Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vhZ4WROfz_gD8ibIupHMUDmxW9U.roa
File:                     vhZ4WROfz_gD8ibIupHMUDmxW9U.roa (raw, json)
Hash identifier:          4y9lEo3jGNFNaLe7PWn+9GBRz3GYmjj8/Wxn8pX5QYo=
Subject key identifier:   BE:16:78:59:13:9F:CF:F8:03:F2:26:C8:BA:91:CC:50:39:B1:5B:D5
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B738BDE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vhZ4WROfz_gD8ibIupHMUDmxW9U.roa
Signing time:             Sun 26 Jun 2022 19:36:42 +0000
ROA not before:           Sun 26 Jun 2022 19:36:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207445
IP address blocks:        2a06:a005:f90::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460557278 (0x1b738bde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 26 19:36:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be167859139fcff803f226c8ba91cc5039b15bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:67:63:c7:bb:b0:8d:8c:b8:da:29:e3:9d:
                    48:04:f1:c4:77:e3:02:09:63:7c:34:84:8f:30:d6:
                    16:c3:d4:28:11:3a:14:82:95:07:e5:e4:e3:5a:db:
                    e9:13:77:63:67:4b:ec:ff:86:fc:8c:5b:51:cb:78:
                    0c:68:d6:85:ea:44:d2:e4:bc:15:98:13:91:94:0b:
                    bf:98:bc:03:a3:89:17:9c:4a:cd:ea:47:f3:d7:81:
                    17:09:02:3a:46:16:a3:b5:2f:8c:f7:76:ae:cd:60:
                    0f:3c:64:3c:11:28:dc:f5:fb:a4:e4:d9:96:7a:80:
                    16:d9:d4:a9:bb:3c:cd:d1:68:8d:ce:ce:16:8a:91:
                    fc:8f:3c:95:70:a9:16:b2:68:27:fe:a7:74:6a:ca:
                    3c:ff:f8:c6:14:5d:b0:02:ee:da:c6:31:18:13:1c:
                    46:7d:39:27:07:df:6b:b6:51:8d:70:e6:05:33:9a:
                    43:32:57:39:8d:5f:f4:d9:d4:7d:54:ee:02:b1:eb:
                    5f:6f:e9:26:c9:f0:63:75:8f:12:9e:34:fe:d7:73:
                    cb:0a:46:5c:05:64:90:74:f1:4b:4a:f6:7e:01:02:
                    e9:d5:36:1f:34:6c:28:68:d8:f8:3b:c4:29:3d:ab:
                    7b:32:1b:6f:26:38:da:c5:06:6c:0b:20:37:57:62:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:16:78:59:13:9F:CF:F8:03:F2:26:C8:BA:91:CC:50:39:B1:5B:D5
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vhZ4WROfz_gD8ibIupHMUDmxW9U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:f90::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:d9:cc:7d:47:db:8b:80:02:94:11:cf:bc:46:42:fc:bf:83:
         2c:32:bf:94:20:56:bc:c0:f7:86:c6:16:fe:6a:08:39:5d:64:
         d9:81:5c:a3:d8:e1:09:7c:b9:f5:29:bb:d9:8d:3c:d1:5e:be:
         0d:9a:4d:9e:1c:e6:9c:ec:a6:ae:88:26:40:a7:ea:11:70:c7:
         33:50:65:ad:b0:01:4e:1c:8e:c9:3d:52:6b:40:b3:31:dc:54:
         2d:da:ac:7f:d4:c1:eb:53:c5:a1:59:ce:f6:79:ad:89:ce:d6:
         9f:f1:4f:9b:d1:0d:af:e4:b2:7a:c0:06:74:39:f6:34:87:13:
         5b:be:72:f5:3e:eb:ca:0c:0e:57:48:e5:91:63:80:9c:62:2f:
         28:f4:e2:03:09:34:3b:63:a4:64:de:19:c0:4d:7b:f3:da:a5:
         57:e1:3e:01:aa:96:34:c8:11:58:96:55:72:bb:c5:b2:b5:6f:
         93:0b:35:6a:9e:9e:01:16:77:81:b5:95:ae:99:a9:c2:1f:54:
         c2:80:2c:9f:94:33:c6:dd:ef:4f:39:c3:3e:1c:14:23:45:75:
         9c:09:8d:fc:70:fa:f1:9a:48:88:f8:92:72:fb:f0:43:69:bb:
         d2:79:67:47:d7:91:4e:8f:c5:bc:92:08:dd:81:b3:9c:97:93:
         c5:a3:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----