Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0kXRWgVptBPlI5z7PC4a-CyEa9Y.roa
File:                     0kXRWgVptBPlI5z7PC4a-CyEa9Y.roa (raw, json)
Hash identifier:          rhI0robLFu7yIm8zfwcJr72xPUsd/S0+YLJRLz1Tf38=
Subject key identifier:   D2:45:D1:5A:05:69:B4:13:E5:23:9C:FB:3C:2E:1A:F8:2C:84:6B:D6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01822A83E72FBED072A655E385156FC33A59
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0kXRWgVptBPlI5z7PC4a-CyEa9Y.roa
Signing time:             Sat 23 Jul 2022 10:04:23 +0000
ROA not before:           Sat 23 Jul 2022 10:04:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210537
IP address blocks:        2a06:a005:8c0::/44 maxlen: 48
                          2a06:a005:1260::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:2a:83:e7:2f:be:d0:72:a6:55:e3:85:15:6f:c3:3a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 23 10:04:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d245d15a0569b413e5239cfb3c2e1af82c846bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cc:14:8c:ca:df:54:88:6d:67:ad:f1:bb:9a:
                    75:8f:01:ee:a7:5d:a0:ce:24:ad:40:96:36:f5:19:
                    05:17:f4:3b:c7:44:8c:72:97:02:83:00:ca:e3:08:
                    d2:15:95:ae:ba:82:0f:d5:f6:4b:04:9e:27:47:00:
                    a0:90:a4:4b:3e:15:b2:19:9b:7a:88:27:c2:9b:74:
                    da:ec:19:bc:00:95:b1:43:9e:6f:c5:83:2b:f0:fd:
                    7d:aa:a7:60:01:f5:ce:0a:4a:76:1b:ee:c9:0c:37:
                    3f:bf:03:3d:0d:70:be:f5:78:f2:64:7c:39:f6:82:
                    30:03:71:09:69:53:20:b9:0b:f4:69:f3:b9:d6:42:
                    e0:5c:5d:75:c9:c1:d8:96:de:36:64:86:00:f2:c6:
                    15:81:98:b9:e1:87:e9:9f:36:a5:94:9f:46:fe:83:
                    97:2c:9c:45:1d:7e:4c:7f:99:ac:cd:70:63:b3:6c:
                    c1:85:1b:1e:b1:20:b5:99:3d:7f:16:f0:63:ef:7f:
                    0a:db:10:f5:01:1b:a3:ea:73:7b:e0:08:43:18:f3:
                    cb:6f:18:38:b3:4a:d1:a4:93:8e:58:f7:fb:8f:92:
                    d2:5b:3a:bb:d2:69:1a:06:31:3f:64:1e:cf:da:11:
                    ba:86:b7:a9:00:89:b3:34:c1:f0:a8:51:f0:a5:94:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:45:D1:5A:05:69:B4:13:E5:23:9C:FB:3C:2E:1A:F8:2C:84:6B:D6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/0kXRWgVptBPlI5z7PC4a-CyEa9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:8c0::/44
                  2a06:a005:1260::/44

    Signature Algorithm: sha256WithRSAEncryption
         3a:a2:e9:d2:2a:69:24:a6:f8:be:ee:05:89:1c:e0:ea:9c:c0:
         49:0b:83:af:25:93:e5:08:a1:1f:f3:27:64:e7:d0:79:cb:34:
         f6:64:97:08:01:36:bc:a2:61:ae:fb:cb:78:6f:54:2e:9c:e3:
         ed:a1:9c:26:d2:16:35:e3:06:c8:d2:e8:51:18:f2:99:f4:68:
         0a:f2:9e:59:2f:8f:2d:b1:3f:ca:84:22:1d:9f:5d:2f:06:30:
         79:10:b4:2b:c5:d3:ed:e4:d4:ff:e4:23:4a:42:33:33:60:3a:
         7f:d6:81:6a:fb:00:1f:b2:0e:3a:ce:4d:1e:ce:ad:36:88:fb:
         2b:45:91:00:89:57:b1:08:c8:28:79:01:88:4c:e0:3e:b0:62:
         a5:9a:60:2e:b7:bb:2e:e2:21:19:28:b8:f6:75:88:07:85:b6:
         5c:24:2a:07:a3:ac:0d:65:9a:15:6c:f3:b7:79:0a:57:87:55:
         96:51:dc:d7:0a:40:91:ef:0c:a3:1d:f7:53:d3:bd:fe:37:19:
         ea:0d:2c:ce:d6:b8:e9:e0:a9:71:64:90:49:da:7f:c2:95:9b:
         7c:b7:58:26:bc:93:c9:a0:01:10:93:7c:16:6a:6c:0c:f1:9d:
         e5:f5:56:0b:ce:27:75:6a:74:08:62:7f:84:15:20:41:33:72:
         d6:07:e5:5e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYIqg+cvvtByplXjhRVvwzpZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzIzMTAwNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjQ1ZDE1YTA1NjliNDEzZTUyMzljZmIzYzJlMWFmODJjODQ2YmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiswUjMrfVIhtZ63xu5p1jwHup12g
ziStQJY29RkFF/Q7x0SMcpcCgwDK4wjSFZWuuoIP1fZLBJ4nRwCgkKRLPhWyGZt6
iCfCm3Ta7Bm8AJWxQ55vxYMr8P19qqdgAfXOCkp2G+7JDDc/vwM9DXC+9XjyZHw5
9oIwA3EJaVMguQv0afO51kLgXF11ycHYlt42ZIYA8sYVgZi54YfpnzallJ9G/oOX
LJxFHX5Mf5mszXBjs2zBhRsesSC1mT1/FvBj738K2xD1ARuj6nN74AhDGPPLbxg4
s0rRpJOOWPf7j5LSWzq70mkaBjE/ZB7P2hG6hrepAImzNMHwqFHwpZSdVwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNJF0VoFabQT5SOc+zwuGvgshGvWMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvMGtYUldnVnB0QlBsSTV6N1BDNGEtQ3lFYTlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgagBQjA
AwcEKgagBRJgMA0GCSqGSIb3DQEBCwUAA4IBAQA6ounSKmkkpvi+7gWJHODqnMBJ
C4OvJZPlCKEf8ydk59B5yzT2ZJcIATa8omGu+8t4b1QunOPtoZwm0hY14wbI0uhR
GPKZ9GgK8p5ZL48tsT/KhCIdn10vBjB5ELQrxdPt5NT/5CNKQjMzYDp/1oFq+wAf
sg46zk0ezq02iPsrRZEAiVexCMgoeQGITOA+sGKlmmAut7su4iEZKLj2dYgHhbZc
JCoHo6wNZZoVbPO3eQpXh1WWUdzXCkCR7wyjHfdT073+NxnqDSzO1rjp4KlxZJBJ
2n/ClZt8t1gmvJPJoAEQk3wWamwM8Z3l9VYLzid1anQIYn+EFSBBM3LWB+Ve
-----END CERTIFICATE-----