Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2280bCSS__XbZrBBBnW1qmFhnWY.roa
File:                     2280bCSS__XbZrBBBnW1qmFhnWY.roa (raw, json)
Hash identifier:          vOgfZYb1AcqLjRjKhGsyGCkuGUzKlJh3Z44NdoG0nEw=
Subject key identifier:   DB:6F:34:6C:24:92:FF:F5:DB:66:B0:41:06:75:B5:AA:61:61:9D:66
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1ABCC883
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2280bCSS__XbZrBBBnW1qmFhnWY.roa
Signing time:             Fri 10 Jun 2022 18:29:21 +0000
ROA not before:           Fri 10 Jun 2022 18:29:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     137425
IP address blocks:        2a06:a005:4d8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448579715 (0x1abcc883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 10 18:29:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=db6f346c2492fff5db66b0410675b5aa61619d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:5c:0d:9f:7a:84:79:d3:83:f2:fd:f3:4e:
                    ef:26:20:f2:d9:1e:92:88:58:80:1a:35:4e:71:9b:
                    8a:f2:98:60:65:8b:2a:b9:f1:3e:99:18:b7:53:f4:
                    b9:c1:51:2b:73:7e:a5:42:10:38:33:bc:94:53:42:
                    d1:b1:e3:da:45:7c:54:94:9a:07:0d:1f:84:59:e0:
                    cd:ec:4a:21:49:00:31:43:89:05:66:f2:31:64:23:
                    87:fd:b2:a6:3d:5e:08:f7:4b:4b:43:55:a9:98:dc:
                    46:02:62:dc:57:da:a5:64:b9:5b:f5:28:71:73:3a:
                    54:33:51:1c:e0:ad:b2:9e:65:bb:26:fa:5b:1f:4f:
                    a4:8d:47:ae:c4:5a:8b:7e:56:85:ab:a9:e3:63:83:
                    e6:2f:e0:1c:a1:12:20:0a:c5:df:c1:41:ac:44:e6:
                    db:88:14:be:4a:a5:ba:b0:94:c1:7c:83:1f:19:12:
                    6e:aa:03:0b:84:d6:80:72:99:6d:25:25:a4:2c:4f:
                    a3:d4:b6:1e:08:1b:44:fb:f8:70:6e:92:b5:95:17:
                    79:de:b1:97:b6:d0:59:a2:13:dc:59:d0:49:cc:02:
                    71:43:38:13:ef:77:90:76:51:f6:14:aa:66:0d:71:
                    7f:61:29:0f:95:9c:df:98:32:a8:9c:b9:50:54:2d:
                    50:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6F:34:6C:24:92:FF:F5:DB:66:B0:41:06:75:B5:AA:61:61:9D:66
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2280bCSS__XbZrBBBnW1qmFhnWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4d8::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:5d:bb:44:b7:bf:ca:ba:ce:0a:44:4d:1d:84:3a:6f:29:5f:
         98:c6:45:38:04:48:d1:01:c4:70:97:0f:33:96:e7:b7:8b:db:
         f1:f5:c3:e0:96:a2:7b:22:ab:eb:f1:87:dd:a8:76:a3:cd:33:
         82:38:3d:b2:05:eb:cb:57:e3:ff:ba:9e:12:cf:89:c1:b8:d5:
         ec:b1:af:b9:3c:c9:75:42:fa:11:70:f0:50:7f:b1:56:f4:6e:
         d7:62:9d:ff:3f:68:67:d7:48:5c:8f:1f:05:94:54:d8:7c:f3:
         a8:7e:12:2f:30:1b:40:45:04:22:80:56:6b:32:89:e3:b4:46:
         7b:a0:e7:25:d4:45:58:b4:00:72:55:bd:9b:7c:b0:2e:e3:93:
         e6:67:1a:47:98:21:86:44:81:d5:35:32:de:35:72:b1:92:4c:
         29:55:0a:64:8c:bd:d4:66:82:a3:b1:3e:8e:ea:15:15:c2:39:
         f7:f8:c7:36:81:09:52:e3:28:9e:58:b0:ba:3f:1a:b6:df:02:
         8c:45:ad:93:a4:4c:a0:b7:8f:a5:05:f8:76:03:87:e8:8d:4f:
         c2:b6:89:81:08:da:74:6e:54:90:1f:da:91:9e:ef:bb:71:a8:
         e2:7f:4b:a8:0a:8d:fa:21:58:42:62:d1:65:d6:0a:70:f3:01:
         3f:3a:0e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----