Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/u2-zQv6hNqn9s0JscehnzJ5OoRM.roa
File:                     u2-zQv6hNqn9s0JscehnzJ5OoRM.roa (raw, json)
Hash identifier:          Ch9ysn7dgro5n5U3GRuO9GlKaxG2VnfsiieaINaCNWc=
Subject key identifier:   BB:6F:B3:42:FE:A1:36:A9:FD:B3:42:6C:71:E8:67:CC:9E:4E:A1:13
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1758446F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/u2-zQv6hNqn9s0JscehnzJ5OoRM.roa
Signing time:             Mon 28 Mar 2022 05:30:19 +0000
ROA not before:           Mon 28 Mar 2022 05:30:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133555
IP address blocks:        2a06:a005:280::/44 maxlen: 48
                          2a06:a005:2a0::/44 maxlen: 48
                          2a06:a005:270::/44 maxlen: 48
                          2a06:a005:260::/44 maxlen: 48
                          2a06:a005:290::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391660655 (0x1758446f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Mar 28 05:30:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bb6fb342fea136a9fdb3426c71e867cc9e4ea113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:b8:1a:1d:66:d3:2b:3e:91:3b:3e:17:9a:
                    23:75:5f:97:5e:a4:e4:bd:63:70:78:83:1f:23:df:
                    e8:61:66:1f:4c:8c:be:b5:a8:11:17:a8:5d:59:9c:
                    41:47:bc:e2:db:38:1a:05:60:30:2c:ea:f8:48:2f:
                    39:8a:dd:35:fe:c1:c5:c4:26:1b:6f:94:5f:55:10:
                    29:45:25:cb:51:a4:13:cd:03:29:1c:40:2f:e6:76:
                    17:da:7e:89:08:27:79:8b:28:26:f8:0a:25:bf:65:
                    95:dc:7a:ab:37:7e:29:e3:09:c4:18:97:e9:92:6d:
                    08:28:a6:41:ea:a9:f7:80:fc:3b:50:88:ee:b2:a2:
                    81:6b:b6:61:db:b0:ce:8f:37:e5:a3:6f:91:4c:44:
                    7e:94:66:89:83:e3:6a:9f:02:2e:52:47:14:d6:63:
                    b6:06:b3:47:54:6f:8d:a3:09:7c:24:3e:76:d7:c5:
                    c1:00:e1:bd:9f:5f:19:a2:9a:78:0b:a1:19:86:51:
                    d2:a0:77:07:e4:a4:6a:a0:dd:d4:8f:93:d3:9e:25:
                    48:cc:a3:e9:62:85:6b:d1:47:69:ca:3c:9d:6e:1f:
                    3f:ac:2c:6a:36:8d:13:97:fa:54:07:68:37:12:81:
                    23:12:27:c3:71:e8:b8:51:cc:64:59:eb:ae:05:80:
                    80:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6F:B3:42:FE:A1:36:A9:FD:B3:42:6C:71:E8:67:CC:9E:4E:A1:13
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/u2-zQv6hNqn9s0JscehnzJ5OoRM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:260::-2a06:a005:2af:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2b:b4:b9:af:31:24:7d:2a:90:69:8c:c7:84:c3:a0:c0:ac:46:
         1d:6a:db:fc:76:b5:2a:4e:ac:b5:22:a6:13:4e:5b:eb:4b:47:
         72:1b:30:52:5d:e2:94:f9:a2:5e:4a:fe:e9:c8:b8:06:fd:c5:
         fe:0c:aa:4f:f2:6d:9c:3a:69:1e:82:29:8d:f7:23:11:c7:57:
         53:5a:62:f3:d7:ae:07:23:29:5d:bf:ed:f4:49:56:d5:56:89:
         60:cc:ee:e5:4a:11:d3:1d:12:11:94:d5:d1:10:54:25:df:50:
         8f:27:59:47:e9:f6:c2:8b:e2:2d:f9:1c:44:28:96:88:70:ab:
         aa:b1:ea:7c:f9:75:c1:76:a0:f4:02:28:d2:56:69:af:ff:7c:
         24:31:9a:aa:48:87:f4:80:40:39:d2:ca:a1:75:fc:84:96:8d:
         8b:f2:65:b8:13:a2:10:c6:ef:f7:90:7b:57:bc:52:76:23:af:
         c7:54:d3:8a:0c:8e:fe:e8:5f:8c:98:2a:58:ff:55:3b:c7:48:
         95:30:77:31:a4:d4:df:3c:9d:2c:dc:eb:57:49:26:be:c6:4c:
         a5:5a:94:56:01:5b:84:00:54:1e:4e:cd:6e:c2:b1:f1:33:26:
         fc:f6:fd:d1:8b:96:16:39:71:22:d8:52:03:b7:4b:96:2f:13:
         5a:f7:af:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----