Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1aO6LFe6fKH1SwoJSWRd207BzeA.roa
File:                     1aO6LFe6fKH1SwoJSWRd207BzeA.roa (raw, json)
Hash identifier:          s9d3RlZk/+N9XJA5TY43UoAYKmp1X5qiN6kv2RMokuE=
Subject key identifier:   D5:A3:BA:2C:57:BA:7C:A1:F5:4B:0A:09:49:64:5D:DB:4E:C1:CD:E0
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182120BAA3CD982298898E761BDAE373F13
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1aO6LFe6fKH1SwoJSWRd207BzeA.roa
Signing time:             Mon 18 Jul 2022 16:02:10 +0000
ROA not before:           Mon 18 Jul 2022 16:02:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206271
IP address blocks:        2a06:a005:1274::/48 maxlen: 48
                          2a06:a005:437::/48 maxlen: 48
                          2a06:a005:a15::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:12:0b:aa:3c:d9:82:29:88:98:e7:61:bd:ae:37:3f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 18 16:02:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d5a3ba2c57ba7ca1f54b0a0949645ddb4ec1cde0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4b:5e:c6:a3:1a:87:fd:ba:33:7d:fd:fe:79:
                    76:d6:2f:d1:ac:2d:35:9a:82:86:5a:97:4e:0c:ff:
                    7b:5f:44:cd:e3:ad:8f:9c:a3:5a:c0:cc:26:da:41:
                    df:10:92:63:bf:04:c1:43:89:ae:f5:c5:4a:c1:4e:
                    c1:e0:ec:76:1b:28:01:7c:03:03:67:57:af:b4:ae:
                    e8:d5:d5:5c:b4:e8:7b:53:72:25:0c:47:37:3b:ca:
                    f1:a2:b6:f3:07:50:37:0b:17:08:0f:ea:4d:61:9b:
                    4c:62:fe:72:45:bf:ec:0a:cd:05:87:63:fc:81:78:
                    65:e2:63:00:cc:c7:72:27:df:db:f1:e1:c4:56:a0:
                    91:86:b4:fb:b1:70:13:ef:5a:bf:45:40:50:59:24:
                    49:63:65:72:b7:c0:c9:3d:ad:80:77:0c:bf:33:ed:
                    61:15:1f:1c:80:34:c0:4e:cd:5e:d0:e5:d7:47:34:
                    5d:11:04:71:9c:4c:f0:26:1a:3a:3b:db:0b:44:02:
                    8a:61:79:3d:a5:09:e1:35:50:d6:6f:71:83:c6:c0:
                    6b:d8:eb:38:a6:dd:17:98:14:7f:ca:b9:28:de:fb:
                    f9:42:f1:2a:92:b1:03:e1:cf:59:80:ff:57:80:51:
                    15:44:5c:ba:0a:bc:f0:86:c9:7e:f4:01:06:7f:c2:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A3:BA:2C:57:BA:7C:A1:F5:4B:0A:09:49:64:5D:DB:4E:C1:CD:E0
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1aO6LFe6fKH1SwoJSWRd207BzeA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:437::/48
                  2a06:a005:a15::/48
                  2a06:a005:1274::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:db:e8:29:b0:55:98:63:85:6b:d6:f7:e2:14:74:e9:61:8d:
         51:01:cb:82:4d:6c:1f:7e:63:d7:07:93:80:58:1f:89:28:c3:
         e1:12:e3:ae:e9:13:73:c8:f0:cc:06:13:7f:d8:6c:0f:35:79:
         58:a2:32:bc:ad:17:02:fc:ba:82:5d:5c:67:7b:c5:93:f9:41:
         08:f2:53:c3:4b:dc:83:3b:6f:ed:ba:fe:73:81:bb:bc:c4:c1:
         76:24:26:4e:aa:d0:88:a3:b0:dd:35:ac:e1:43:8d:a9:a1:cf:
         af:02:55:8e:ec:b1:db:15:42:64:ce:cc:96:4a:e8:07:1d:29:
         24:11:fb:0b:62:6c:12:e2:79:f6:96:04:b7:e3:84:c4:e4:a8:
         aa:fe:bf:8f:a6:00:db:27:35:e4:02:c3:03:2d:4e:17:b9:a0:
         d5:62:3a:ea:3c:83:55:b8:51:44:0d:21:02:93:e1:cb:b5:1b:
         cd:3a:01:72:a4:28:90:32:c9:13:7e:2e:93:47:b5:56:a8:9b:
         77:d1:11:bd:41:e4:79:66:7a:15:9a:b1:54:3e:fe:16:1b:2c:
         f0:ff:83:ab:c0:10:a3:ea:20:d5:ea:c2:b8:e7:82:75:bb:44:
         f6:c4:ac:34:ce:95:b2:63:c5:3e:c1:82:73:7b:0c:62:b9:44:
         0e:ba:ef:4d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYISC6o82YIpiJjnYb2uNz8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzE4MTYwMjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWEzYmEyYzU3YmE3Y2ExZjU0YjBhMDk0OTY0NWRkYjRlYzFjZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10texqMah/26M339/nl21i/RrC01
moKGWpdODP97X0TN462PnKNawMwm2kHfEJJjvwTBQ4mu9cVKwU7B4Ox2GygBfAMD
Z1evtK7o1dVctOh7U3IlDEc3O8rxorbzB1A3CxcID+pNYZtMYv5yRb/sCs0Fh2P8
gXhl4mMAzMdyJ9/b8eHEVqCRhrT7sXAT71q/RUBQWSRJY2Vyt8DJPa2Adwy/M+1h
FR8cgDTATs1e0OXXRzRdEQRxnEzwJho6O9sLRAKKYXk9pQnhNVDWb3GDxsBr2Os4
pt0XmBR/yrko3vv5QvEqkrED4c9ZgP9XgFEVRFy6Crzwhsl+9AEGf8KQCwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNWjuixXunyh9UsKCUlkXdtOwc3gMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvMWFPNkxGZTZmS0gxU3dvSlNXUmQyMDdCemVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgagBQQ3
AwcAKgagBQoVAwcAKgagBRJ0MA0GCSqGSIb3DQEBCwUAA4IBAQCI2+gpsFWYY4Vr
1vfiFHTpYY1RAcuCTWwffmPXB5OAWB+JKMPhEuOu6RNzyPDMBhN/2GwPNXlYojK8
rRcC/LqCXVxne8WT+UEI8lPDS9yDO2/tuv5zgbu8xMF2JCZOqtCIo7DdNazhQ42p
oc+vAlWO7LHbFUJkzsyWSugHHSkkEfsLYmwS4nn2lgS344TE5Kiq/r+PpgDbJzXk
AsMDLU4XuaDVYjrqPINVuFFEDSECk+HLtRvNOgFypCiQMskTfi6TR7VWqJt30RG9
QeR5ZnoVmrFUPv4WGyzw/4OrwBCj6iDV6sK454J1u0T2xKw0zpWyY8U+wYJzewxi
uUQOuu9N
-----END CERTIFICATE-----