Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wWQLP-EGfZWMB2LqAkDsaVFebYo.roa
File:                     wWQLP-EGfZWMB2LqAkDsaVFebYo.roa (raw, json)
Hash identifier:          LZuBodBcsDc9j0jyD5xcY0fwysD3XIirFiQ+suVdz50=
Subject key identifier:   C1:64:0B:3F:E1:06:7D:95:8C:07:62:EA:02:40:EC:69:51:5E:6D:8A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018440391083BF97B48AF6A450B8AFAA26D3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wWQLP-EGfZWMB2LqAkDsaVFebYo.roa
Signing time:             Fri 04 Nov 2022 01:19:52 +0000
ROA not before:           Fri 04 Nov 2022 01:19:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203453
IP address blocks:        2a06:a005:150d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:40:39:10:83:bf:97:b4:8a:f6:a4:50:b8:af:aa:26:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov  4 01:19:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c1640b3fe1067d958c0762ea0240ec69515e6d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:57:91:3b:98:74:e9:db:01:3d:68:3f:e3:
                    ed:2b:87:83:ee:60:2a:22:15:43:4d:e3:f5:3b:ed:
                    f1:b4:16:5c:3a:b7:93:a6:c9:b3:0c:ae:d7:de:6f:
                    6c:62:48:70:d5:f7:15:b1:23:20:1b:d8:84:fe:e9:
                    da:51:95:a6:62:96:f5:10:71:09:10:7c:7b:2b:31:
                    6e:71:2b:14:22:f8:22:fe:20:c6:49:d2:14:82:16:
                    42:a3:07:72:8e:d3:ee:57:9e:57:ec:95:51:22:86:
                    96:af:2b:c6:59:b6:43:42:4e:58:f8:a7:07:a0:5c:
                    10:33:84:2b:ea:7c:93:6b:2f:be:a3:0a:f4:56:30:
                    47:5c:8b:c8:f4:4e:ba:cc:3a:0a:f4:57:3c:46:f2:
                    6e:96:37:89:d5:ed:2b:8d:07:9b:42:b7:b0:bc:e7:
                    6f:0a:97:2d:7a:62:e7:c3:17:55:fe:12:e7:f5:a3:
                    55:a4:28:46:56:50:e7:e2:13:ec:db:51:1a:5a:10:
                    16:15:6a:de:0a:00:89:53:67:22:33:0e:00:41:1f:
                    5e:61:7f:9c:84:56:39:fe:f6:6e:6b:ec:81:29:d9:
                    2f:18:66:22:3f:4e:66:9c:7f:10:1b:f3:4d:57:b8:
                    81:e7:c9:35:81:d1:6b:41:68:64:9a:16:39:d3:14:
                    17:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:64:0B:3F:E1:06:7D:95:8C:07:62:EA:02:40:EC:69:51:5E:6D:8A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wWQLP-EGfZWMB2LqAkDsaVFebYo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:150d::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:75:55:fb:bc:24:6a:ef:4c:d4:52:8f:c0:e1:41:0b:39:ee:
         97:44:a1:6f:fd:ad:60:6a:c4:dc:26:17:fb:40:69:08:39:b5:
         51:30:6c:86:70:af:c2:76:2d:5d:db:c8:3f:80:13:6f:d4:3f:
         c3:3d:c6:df:9c:15:c4:b3:d7:69:d4:1c:9c:9f:60:b7:a7:68:
         ae:c8:b3:94:56:c9:83:05:e8:79:29:90:08:23:09:ac:c1:9e:
         b5:a7:8a:b5:d1:f3:8c:b6:f2:10:d0:f3:85:8a:bd:3e:92:94:
         52:21:a0:b3:c7:ff:e1:b6:c1:96:cd:f9:d9:0c:4e:e6:98:59:
         79:31:64:d9:d9:1f:78:7d:77:65:38:26:ac:08:ec:d3:9c:de:
         0f:58:4e:41:7c:f6:bc:bf:54:68:9c:25:76:4c:ba:3e:36:80:
         50:43:53:cb:9a:a9:f0:b0:4c:31:86:fa:23:a4:8b:a4:e8:d5:
         21:9a:3a:b8:e2:bc:a5:57:8a:d7:2d:57:02:91:e3:8f:b7:ab:
         48:e7:87:21:5d:f1:07:ee:6d:d4:95:8d:b8:a6:e2:35:5d:b0:
         90:47:dd:da:c3:da:4c:5f:c7:c1:74:3f:50:60:3c:f9:e6:a2:
         86:dd:2d:f5:83:d7:d4:3a:2e:6f:90:16:a1:57:33:91:5f:08:
         b5:b9:0e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----