Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/v0mRNZHOL_cx8c5oQe2NrNwUlVA.roa
File:                     v0mRNZHOL_cx8c5oQe2NrNwUlVA.roa (raw, json)
Hash identifier:          NqKW9rnnvEjxFfm2QE7ioxPfRBTffROO0D1e+HyvEDo=
Subject key identifier:   BF:49:91:35:91:CE:2F:F7:31:F1:CE:68:41:ED:8D:AC:DC:14:95:50
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183FBC14ECE6D72A2D0C2FCE51567F1CB4A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/v0mRNZHOL_cx8c5oQe2NrNwUlVA.roa
Signing time:             Fri 21 Oct 2022 18:14:53 +0000
ROA not before:           Fri 21 Oct 2022 18:14:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210537
IP address blocks:        2a06:a005:20c0::/44 maxlen: 48
                          2a06:a005:d2d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:fb:c1:4e:ce:6d:72:a2:d0:c2:fc:e5:15:67:f1:cb:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 21 18:14:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bf49913591ce2ff731f1ce6841ed8dacdc149550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:36:d0:b4:10:31:ef:e2:4c:0d:04:6b:97:c3:
                    80:7a:b4:4a:ca:2c:68:63:6c:c4:c0:6e:33:50:ee:
                    11:f3:d0:84:7b:c6:c8:3b:99:2b:c8:34:4a:0e:95:
                    09:04:6f:47:5c:d3:ea:d3:44:26:17:45:bd:9b:76:
                    01:51:6e:98:b2:a8:2e:0d:ed:e0:4b:7b:d7:cb:80:
                    80:fc:6c:ad:ef:7b:c8:e4:6f:d3:5f:77:55:9e:9d:
                    e1:e0:fc:f2:23:b6:28:85:e5:85:e6:38:93:a5:a0:
                    f0:50:93:1b:14:40:44:e9:a5:46:d6:37:52:76:68:
                    69:6a:fc:3d:b3:22:68:2d:70:9a:07:87:64:c8:ad:
                    9e:73:79:33:96:9e:28:97:7d:c7:61:e4:5a:a4:a8:
                    19:1b:2d:6e:c0:6a:6d:0f:36:b2:07:8c:50:32:57:
                    c9:7e:7a:5d:f9:1b:b7:de:5c:6c:eb:e1:7a:43:9b:
                    8f:2b:e0:ad:08:8a:09:9c:d8:db:ff:cd:00:78:b2:
                    fd:ad:c6:a0:06:f7:60:50:04:17:99:cb:3e:96:03:
                    f5:5c:5d:07:a4:3c:8d:84:49:ae:50:8d:41:fd:e0:
                    75:55:1f:79:a0:c7:26:57:c3:18:08:48:05:67:fb:
                    54:98:98:dd:57:98:77:0d:67:29:7f:e8:d5:d5:df:
                    58:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:49:91:35:91:CE:2F:F7:31:F1:CE:68:41:ED:8D:AC:DC:14:95:50
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/v0mRNZHOL_cx8c5oQe2NrNwUlVA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2d::/48
                  2a06:a005:20c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:e1:52:6c:59:0c:f1:6c:bd:12:c1:1d:a6:31:cc:9f:90:2f:
         23:90:f2:e4:53:cb:5a:a8:7a:e1:22:34:0e:48:ad:83:91:1e:
         b5:29:27:bc:1f:8e:ea:cd:a7:9c:ab:7a:48:f7:c0:75:47:44:
         f5:aa:80:ec:ba:a0:86:75:37:ad:35:ba:e0:83:3d:cf:e9:31:
         5f:16:53:f7:c1:2f:c6:a0:ac:8d:83:30:bf:fe:7c:49:7b:28:
         f2:bb:95:4f:2e:e1:53:8a:ba:6f:ac:da:ea:86:c1:c4:54:6d:
         14:33:72:7b:41:03:72:0d:e0:18:9a:a7:5b:c3:8f:8c:fb:44:
         32:6f:67:a0:5f:cb:1c:df:d0:e8:31:e4:36:19:00:09:c5:4d:
         9a:9b:ce:9d:1f:0f:82:f4:2d:80:5c:3d:a6:ad:fc:bf:56:a4:
         18:cb:76:e0:3a:74:36:01:d1:96:05:03:08:51:bf:7d:51:50:
         f1:71:51:e4:90:db:2f:24:5a:30:03:b3:a7:3a:d1:ff:0b:ae:
         8c:a6:dd:6c:9b:2b:33:b7:89:b1:c5:ec:33:19:47:02:44:4d:
         82:4f:a9:20:51:78:55:74:86:f3:c1:b4:72:e2:27:55:b9:62:
         76:e6:36:ec:5c:51:c3:8b:44:6a:82:95:f8:9a:a2:8d:cd:16:
         56:77:dd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----