Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/t5dfx18cd1eAcwV3r1h-aA2FR88.roa
File:                     t5dfx18cd1eAcwV3r1h-aA2FR88.roa (raw, json)
Hash identifier:          QcWbLLd1XdqzfYe8SjBPZdN45zKu1ffVhGcet07XTJ8=
Subject key identifier:   B7:97:5F:C7:5F:1C:77:57:80:73:05:77:AF:58:7E:68:0D:85:47:CF
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01842082296811F3F7679EC77FC935A78504
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/t5dfx18cd1eAcwV3r1h-aA2FR88.roa
Signing time:             Fri 28 Oct 2022 21:31:51 +0000
ROA not before:           Fri 28 Oct 2022 21:31:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202224
IP address blocks:        2a06:a005:150a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:20:82:29:68:11:f3:f7:67:9e:c7:7f:c9:35:a7:85:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 28 21:31:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b7975fc75f1c775780730577af587e680d8547cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bf:2a:df:a1:99:a3:63:5d:5e:19:bb:ea:96:
                    1e:e0:0c:4a:fc:99:76:e5:91:1e:01:6d:6f:ed:e1:
                    c9:a2:98:ff:30:f6:e6:62:db:ee:62:9a:a1:0b:24:
                    29:cd:52:dc:0f:3e:6d:35:ed:a4:c4:7b:f1:f4:5d:
                    e7:12:23:c0:12:06:0e:9e:e2:53:80:70:9c:68:77:
                    ff:0b:38:5f:e8:40:9e:c5:7f:f8:c4:f0:67:49:6d:
                    b6:9f:7f:e5:1d:83:fb:d1:60:65:29:dc:d1:d3:ec:
                    3e:1e:aa:b5:35:04:02:94:80:ac:70:15:48:ce:6f:
                    7a:2f:67:60:ce:1b:5d:9e:6a:d0:3b:0f:70:2e:44:
                    1e:00:a9:11:38:3e:51:52:92:c5:44:01:b1:56:4b:
                    49:22:cb:0d:2f:32:88:0c:07:9f:fe:e0:ac:c5:1a:
                    6d:a3:9a:1d:6a:8a:77:07:06:40:e3:69:42:47:7c:
                    eb:38:a7:5a:36:5d:bd:82:b2:ea:cb:41:03:b0:0e:
                    6c:84:4c:f0:f6:c9:0b:20:67:7b:d3:64:7f:7b:66:
                    6f:c2:d3:bc:3c:4d:35:bd:62:34:83:9e:3b:07:67:
                    5f:79:5b:29:35:ca:fb:f6:6a:53:a0:cc:72:c9:eb:
                    af:16:d9:37:0a:a4:d5:76:ad:dc:c6:1d:94:e5:6c:
                    96:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:97:5F:C7:5F:1C:77:57:80:73:05:77:AF:58:7E:68:0D:85:47:CF
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/t5dfx18cd1eAcwV3r1h-aA2FR88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:150a::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:40:2f:fe:ed:22:ed:7b:b5:fb:74:55:0d:36:77:bd:b4:4f:
         66:8d:a6:ff:96:93:25:7d:ed:93:1d:de:bb:79:cf:8d:9c:76:
         b4:7e:a0:13:c1:25:c2:25:02:5a:1b:69:b8:7e:41:75:54:c3:
         f6:20:a4:bd:f8:2d:3d:58:87:74:62:02:1a:7f:c0:21:a6:ea:
         aa:4b:0b:19:aa:48:a7:d7:d0:c1:8f:ac:a7:10:85:24:1d:6a:
         2d:84:cb:98:d3:60:e3:38:86:9d:66:87:97:23:e2:b1:f3:ab:
         a3:2e:5f:a0:45:a7:a2:ba:86:de:67:22:8c:b6:d3:d6:72:43:
         a5:12:fb:ba:9e:71:47:83:d7:25:bc:2a:a1:f8:8e:a0:83:01:
         31:f7:73:7f:4d:56:35:a9:56:2a:b5:7a:03:02:46:a2:34:c6:
         1d:f1:e7:a0:9d:00:6e:1e:03:4b:a5:fc:3d:13:0c:ce:2c:d8:
         59:41:fd:e9:e0:af:c4:4a:65:1f:04:43:99:78:84:6a:2b:9c:
         4d:f3:30:fc:4b:ce:d3:74:ab:d8:34:18:52:73:a3:0f:77:84:
         70:89:3a:1d:54:63:d4:e1:d0:ab:d1:3a:e3:d4:8b:ff:d6:c3:
         04:ef:c6:68:e8:ca:f5:ee:fb:86:15:85:2d:78:f3:d4:18:34:
         80:84:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----