Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tCqZAF_jWhm86afz-Sk19Yn0sHk.roa
File:                     tCqZAF_jWhm86afz-Sk19Yn0sHk.roa (raw, json)
Hash identifier:          riqgbZqhguCVf/QTM7Gg5F+sOUzzyuhgWt5D3cglp0k=
Subject key identifier:   B4:2A:99:00:5F:E3:5A:19:BC:E9:A7:F3:F9:29:35:F5:89:F4:B0:79
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A0C4FE4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tCqZAF_jWhm86afz-Sk19Yn0sHk.roa
Signing time:             Tue 24 May 2022 17:42:13 +0000
ROA not before:           Tue 24 May 2022 17:42:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209861
IP address blocks:        2a06:a005:2d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437014500 (0x1a0c4fe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 24 17:42:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b42a99005fe35a19bce9a7f3f92935f589f4b079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:ce:03:7a:67:69:7e:90:38:ab:ec:65:cc:
                    a1:76:90:08:e5:58:1d:01:52:f9:9f:2c:63:44:39:
                    32:bf:2c:f3:bd:1f:32:e3:8d:90:0b:b8:d9:02:17:
                    8a:b8:ed:af:9b:52:31:76:a6:d7:8d:de:22:5c:35:
                    94:af:17:c2:75:bd:03:4a:b9:80:dc:e6:c4:39:b1:
                    2e:96:1c:9d:83:37:7a:3d:6a:b9:d2:54:ed:ed:a2:
                    29:53:59:ba:6e:9a:95:8d:3e:74:a5:0e:c4:ce:0c:
                    04:29:64:18:99:59:26:a9:af:c5:b4:1c:16:a6:4a:
                    cb:58:93:53:a4:bb:2d:e6:f4:9f:53:6b:39:3e:f7:
                    2b:b5:c7:e9:fa:b7:15:72:18:4a:16:f5:7c:2e:d6:
                    5a:aa:60:eb:39:60:eb:7b:77:78:c5:6f:29:ba:ae:
                    db:d6:24:af:61:c7:c8:3b:16:da:cf:91:1c:f2:69:
                    21:e3:67:21:24:db:ad:96:22:a6:1b:79:cd:65:e0:
                    e4:36:b0:15:01:47:e4:37:d4:b3:36:3c:f0:a3:66:
                    1d:4d:71:82:4f:bf:ce:a9:fd:3f:d0:b6:6a:4a:f0:
                    81:9c:a5:f1:b7:35:16:57:a7:e1:3c:b6:44:10:a5:
                    2e:00:2c:b0:c5:1d:f9:bb:58:9b:6a:45:55:71:54:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2A:99:00:5F:E3:5A:19:BC:E9:A7:F3:F9:29:35:F5:89:F4:B0:79
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tCqZAF_jWhm86afz-Sk19Yn0sHk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6a:5e:11:3b:0b:cf:23:ed:e1:c7:5d:9c:c1:1a:b1:f2:de:33:
         93:62:dd:98:50:5e:9b:97:20:9b:0f:cf:22:be:ae:bf:44:f7:
         bd:a5:40:bd:0e:16:9f:7c:3c:78:54:5a:14:34:05:10:dc:3e:
         98:01:12:49:d2:2b:3c:f6:57:32:2a:5c:9f:e4:43:b9:ae:34:
         42:21:e0:2e:8a:9f:8b:34:bc:6a:5b:0d:ba:98:17:fe:b7:f6:
         9a:11:c7:94:03:4c:6b:17:9f:13:1d:5e:bb:6c:d7:c1:0c:76:
         ee:84:9a:f9:f6:11:25:6a:ed:83:da:12:4e:d8:37:ba:72:d0:
         8a:83:96:1e:d8:7b:02:2e:11:c3:e3:46:52:93:8e:66:f2:ac:
         78:ae:f0:94:0a:4f:9a:3c:c1:ce:f6:ad:b5:78:42:f3:82:22:
         9a:52:d0:b7:78:e0:ea:f0:3b:66:3b:4e:a1:2f:b7:01:ab:d8:
         86:c6:7f:54:1c:a3:7f:df:69:15:66:94:9e:93:75:bb:2e:f0:
         7c:ce:c2:de:f6:b3:eb:00:64:d7:f4:d7:50:93:ae:77:e6:a9:
         38:f2:81:dc:24:0b:e2:e9:d9:53:d9:71:ef:a1:a9:72:63:c0:
         5e:48:9f:14:e5:70:9e:de:bf:22:72:75:26:25:61:99:83:26:
         6e:31:e5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----