:27:cd:58:7f:50:b1:b4:83:c3:70:02:
         dd:16:20:51:51:90:a1:9d:cf:c4:6e:ff:ba:e8:78:aa:54:94:
         98:09:ac:a1:4f:07:d4:d2:f4:e1:11:63:5d:cf:be:37:e8:76:
         43:1d:24:15:23:b6:d6:98:2b:87:f9:35:a3:a8:2c:fc:0f:74:
         ae:ad:22:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----