Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-mfoNaLGLGUY1vVjoaDX1FzjQVo.roa
File:                     1-mfoNaLGLGUY1vVjoaDX1FzjQVo.roa (raw, json)
Hash identifier:          MDGBChb6tC6d/VIv2zyHz3HVDIU1FCb2llfPD9c/kuo=
Subject key identifier:   FA:67:E8:35:A2:C6:2C:65:18:D6:F5:63:A1:A0:D7:D4:5C:E3:41:5A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19427C7E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-mfoNaLGLGUY1vVjoaDX1FzjQVo.roa
Signing time:             Thu 05 May 2022 12:09:47 +0000
ROA not before:           Thu 05 May 2022 12:09:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205245
IP address blocks:        2a06:a005:820::/44 maxlen: 48
                          2a06:a005:7a0::/44 maxlen: 48
                          2a06:a005:7b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423787646 (0x19427c7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  5 12:09:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa67e835a2c62c6518d6f563a1a0d7d45ce3415a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:3a:bd:8f:12:06:30:7b:24:52:67:ec:14:
                    85:ac:c6:d5:fe:06:0a:20:50:81:aa:32:72:87:d8:
                    c7:dc:c1:f7:80:76:91:ca:05:f4:2c:b3:9e:35:67:
                    6d:e9:00:44:9f:d2:87:93:f8:d3:5e:63:47:54:fa:
                    02:d3:87:5d:21:d4:dd:6c:26:fb:fa:24:12:ce:d6:
                    9e:60:0f:cc:4a:1d:ec:b4:20:33:6a:a1:7c:a3:04:
                    0c:36:af:33:0c:32:48:4f:af:c0:d9:99:e1:f3:0f:
                    8d:38:d7:5b:76:1d:2b:13:84:73:87:56:80:4d:57:
                    18:36:c0:ea:9c:04:d6:38:d1:08:1c:11:ec:ed:e5:
                    d9:61:6e:e0:3a:d0:e5:f7:1b:19:ad:91:87:09:3d:
                    cd:1a:59:ec:ff:36:0c:4f:55:8d:b6:fd:ec:ba:36:
                    07:97:e7:6b:b1:5e:92:ca:b0:1d:2c:0d:dd:68:70:
                    a9:28:58:8b:d7:9e:0f:59:7a:7c:d2:aa:d5:70:ed:
                    14:2a:40:2a:ab:d0:dd:db:a9:c5:fc:24:10:cb:65:
                    9f:e7:87:da:0f:02:af:55:c3:8f:e7:43:08:19:49:
                    66:47:5e:09:12:0e:93:f8:dc:3e:19:bb:63:54:32:
                    94:ac:86:cb:16:05:45:bb:48:ad:a2:83:e7:e9:cd:
                    58:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:67:E8:35:A2:C6:2C:65:18:D6:F5:63:A1:A0:D7:D4:5C:E3:41:5A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-mfoNaLGLGUY1vVjoaDX1FzjQVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:7a0::/43
                  2a06:a005:820::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:50:f7:f5:5d:c4:84:ba:15:e6:93:b1:d0:9a:3b:0c:c0:0b:
         32:12:48:3e:4e:55:24:a4:3d:e6:f8:20:0b:08:22:85:9e:b5:
         66:a5:64:53:67:2f:07:f2:e2:44:9d:39:8f:62:26:6c:37:ef:
         d4:35:0d:8a:f4:49:38:df:a8:ba:8c:21:1d:50:d5:8d:e7:a5:
         e0:ad:2f:aa:ae:3c:6d:52:96:f1:51:22:d6:c3:da:f2:92:ca:
         4d:41:e2:e5:5c:69:de:35:2b:a8:56:cc:61:d5:d7:cf:49:ae:
         eb:b3:7d:40:a1:c4:e7:75:9e:2e:d6:55:e8:33:2a:3f:6f:a8:
         bb:2f:0f:5c:ad:78:0c:e3:44:1c:89:43:22:20:c4:57:93:df:
         c2:24:69:bb:46:62:b4:8f:47:38:1b:da:15:a6:fb:14:5a:66:
         9b:fd:d9:ca:84:06:6b:a9:85:d7:eb:4a:e4:bf:1e:3e:59:fa:
         88:25:44:97:bf:4a:a1:82:04:58:e6:c8:60:70:71:16:2d:74:
         a5:d0:58:3c:91:f2:2e:f5:46:80:12:e7:99:04:ef:04:90:04:
         db:20:c7:f7:0a:3e:4f:8d:99:fb:a0:04:79:4f:4b:65:97:3e:
         e0:bf:eb:24:d9:dc:63:c7:f2:cd:70:7d:a8:3b:60:9a:83:c7:
         66:80:5a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----