Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/v27cfwFXVrl5tU5vLQBkJbDuA5U.roa
File:                     v27cfwFXVrl5tU5vLQBkJbDuA5U.roa (raw, json)
Hash identifier:          /cdjuIUdzH9b29nTVugpr6Fhc8o6VqGTwQxv075kGiM=
Subject key identifier:   BF:6E:DC:7F:01:57:56:B9:79:B5:4E:6F:2D:00:64:25:B0:EE:03:95
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18A11815
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/v27cfwFXVrl5tU5vLQBkJbDuA5U.roa
Signing time:             Sat 23 Apr 2022 20:19:32 +0000
ROA not before:           Sat 23 Apr 2022 20:19:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398325
IP address blocks:        2a06:a005:5ba::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413210645 (0x18a11815)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 23 20:19:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bf6edc7f015756b979b54e6f2d006425b0ee0395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1c:27:fc:1a:8b:fd:58:a1:70:83:79:f1:f8:
                    c8:c4:13:0a:8f:32:d4:93:49:77:d7:71:ab:43:27:
                    e1:c8:86:9c:3a:23:97:da:64:98:38:04:8c:69:62:
                    04:bd:e5:cc:a8:86:91:90:f9:df:91:06:c1:db:a2:
                    2a:2c:88:c7:64:11:ab:61:71:4d:76:ea:03:8e:08:
                    92:29:07:29:a1:87:61:35:97:11:ac:5d:80:38:6b:
                    b4:f3:cd:a0:ed:a2:dc:50:ad:f4:34:46:f6:64:17:
                    93:ea:24:f4:71:5e:0a:00:b2:38:48:44:e5:ef:21:
                    0c:1c:3b:84:bc:41:96:54:7b:c0:9d:81:df:63:8b:
                    2b:2f:72:51:fd:47:ff:4b:ec:2b:17:1e:2a:c5:f8:
                    47:ba:cc:79:63:29:f1:39:cb:cb:54:3e:2a:13:09:
                    31:0b:d4:7b:b9:e2:e0:a2:35:b4:a1:3f:20:00:74:
                    9e:7b:b2:54:80:e6:60:ea:82:20:62:1f:0d:44:59:
                    10:f2:2b:55:d4:48:a5:a5:30:cd:ee:fa:8f:81:05:
                    54:b7:36:e5:e6:0a:16:8a:14:b8:83:52:4e:6c:7c:
                    d9:24:24:25:2d:95:d5:44:ef:21:50:3c:0c:3f:fa:
                    e1:65:20:60:7c:e1:b9:ff:95:fd:cd:47:59:5a:a9:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6E:DC:7F:01:57:56:B9:79:B5:4E:6F:2D:00:64:25:B0:EE:03:95
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/v27cfwFXVrl5tU5vLQBkJbDuA5U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5ba::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:b9:90:58:fb:91:11:af:61:b0:c4:83:5f:28:09:18:fc:17:
         20:1d:59:d4:18:99:4c:e5:a6:14:a1:15:f8:56:bf:99:43:c2:
         58:b7:7b:14:2a:8e:7e:3c:7f:cd:19:b8:ec:38:57:45:a9:63:
         c5:06:c4:b9:fe:bd:a2:4a:35:86:16:8d:c5:67:7b:18:35:63:
         8f:a8:af:58:c4:9b:ba:b7:25:98:d1:ea:3d:05:9b:a3:01:66:
         62:6f:1f:84:df:ad:eb:ce:9f:d8:cf:e9:a7:a3:75:fa:29:19:
         42:92:a1:87:f1:53:a0:31:70:05:4e:56:0b:27:09:d0:75:ba:
         7c:c3:4c:a2:a1:3e:6d:1e:d0:26:3d:d3:fc:94:90:6c:dd:cb:
         56:53:03:75:92:dd:b7:6f:80:4f:32:f3:b7:42:0b:0a:70:4c:
         43:80:fc:a6:a2:f0:7c:fd:a3:fe:ed:07:3e:ae:a9:5f:b3:38:
         0b:dd:79:b5:25:f5:a3:ed:7d:a3:aa:3d:36:f7:ec:90:73:d1:
         ee:a2:40:45:75:e3:3c:f3:10:0a:13:3e:a0:4e:01:80:f7:08:
         1d:44:58:82:ac:06:d7:46:b7:db:8c:f9:42:ee:9f:12:ed:07:
         13:26:ff:41:5a:b3:24:54:6d:c7:7d:2d:a7:e2:48:6a:f0:68:
         1a:b7:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----