Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-pf65C0ueUG4nC5GXMHwaw1nOVI.roa
File:                     1-pf65C0ueUG4nC5GXMHwaw1nOVI.roa (raw, json)
Hash identifier:          Z5dikbDgo4mTB6aUvHEo4EMPNH6jFq+vDh7uRgLyolc=
Subject key identifier:   FA:97:FA:E4:2D:2E:79:41:B8:9C:2E:46:5C:C1:F0:6B:0D:67:39:52
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01830E827CC2E50E88355335F145970A5FCC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-pf65C0ueUG4nC5GXMHwaw1nOVI.roa
Signing time:             Mon 05 Sep 2022 16:36:16 +0000
ROA not before:           Mon 05 Sep 2022 16:36:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210260
IP address blocks:        2a06:a001:a0b0::/44 maxlen: 48
                          2a06:a005:20::/44 maxlen: 48
                          2a06:a005:1a40::/44 maxlen: 48
                          2a06:a005:1a60::/44 maxlen: 48
                          2a06:a005:1a20::/44 maxlen: 48
                          2a06:a005:40::/44 maxlen: 48
                          2a06:1287:9000::/39 maxlen: 48
                          2a06:1286::/32 maxlen: 48
                          2a06:a005:1a50::/44 maxlen: 48
                          2a06:a005:1650::/44 maxlen: 48
                          2a06:a005:30::/44 maxlen: 48
                          2a06:a005:50::/44 maxlen: 48
                          2a06:a005:1a30::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:0e:82:7c:c2:e5:0e:88:35:53:35:f1:45:97:0a:5f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  5 16:36:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa97fae42d2e7941b89c2e465cc1f06b0d673952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e9:4f:d3:c4:1e:4c:b0:b2:6d:43:bf:eb:c7:
                    d1:ac:b6:16:09:5d:c6:0b:6b:a4:8e:57:8e:6a:98:
                    63:6c:47:c8:1a:81:04:c7:89:a7:d5:c7:e6:84:e0:
                    28:0c:d4:09:91:31:99:88:37:1c:28:83:b7:f7:d7:
                    78:c8:28:f2:53:6c:29:1a:d2:f6:ad:35:8d:83:0f:
                    63:bb:eb:d8:1e:53:f3:60:7d:eb:69:70:2d:3e:3a:
                    26:b1:f3:1b:22:b3:dc:ea:94:65:c0:b3:a5:51:2c:
                    e5:e0:d6:e4:f8:5d:49:ad:66:e4:62:d8:11:86:0f:
                    be:54:51:0d:48:6e:d7:4f:91:fa:c2:e4:b5:3c:c6:
                    a8:ca:ae:bc:7f:54:d2:50:34:27:70:f6:e1:45:20:
                    5d:2d:b7:79:e2:00:21:8f:8f:21:99:c6:00:7f:0f:
                    5d:01:38:3a:56:52:7a:7c:e0:16:57:68:9e:b6:e9:
                    01:9e:05:fc:bd:33:8e:00:c7:6f:c2:13:c1:70:ea:
                    19:f0:88:ca:57:1c:a4:ad:e9:72:31:1a:e4:02:20:
                    78:42:26:b8:97:bb:6c:f7:a5:79:65:da:e0:61:39:
                    24:a0:7b:4e:02:2b:dc:9b:c2:86:2a:75:de:fb:90:
                    70:bd:a9:20:a9:2d:1f:db:52:54:5f:a5:56:a4:a3:
                    51:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:97:FA:E4:2D:2E:79:41:B8:9C:2E:46:5C:C1:F0:6B:0D:67:39:52
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-pf65C0ueUG4nC5GXMHwaw1nOVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1286::/32
                  2a06:1287:9000::/39
                  2a06:a001:a0b0::/44
                  2a06:a005:20::-2a06:a005:5f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1650::/44
                  2a06:a005:1a20::-2a06:a005:1a6f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         50:6c:d3:f3:20:06:4a:d6:12:a5:89:f2:be:9e:59:55:ed:e6:
         83:2b:7d:20:f5:03:9a:ad:0e:5f:40:02:a4:a8:88:2c:b2:b0:
         8a:51:7d:7f:69:17:3c:e8:c9:9b:92:ff:90:b3:0f:a0:40:53:
         20:2a:74:12:a7:bb:6a:37:5d:b7:5a:63:8b:fa:84:73:cf:bc:
         e4:a3:9a:77:ad:9f:92:6d:15:a8:c4:64:2e:a5:2c:cd:3d:7c:
         7a:9a:7a:3b:d9:51:9c:06:b4:42:09:85:ce:12:e3:e5:c1:e6:
         e8:52:f2:19:4c:a6:48:cc:52:87:f9:63:9c:f1:85:e2:db:f6:
         d1:d8:07:6f:6f:11:29:05:12:ae:bb:f2:e8:cf:2e:e1:31:a5:
         c7:01:0a:f3:40:4f:8c:db:61:8c:5b:83:f6:57:85:b9:8c:16:
         a8:2d:38:f1:26:dc:1b:54:50:77:d3:f3:a3:a6:48:96:20:64:
         e3:4e:c6:33:35:2b:33:ab:74:39:91:17:ef:b0:63:7d:9c:7e:
         32:de:27:b8:55:8a:9e:ca:a7:f9:ed:c1:3d:90:b7:8a:6e:81:
         c2:ff:e1:22:a4:30:42:6b:69:0f:f0:69:16:51:5a:19:bc:44:
         4a:68:c8:d6:5e:94:3b:71:ec:52:4b:0a:d3:58:68:d7:e1:e0:
         90:20:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----