Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/spm0fPrU7EoAkImhA5NFgolQf6A.roa
File:                     spm0fPrU7EoAkImhA5NFgolQf6A.roa (raw, json)
Hash identifier:          IM65xG0xVPaCqD8MAwWM9NXMOG3mewbMUSUzD2egRxA=
Subject key identifier:   B2:99:B4:7C:FA:D4:EC:4A:00:90:89:A1:03:93:45:82:89:50:7F:A0
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       17C6C0BD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/spm0fPrU7EoAkImhA5NFgolQf6A.roa
Signing time:             Wed 06 Apr 2022 16:30:07 +0000
ROA not before:           Wed 06 Apr 2022 16:30:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44570
IP address blocks:        2a06:a004::/32 maxlen: 48
                          2a06:1280:1000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398901437 (0x17c6c0bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr  6 16:30:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b299b47cfad4ec4a009089a10393458289507fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ad:c0:50:6e:a5:c6:50:dc:b4:e8:8b:5b:44:
                    87:19:5a:85:6d:ed:f6:35:77:df:40:fe:c2:90:3f:
                    c8:ec:76:74:c1:26:35:e7:89:2a:16:82:2b:78:ab:
                    d3:26:ec:2a:82:87:4e:12:c4:aa:25:73:aa:32:39:
                    02:fc:b1:26:48:7a:0d:e6:6f:53:15:05:34:d7:b3:
                    39:70:e7:87:0d:50:f6:bc:ce:13:1f:96:d0:01:c7:
                    ae:7e:01:d9:09:04:45:f2:4a:62:f4:bb:c4:13:5b:
                    15:59:a3:be:62:86:72:f1:11:9d:75:f5:70:ab:ec:
                    89:c3:ba:7e:48:0b:10:59:9c:5c:42:08:7d:62:f3:
                    74:46:d2:41:e3:2e:b7:47:a5:c7:e8:8f:00:38:4e:
                    6d:b5:1c:52:f7:b4:e1:39:7d:9a:83:8f:c8:3d:32:
                    36:de:fd:07:cf:05:99:20:f5:42:61:c0:b5:6b:00:
                    57:9c:37:46:8d:db:50:d7:9b:be:74:0e:0e:a1:39:
                    36:7f:4d:f4:5e:94:e4:39:86:3b:4d:8a:d8:31:ab:
                    0c:23:32:ce:2d:a8:aa:d3:18:9c:49:7d:6d:50:b9:
                    e6:ba:e2:3c:58:35:e3:3f:48:82:1b:2f:5c:e0:0d:
                    c8:f5:7c:5f:2d:af:a3:a2:7a:e0:11:5f:80:c8:81:
                    7a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:99:B4:7C:FA:D4:EC:4A:00:90:89:A1:03:93:45:82:89:50:7F:A0
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/spm0fPrU7EoAkImhA5NFgolQf6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1280:1000::/36
                  2a06:a004::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:44:b5:94:2e:9b:11:8b:b8:40:d9:4a:7b:49:c7:8c:18:f4:
         56:0e:f7:07:11:63:aa:62:b9:0e:54:85:cf:ce:6f:cd:93:f9:
         e6:c3:dd:28:75:3d:46:aa:42:50:df:1c:b0:07:78:24:59:fb:
         a5:9d:7d:65:9d:04:d1:b0:90:07:93:55:7b:4a:3c:fa:79:e0:
         90:b1:b9:27:6f:84:e9:67:8e:60:ba:73:d1:d9:25:40:02:66:
         38:0b:e0:1f:1f:86:6e:1f:0c:ca:38:1a:56:14:5b:04:15:1c:
         11:99:8f:0c:ef:ab:3b:ae:bc:f2:1e:9c:28:7f:56:a4:78:96:
         b4:f1:0a:24:cf:49:bc:7b:0e:c0:7f:9f:5f:98:bd:e4:7a:e7:
         97:25:44:8d:17:7f:59:c4:04:1f:34:67:6c:2c:e4:8a:12:2b:
         e1:cf:ab:f4:78:cf:c4:d3:82:d6:f2:ec:c0:e9:8d:ce:b4:b5:
         9f:f1:ca:0a:e8:ad:ca:74:3f:27:5d:2c:37:92:53:67:af:d6:
         82:d5:a2:6c:ce:50:fa:0c:bf:39:f9:97:21:70:00:76:07:24:
         c3:41:68:c2:9e:35:18:97:d8:75:3e:01:dd:3b:43:49:31:4d:
         4e:8c:af:37:ee:f8:e8:1e:7a:66:f3:1c:7e:cc:1e:b9:88:0a:
         c4:d5:6e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----