Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1l4j-1nqk2Sj7eMLUd635axi0_4.roa
File:                     1l4j-1nqk2Sj7eMLUd635axi0_4.roa (raw, json)
Hash identifier:          kJfZTUlQ93CxbA2j/pLpiIls1GpmzU2vIGEIeBNOPvo=
Subject key identifier:   D6:5E:23:FB:59:EA:93:64:A3:ED:E3:0B:51:DE:B7:E5:AC:62:D3:FE
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184671D9C01850D1101AC2D6D9871C87D9F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1l4j-1nqk2Sj7eMLUd635axi0_4.roa
Signing time:             Fri 11 Nov 2022 14:35:04 +0000
ROA not before:           Fri 11 Nov 2022 14:35:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202199
IP address blocks:        2a06:a005:1640::/44 maxlen: 48
                          2a06:a005:1505::/48 maxlen: 48
                          2a05:dfc7:1700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:67:1d:9c:01:85:0d:11:01:ac:2d:6d:98:71:c8:7d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 11 14:35:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d65e23fb59ea9364a3ede30b51deb7e5ac62d3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:30:f6:5e:cd:e3:f0:bb:69:e4:38:56:59:
                    4d:43:b3:d8:19:2f:04:aa:40:18:9c:6e:3f:93:37:
                    7c:6c:75:de:78:00:fe:45:a0:32:b5:30:2b:40:89:
                    27:4a:af:e5:35:f3:c5:f9:93:1d:07:87:bc:37:82:
                    57:c3:14:14:2a:05:bd:e1:88:d4:05:8f:26:db:03:
                    15:46:3f:82:61:5f:cc:8b:24:e6:c2:2d:d1:23:9d:
                    fd:04:0d:c6:ad:65:a3:4d:1f:13:5a:39:5a:b3:71:
                    9e:ad:9a:5e:b1:2b:c1:61:be:82:9f:b3:48:0a:a9:
                    57:14:8f:f4:9c:c0:9d:46:cd:86:06:d9:e8:92:1f:
                    46:10:d0:47:5a:a6:07:dd:53:8c:30:7d:ff:41:69:
                    07:1e:76:74:47:7f:98:23:15:59:a5:a3:15:73:00:
                    71:41:54:01:f9:3b:6d:83:80:16:7e:f9:52:12:00:
                    fb:84:11:c6:0c:a4:96:30:1d:0f:53:6b:c4:45:ac:
                    af:66:35:19:96:e2:b5:30:52:08:b3:83:aa:17:2e:
                    4f:09:50:db:3e:15:50:58:36:f0:63:96:e6:83:82:
                    cf:51:4c:c8:9a:9a:2e:89:86:63:06:c0:7c:fd:53:
                    70:92:32:f0:9b:69:25:04:1c:ec:6f:ee:6f:2d:e2:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5E:23:FB:59:EA:93:64:A3:ED:E3:0B:51:DE:B7:E5:AC:62:D3:FE
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1l4j-1nqk2Sj7eMLUd635axi0_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1700::/40
                  2a06:a005:1505::/48
                  2a06:a005:1640::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:d2:a0:0c:12:8a:33:0b:03:e0:f0:80:6d:df:a1:08:ef:7f:
         da:1e:74:47:8f:59:be:71:ae:f9:dc:95:5d:3b:68:a9:13:83:
         77:89:67:4e:e1:7b:eb:85:f8:cc:64:e3:41:83:fe:3f:02:19:
         05:7c:7a:07:1a:c9:a9:15:e6:c9:51:e3:6b:be:b5:09:fd:3c:
         a9:8d:1f:7b:ba:08:19:9f:58:3e:b8:ee:76:63:16:88:88:ef:
         77:57:df:cd:27:9f:fc:aa:77:d2:a3:c9:5f:e1:f0:1e:c9:90:
         15:28:f1:e2:6b:df:d0:91:d9:7d:27:b4:e7:d2:5f:11:96:17:
         34:be:2b:35:9d:a2:50:c0:b5:65:50:90:ea:82:33:86:d8:01:
         c7:73:43:9a:10:2d:66:ef:bd:35:99:64:27:dc:eb:4e:d5:67:
         7d:77:da:f5:45:da:ad:85:ca:3b:e9:72:9f:fe:89:5d:d8:fc:
         ad:25:70:30:d7:5e:1f:d5:3c:f8:2a:da:9e:78:c5:43:e1:f9:
         97:13:1a:01:49:be:c1:71:da:72:bb:64:ec:a0:9a:ae:c5:9e:
         fc:bf:c6:49:a6:68:19:a6:8b:cc:b1:5c:26:93:6a:e6:89:86:
         24:ee:88:12:bf:ef:f2:17:ac:17:bc:5f:7c:42:de:21:c6:02:
         e6:46:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----