Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-H07wNaFy0xl86TtGP3adj93IZA.roa
File:                     1-H07wNaFy0xl86TtGP3adj93IZA.roa (raw, json)
Hash identifier:          WrYkZFyOrfl6NQ+ye3mxOzgxXgwod7oS3PcfehVvb6s=
Subject key identifier:   F8:7D:3B:C0:D6:85:CB:4C:65:F3:A4:ED:18:FD:DA:76:3F:77:21:90
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181EEBD2A60B7C949B0ACDF2F091EEEA8CE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-H07wNaFy0xl86TtGP3adj93IZA.roa
Signing time:             Mon 11 Jul 2022 19:29:43 +0000
ROA not before:           Mon 11 Jul 2022 19:29:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206271
IP address blocks:        2a06:a005:437::/48 maxlen: 48
                          2a06:a005:a15::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:ee:bd:2a:60:b7:c9:49:b0:ac:df:2f:09:1e:ee:a8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 11 19:29:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f87d3bc0d685cb4c65f3a4ed18fdda763f772190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:eb:b4:4d:a1:33:c0:38:a3:b1:f3:fa:72:
                    ed:2a:07:c3:c9:c0:f0:dd:60:65:56:fd:84:32:f9:
                    13:65:a5:41:a1:60:e3:6e:b1:ea:d8:9a:7c:0b:75:
                    a8:c5:46:3c:96:72:ba:9e:16:c1:ac:93:dc:2d:37:
                    c2:35:30:6f:07:9a:a8:7d:f2:ef:a9:69:79:70:81:
                    bf:0f:5d:e6:00:f3:38:47:89:84:62:19:2d:ae:de:
                    94:5b:fd:34:b8:86:2a:66:bf:f8:68:43:86:36:8a:
                    72:b1:50:5e:e9:7e:80:cd:d3:c5:aa:b5:88:92:80:
                    f6:c2:0c:e2:8e:44:c3:62:40:09:c0:c6:40:c1:eb:
                    dd:ae:86:bf:ac:45:e4:f3:34:f7:f8:ce:e3:fa:07:
                    58:a6:bb:aa:8e:25:94:5f:09:30:de:c5:e7:5d:70:
                    0b:00:27:f8:1d:50:59:80:2d:3a:b9:64:d3:81:98:
                    c8:1f:2e:90:1b:f8:11:6a:52:2e:6d:3a:06:d2:1c:
                    9e:1a:34:dd:df:8f:ea:3c:3a:2f:72:43:80:19:ae:
                    a4:fc:f0:5e:44:6c:84:4f:5b:b3:02:9e:f3:4c:66:
                    37:dc:55:cc:e0:cd:a0:c3:79:61:fd:c0:26:83:ec:
                    b5:ad:b2:86:7d:c7:71:f1:f2:f5:65:3b:1d:19:6f:
                    10:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7D:3B:C0:D6:85:CB:4C:65:F3:A4:ED:18:FD:DA:76:3F:77:21:90
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-H07wNaFy0xl86TtGP3adj93IZA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:437::/48
                  2a06:a005:a15::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:53:3c:23:4c:0a:cb:db:79:00:8a:61:7b:96:78:8e:84:6f:
         76:29:c8:c6:1d:9d:56:d5:74:e7:8b:23:33:bf:f9:c4:2e:aa:
         a0:76:67:e2:e9:19:2a:13:f7:f9:8f:d1:24:3a:1b:8e:4a:42:
         75:fa:df:93:d0:92:40:5c:55:5f:40:b4:eb:3e:22:56:7d:62:
         36:75:7a:a3:46:f9:a7:c8:fb:8a:af:7e:1c:4f:56:31:fa:d1:
         e2:32:9b:06:0e:e2:f5:f4:69:7e:90:ea:3d:7a:09:77:8b:ea:
         f8:cb:a5:3f:1b:de:66:0a:44:40:61:3b:b6:b6:08:e1:47:72:
         36:87:04:b5:ab:ec:3c:03:13:cc:47:9f:12:21:71:fd:ad:fe:
         f1:d5:f8:06:fb:91:ec:dc:79:32:5a:2a:d1:ab:28:64:d3:c2:
         3b:8d:0d:0a:dc:d7:cb:0b:ae:d8:60:d2:03:3b:e1:d1:35:cd:
         d7:17:ff:25:57:65:e9:6b:1d:ca:d2:bd:8e:1a:c7:51:12:46:
         ba:7c:70:bf:ed:42:a5:9f:88:7d:2a:4a:5d:73:4c:5a:71:aa:
         d8:c1:a7:e3:3f:39:0a:c4:b0:fa:bb:8b:31:17:32:20:f0:7a:
         33:f0:19:75:b5:3d:66:d5:53:4e:a5:34:40:1d:f2:36:d0:33:
         d7:36:58:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----