Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wnL4arjoNXJ6dsLDqEoW1jbOTGQ.roa
File:                     wnL4arjoNXJ6dsLDqEoW1jbOTGQ.roa (raw, json)
Hash identifier:          xKnKghW67SqM8p/NZDBKmsey0qhSMvtSDoJipRWDhv0=
Subject key identifier:   C2:72:F8:6A:B8:E8:35:72:7A:76:C2:C3:A8:4A:16:D6:36:CE:4C:64
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01832EDF8822EF9890D0B7A0DB257E07C419
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wnL4arjoNXJ6dsLDqEoW1jbOTGQ.roa
Signing time:             Sun 11 Sep 2022 23:25:44 +0000
ROA not before:           Sun 11 Sep 2022 23:25:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44570
IP address blocks:        2a06:a004::/32 maxlen: 48
                          2a06:a000::/32 maxlen: 48
                          2a06:1280:1000::/36 maxlen: 48
                          2a06:a005::/32 maxlen: 48
                          2a06:a005:a::/47 maxlen: 48
                          2a06:a005:5::/48 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a06:a005:6::/48 maxlen: 48
                          2a06:a005:5ab::/48 maxlen: 48
                          2a06:a005:4::/48 maxlen: 48
                          2a06:a003::/32 maxlen: 48
                          2a06:a005:1730::/44 maxlen: 48
                          2a06:a005:1bc0::/44 maxlen: 48
                          2a06:a005:1b40::/44 maxlen: 48
                          2a06:a005:43d::/48 maxlen: 48
                          2a06:a005:5ae::/48 maxlen: 48
                          2a05:dfc7:1300::/40 maxlen: 48
                          2a06:a005:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:2e:df:88:22:ef:98:90:d0:b7:a0:db:25:7e:07:c4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 11 23:25:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c272f86ab8e835727a76c2c3a84a16d636ce4c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:a7:2a:bc:ae:f7:d2:6b:59:94:08:f4:1a:
                    77:64:9d:d9:71:15:61:a9:9b:9a:0f:f3:6a:dd:a3:
                    b0:d6:81:93:ef:e7:2c:59:58:aa:f1:ca:0e:2d:d7:
                    e2:fa:30:c7:5f:99:03:f2:dc:cd:a6:d4:54:39:70:
                    3b:89:d1:66:59:98:8f:81:a7:bc:85:ba:94:0b:8f:
                    26:d6:31:eb:c2:7f:32:86:1a:16:34:ac:ba:e8:e6:
                    9f:e1:40:d5:55:17:53:2a:95:31:06:74:80:1c:d4:
                    66:3b:c1:4d:e3:0d:5a:22:ff:b9:17:36:ce:e7:b4:
                    bc:00:03:46:28:4f:54:f3:d5:90:0f:f4:38:52:9f:
                    bb:1f:24:b7:2c:31:9a:b2:58:83:fb:03:1b:da:c6:
                    4b:bb:36:50:e0:f9:24:65:50:f6:67:8d:46:76:20:
                    ae:78:7d:57:89:76:3d:0d:58:85:7a:7a:31:7d:d4:
                    88:3a:13:be:03:24:26:c8:0f:98:2e:0d:88:a4:e1:
                    fd:5e:ac:51:b7:bd:df:2d:19:32:74:46:d3:31:3c:
                    fb:54:c5:6d:4a:60:aa:e5:16:e5:f1:bc:fc:98:1f:
                    16:25:02:8f:8d:f8:a0:98:88:95:34:e2:13:c7:0c:
                    7c:fe:3b:47:32:91:47:f7:60:4a:8a:da:75:14:82:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:72:F8:6A:B8:E8:35:72:7A:76:C2:C3:A8:4A:16:D6:36:CE:4C:64
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wnL4arjoNXJ6dsLDqEoW1jbOTGQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1300::/40
                  2a06:1280:1000::/36
                  2a06:a000::/32
                  2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:41:d8:98:a2:b5:da:67:6d:c6:fb:b8:f6:9b:67:82:d7:70:
         b6:28:77:f6:3d:65:e4:c1:44:ce:93:50:dd:ec:36:49:7f:2c:
         d2:ca:7b:f2:da:30:8e:0d:e5:f7:69:d0:35:36:d7:c9:02:dd:
         08:66:d8:c8:7e:94:7e:10:fc:17:ca:c7:4c:24:44:44:40:9d:
         c9:10:54:22:4e:fe:79:b5:a6:c9:f9:10:8d:7e:77:3d:64:20:
         8b:ae:4b:3f:6c:b1:7c:91:e7:e1:ba:08:9d:28:8f:74:7b:0e:
         fb:12:3a:48:d9:5f:67:de:ff:69:2c:b5:8b:4a:b0:d0:ca:34:
         13:03:79:61:78:87:a2:0a:97:6e:39:61:0f:71:d1:e7:37:80:
         82:62:1e:b7:2a:57:64:cc:d7:0a:c1:39:3a:44:3d:e4:07:34:
         9b:1e:88:13:c9:13:d0:2f:d5:56:32:45:bd:0a:bb:3a:d2:33:
         43:64:31:fe:4c:f0:c6:20:a2:3c:a0:75:d8:17:a6:14:c7:53:
         a2:d4:d4:12:9d:40:97:d9:56:bc:86:be:b0:f0:66:b8:34:4a:
         5d:da:c9:18:da:15:7c:37:35:c0:ef:dc:e7:e4:9f:bc:f8:0c:
         92:7a:c5:ac:07:44:e2:46:be:b6:4a:af:0b:7f:54:14:bb:16:
         ae:6c:47:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----