Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-T1MC0OObPbpJ-YkhrYg-X56HVo.roa
File:                     1-T1MC0OObPbpJ-YkhrYg-X56HVo.roa (raw, json)
Hash identifier:          Ma8m5rjG9wEFRj+sXxrBtRY4onxsgBQ+r1EmmdfNCPE=
Subject key identifier:   F9:3D:4C:0B:43:8E:6C:F6:E9:27:E6:24:86:B6:20:F9:7E:7A:1D:5A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182D69A4322EAE823B6C690184E33A36144
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-T1MC0OObPbpJ-YkhrYg-X56HVo.roa
Signing time:             Thu 25 Aug 2022 20:03:30 +0000
ROA not before:           Thu 25 Aug 2022 20:03:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147297
IP address blocks:        2a06:a005:18f0::/44 maxlen: 48
                          2a06:a005:18e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d6:9a:43:22:ea:e8:23:b6:c6:90:18:4e:33:a3:61:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 25 20:03:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f93d4c0b438e6cf6e927e62486b620f97e7a1d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:e2:dd:26:46:c7:44:c9:c2:db:54:8d:20:
                    94:67:65:96:46:58:f1:17:59:c2:4f:c4:3d:b5:43:
                    5f:52:c0:2e:14:de:0f:18:01:ce:c7:8b:19:4f:9b:
                    c0:5f:a5:af:13:56:11:96:4b:a1:b7:85:77:49:20:
                    96:73:46:78:ba:92:08:51:5b:25:d2:96:44:d5:ff:
                    e6:66:55:db:7d:21:62:a1:82:8f:7a:65:f5:11:3d:
                    bd:58:58:d6:2b:c7:ce:ec:a6:b2:11:5b:4e:81:d7:
                    5a:74:42:13:3b:27:99:7c:1f:85:dd:7c:08:76:74:
                    5b:be:9e:b8:e0:66:6b:41:21:7c:29:ff:1e:41:2e:
                    26:a4:9b:5c:31:95:9a:b8:fb:20:5a:28:21:1c:43:
                    b7:a5:c0:e3:bb:df:8a:11:64:dd:60:6c:65:da:82:
                    fd:d7:76:ca:12:20:8a:a5:4d:00:bd:bd:ab:02:97:
                    b3:2a:b6:c0:b2:80:7a:36:d3:0f:a9:ed:f0:78:5f:
                    ec:6b:2d:8d:a9:46:cc:38:13:41:98:4f:23:d1:9d:
                    8b:6d:c4:04:a5:77:84:29:ad:83:58:59:8c:11:8d:
                    47:e4:72:f6:03:18:e0:9d:d1:d1:70:5f:bc:45:81:
                    9f:5c:66:0d:22:af:30:b9:80:09:47:ce:c0:0d:26:
                    a5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3D:4C:0B:43:8E:6C:F6:E9:27:E6:24:86:B6:20:F9:7E:7A:1D:5A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-T1MC0OObPbpJ-YkhrYg-X56HVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         65:ea:52:7f:b0:36:df:d4:af:57:30:70:f3:c6:02:5d:6a:69:
         b7:52:84:83:b4:75:b5:9e:a8:52:07:a7:56:47:9e:56:0b:eb:
         ca:20:48:fd:24:14:f3:38:d3:10:11:5f:f3:43:21:52:b8:87:
         d3:15:5d:98:0c:6f:a8:9d:20:a2:b8:60:b4:8c:cb:32:1b:e6:
         c6:08:ec:52:8a:6f:e4:ca:cb:2b:ee:56:4b:eb:91:44:1c:63:
         67:81:03:85:64:fc:69:2b:5f:a1:e3:75:78:42:6e:aa:65:78:
         e8:91:9e:03:ec:82:f5:de:c0:99:72:e7:68:bd:9a:d1:22:45:
         0d:fa:eb:b1:82:b3:e5:bf:31:52:5b:04:de:38:f7:83:88:13:
         18:fd:6a:43:87:36:5d:b6:9f:17:8a:76:7a:99:42:dd:5f:62:
         9e:e7:1d:fa:df:92:90:25:2d:0f:1e:4b:35:68:97:ad:3a:c3:
         09:9f:11:fb:9e:ab:5d:bf:6c:09:dc:a4:d4:40:6c:87:ed:89:
         27:50:eb:86:3d:ec:78:79:f1:28:58:d4:da:db:40:81:a0:df:
         93:19:ac:06:76:d8:95:16:73:dd:38:ca:09:7c:32:67:b8:b6:
         1b:8d:9b:eb:ef:b3:d2:e7:0e:bf:e5:0e:92:58:9c:0c:36:7a:
         02:27:45:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----