Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vLfQ7Qs3zfx3sZTi6VKgaTeAvIM.roa
File:                     vLfQ7Qs3zfx3sZTi6VKgaTeAvIM.roa (raw, json)
Hash identifier:          ZBKNQwfBzSffP0iQ48j57ARWy+TyKrUhxc9le6qKQno=
Subject key identifier:   BC:B7:D0:ED:0B:37:CD:FC:77:B1:94:E2:E9:52:A0:69:37:80:BC:83
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19862E4C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vLfQ7Qs3zfx3sZTi6VKgaTeAvIM.roa
Signing time:             Sat 07 May 2022 22:07:28 +0000
ROA not before:           Sat 07 May 2022 22:07:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203857
IP address blocks:        2a06:a005:5ec::/48 maxlen: 48
                          2a06:a005:4d2::/48 maxlen: 48
                          2a06:a005:4d7::/48 maxlen: 48
                          2a06:a005:4d5::/48 maxlen: 48
                          2a06:a005:4d6::/48 maxlen: 48
                          2a06:a005:5eb::/48 maxlen: 48
                          2a06:a005:4d4::/48 maxlen: 48
                          2a06:a005:5e9::/48 maxlen: 48
                          2a06:a005:5ea::/48 maxlen: 48
                          2a06:a005:5ef::/48 maxlen: 48
                          2a06:a005:5e8::/48 maxlen: 48
                          2a06:a005:5ed::/48 maxlen: 48
                          2a06:a005:5ee::/48 maxlen: 48
                          2a06:a005:5e3::/48 maxlen: 48
                          2a06:a005:4d3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428224076 (0x19862e4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  7 22:07:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bcb7d0ed0b37cdfc77b194e2e952a0693780bc83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:8e:f8:92:c8:52:0e:84:30:1f:d3:b8:35:
                    ed:e3:1e:3b:bf:27:da:c9:17:10:59:69:87:bf:b6:
                    e3:39:6c:b4:fd:ab:c7:62:c2:f4:59:52:ee:59:4c:
                    f6:65:c8:3b:83:5c:94:39:3c:14:69:c3:cd:04:c8:
                    e7:28:b1:f0:c4:5a:15:06:7a:be:01:65:20:75:e5:
                    79:d2:81:01:be:b0:5c:db:bb:d6:ff:3b:a5:42:b1:
                    39:b7:aa:b7:19:bb:c1:84:6e:a2:d0:78:1f:66:e7:
                    d7:28:41:43:91:4e:05:84:ae:7d:bc:ce:34:27:bc:
                    35:e1:42:84:d2:07:34:ab:fb:c2:76:2f:01:22:64:
                    11:72:28:30:b4:80:98:27:16:c8:4f:44:9c:8a:2b:
                    f4:30:51:32:25:be:01:ce:2b:bb:80:6c:7f:35:38:
                    6f:7f:a2:4a:fb:4c:c3:d7:4f:a5:ac:36:c8:17:28:
                    bd:81:a4:a2:da:fe:61:b0:f8:c4:33:77:18:ac:1c:
                    e0:49:d8:cf:f1:2f:6a:4d:ff:1d:a9:1b:4c:7f:8f:
                    fe:63:64:5e:a9:60:5e:71:7f:19:c6:cc:92:ae:bf:
                    38:f6:8f:c1:53:bd:20:61:be:b4:90:36:b6:54:1c:
                    76:4a:ac:b4:8f:e2:4d:b2:0e:69:84:11:bd:dc:ae:
                    7e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B7:D0:ED:0B:37:CD:FC:77:B1:94:E2:E9:52:A0:69:37:80:BC:83
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vLfQ7Qs3zfx3sZTi6VKgaTeAvIM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4d2::-2a06:a005:4d7:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:5e3::/48
                  2a06:a005:5e8::/45

    Signature Algorithm: sha256WithRSAEncryption
         05:3f:3b:2a:e7:97:35:e3:14:a2:66:e2:eb:11:91:e0:b5:c3:
         04:b2:cc:f1:b4:4c:0f:61:5e:34:cb:0f:cf:b0:e3:4c:de:1e:
         6e:e9:a3:d5:db:f4:08:8f:a0:75:69:05:d0:f0:fb:70:f4:85:
         9a:1e:7a:ef:16:0c:32:f3:e2:70:24:88:a5:27:59:ab:1f:cb:
         d8:a9:40:43:45:c6:d4:9f:33:4a:db:c8:cb:f9:8a:dd:bb:51:
         2d:b2:0f:8c:36:6d:1f:e0:82:f6:4e:20:a8:4e:40:ef:51:f9:
         b5:02:68:d3:01:06:6c:e1:70:c1:f3:9c:77:ba:e3:73:96:48:
         c1:be:62:83:41:54:ed:98:33:dd:d8:aa:b4:10:52:31:cd:f7:
         f2:f5:76:04:fc:03:03:8e:5f:52:c0:fe:a2:fb:87:9d:09:63:
         21:35:0e:e5:42:bb:9d:49:37:bd:dd:03:57:f8:46:a1:af:e2:
         29:77:d7:7f:08:b1:46:18:dc:54:b0:bc:70:90:a5:38:39:e1:
         2f:02:49:ac:0d:c7:bf:00:4a:e8:f8:3f:c9:e8:39:f6:bd:fd:
         b0:70:69:b2:69:8f:17:0c:d6:ab:25:21:5f:41:29:e5:3b:52:
         04:f0:34:a6:5d:f4:f7:a7:9c:35:fb:42:f4:df:a9:f8:33:c2:
         8b:60:56:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----