Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ymVLBVCzxYIRcIUsjwghCCtgr-Y.roa
File:                     ymVLBVCzxYIRcIUsjwghCCtgr-Y.roa (raw, json)
Hash identifier:          RI9CPGJrFmGT2KLHM4fDi7sxdS/U3nlOHjzs4IG/yzQ=
Subject key identifier:   CA:65:4B:05:50:B3:C5:82:11:70:85:2C:8F:08:21:08:2B:60:AF:E6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1ACD3CF6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ymVLBVCzxYIRcIUsjwghCCtgr-Y.roa
Signing time:             Sun 12 Jun 2022 13:02:18 +0000
ROA not before:           Sun 12 Jun 2022 13:02:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211754
IP address blocks:        2a06:a005:c90::/44 maxlen: 48
                          2a06:a005:ca0::/44 maxlen: 48
                          2a06:a005:cb0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449658102 (0x1acd3cf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 12 13:02:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ca654b0550b3c5821170852c8f0821082b60afe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:91:91:56:32:af:d6:5e:7b:92:2c:20:55:82:
                    dd:14:36:82:fd:41:df:6b:df:35:86:fe:26:71:10:
                    5c:d3:8f:c7:3a:42:1e:88:30:5c:c4:68:7a:21:a3:
                    bb:25:7a:ea:8a:24:1d:5f:6b:11:37:1d:10:19:02:
                    f6:c1:27:d1:30:fd:0c:c5:dd:63:50:38:e4:c9:74:
                    4d:ff:1e:29:32:cb:76:a0:7a:e4:3f:f4:3b:05:c7:
                    33:75:f3:49:28:d8:a7:53:f9:78:9b:ac:22:fb:56:
                    7a:46:91:9e:f3:1e:a9:7f:96:6e:92:f8:ad:dd:5b:
                    d3:f1:ca:90:fc:fc:ec:37:c4:8f:29:e7:e3:42:d1:
                    3a:68:f1:17:46:0b:05:3e:3c:18:4c:2d:34:d1:21:
                    cf:bd:28:dd:d0:c9:ae:3a:e4:e7:c2:16:75:66:e1:
                    9d:e2:62:9d:c4:a9:75:2a:de:5b:7f:e4:34:78:4b:
                    3d:f9:2b:4d:96:d0:6a:d6:ee:b4:b0:d2:32:7a:48:
                    65:be:3d:66:4d:35:72:f8:91:22:20:8a:de:1c:89:
                    60:78:7d:bc:29:e8:30:f9:ed:3b:56:98:24:d8:8b:
                    4d:00:96:08:f8:38:31:a6:ee:a3:e6:bb:ac:10:34:
                    ec:f3:1b:2a:e3:ee:27:ee:12:5a:13:66:a5:7d:21:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:65:4B:05:50:B3:C5:82:11:70:85:2C:8F:08:21:08:2B:60:AF:E6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ymVLBVCzxYIRcIUsjwghCCtgr-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:c90::-2a06:a005:cbf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:29:4e:43:e9:e4:4e:f2:4b:fa:1f:79:ae:f3:8f:b4:0d:
         8d:72:53:a2:30:98:22:ba:d6:47:70:3f:00:9c:94:c5:53:44:
         8f:65:ec:84:bd:74:37:f4:99:47:ee:d3:b1:1b:3b:1a:e6:61:
         a2:44:18:05:16:b4:57:03:34:08:ee:52:27:b5:69:a2:0f:f9:
         0b:4b:46:bd:fc:af:5a:29:ca:b1:a4:86:69:f0:a5:72:c9:35:
         63:40:89:f9:2e:db:d3:b2:d3:f2:1b:f8:2c:df:7a:26:95:e9:
         c2:60:82:81:18:2c:0c:01:45:d9:17:64:db:28:e2:33:b9:e4:
         a2:9a:5e:ab:b0:7b:0f:62:60:aa:ed:f0:00:91:18:f0:25:cc:
         55:65:07:5a:80:88:cf:d2:f7:0c:8a:dc:0c:5b:25:28:61:b3:
         37:b5:38:b4:01:04:75:4b:f1:6f:2d:62:00:fd:1e:8e:bb:81:
         f1:35:21:b8:0f:70:7f:44:b4:a6:e2:ec:53:71:0b:49:a5:5a:
         e9:71:2e:96:37:20:3e:be:a3:92:ee:d6:47:7f:05:79:5c:b2:
         05:a4:ec:80:d1:81:60:2c:fc:36:d6:b9:6c:76:1f:aa:ea:df:
         33:ff:88:03:a0:fc:49:38:12:12:cb:df:22:69:a4:ed:43:f6:
         52:cb:12:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----