Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vyt1kcHVQfFKP_oNAmcfi39oRSc.roa
File:                     vyt1kcHVQfFKP_oNAmcfi39oRSc.roa (raw, json)
Hash identifier:          eP4+WDZFqPF/znnf4ivk0hp7heOtnFSMJzhibff+8F0=
Subject key identifier:   BF:2B:75:91:C1:D5:41:F1:4A:3F:FA:0D:02:67:1F:8B:7F:68:45:27
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15C28C22
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vyt1kcHVQfFKP_oNAmcfi39oRSc.roa
Signing time:             Sat 01 Jan 2022 05:59:10 +0000
ROA not before:           Sat 01 Jan 2022 05:59:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210842
IP address blocks:        2a06:a000:200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365071394 (0x15c28c22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:59:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bf2b7591c1d541f14a3ffa0d02671f8b7f684527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:e7:0d:cd:5b:47:a8:34:10:1b:c4:60:ef:
                    9c:4f:2c:c3:b7:e9:59:79:39:0c:95:3c:31:b8:2b:
                    6a:c4:de:4a:67:79:ba:43:3e:85:80:e7:0b:2a:7c:
                    02:13:dd:31:1e:b8:f2:3f:c7:f7:38:ab:a7:34:fe:
                    e3:21:18:38:12:f9:95:6d:8f:84:d0:54:87:24:d9:
                    67:fb:0c:91:a0:be:7f:77:bf:e1:8e:1e:34:37:88:
                    be:13:ba:c1:06:9a:00:f8:30:66:19:45:6b:1a:f5:
                    e2:46:a2:69:f9:70:28:16:3e:a8:eb:07:89:39:4a:
                    d7:c9:50:22:79:8f:7f:cc:65:ea:8a:1c:c5:9c:18:
                    ee:68:91:a1:e4:ce:c6:21:0e:79:b5:56:bb:3c:d1:
                    65:06:e2:a2:30:58:9f:15:a2:bf:28:cd:7c:94:bd:
                    cf:6b:e6:ef:34:8c:cf:b1:2e:e3:71:b5:25:4e:ca:
                    d4:3c:f4:38:72:30:b5:0f:e3:fc:8b:52:cc:f2:de:
                    35:af:9f:4f:d6:d0:71:74:32:af:14:a2:93:11:96:
                    a1:fb:48:aa:36:e4:71:9d:d9:f6:f7:aa:4f:21:52:
                    d3:ba:f5:ad:ae:68:31:ec:9d:62:23:70:d5:50:91:
                    6c:5f:7c:0d:3e:cf:e5:f0:09:aa:b8:6d:a4:be:09:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2B:75:91:C1:D5:41:F1:4A:3F:FA:0D:02:67:1F:8B:7F:68:45:27
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/vyt1kcHVQfFKP_oNAmcfi39oRSc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a000:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:48:56:36:18:39:8c:37:4d:90:d8:1a:93:0e:ee:f6:8f:c6:
         59:3a:83:a4:7b:d0:c1:b0:36:a5:e4:61:7e:1d:da:56:8a:99:
         07:b7:60:18:be:f8:d5:5a:db:68:68:7d:04:de:13:c3:04:86:
         21:77:b4:6c:46:61:03:a5:fc:7e:c8:c2:6b:81:8d:a0:1d:b2:
         3e:d5:03:a8:c6:90:32:46:6c:7f:86:8d:f5:ff:3c:4a:98:94:
         12:17:1f:ae:8d:4b:4e:b1:e3:66:1d:50:bb:42:ee:c8:34:1c:
         78:fb:8d:65:62:06:61:20:8b:af:48:8c:e6:18:d8:83:3d:ae:
         69:9e:ab:5d:2f:86:48:9b:14:b0:de:fb:6b:cd:37:5c:c4:c0:
         88:db:6f:0a:91:0d:fc:1a:42:82:a7:e3:8f:01:96:00:52:34:
         da:1a:d5:63:85:c8:4c:c9:00:f2:64:54:da:2f:0e:3c:77:93:
         a5:10:2b:70:d5:d2:10:55:a9:af:e1:9d:98:41:ce:f3:39:11:
         70:c2:a4:cd:79:c1:f7:4d:e4:f1:64:5f:2c:96:83:a7:16:43:
         d3:ac:0c:45:c1:4b:03:7a:da:b1:17:08:44:68:db:3c:fd:6f:
         d7:2a:3f:40:09:d1:c1:26:86:b6:42:39:0c:06:c7:42:18:82:
         a3:5f:1f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----