Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/22E5loi_3zGKasJwIBzG8VMu1QA.roa
File:                     22E5loi_3zGKasJwIBzG8VMu1QA.roa (raw, json)
Hash identifier:          BjvAKEFS1GAYT2x5FYCJytQGOFPtCpT46TXn1tGU6eQ=
Subject key identifier:   DB:61:39:96:88:BF:DF:31:8A:6A:C2:70:20:1C:C6:F1:53:2E:D5:00
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1BAB4E62
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/22E5loi_3zGKasJwIBzG8VMu1QA.roa
Signing time:             Sat 02 Jul 2022 02:01:26 +0000
ROA not before:           Sat 02 Jul 2022 02:01:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     395332
IP address blocks:        2a06:a005:5f9::/48 maxlen: 48
                          2a06:a005:5e1::/48 maxlen: 48
                          2a06:a005:c80::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464211554 (0x1bab4e62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  2 02:01:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=db61399688bfdf318a6ac270201cc6f1532ed500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:de:78:9e:34:47:83:37:e7:3a:59:c8:d7:
                    5f:6c:0a:51:41:31:cd:d5:cb:39:12:d5:7d:d0:b6:
                    52:47:6b:2f:2a:f8:d4:33:65:cb:ca:a2:38:53:22:
                    82:ab:d1:07:3f:d2:2a:8a:cc:fe:c0:d7:4d:05:1f:
                    09:dc:e4:57:fb:9b:4e:5f:78:84:e4:97:ef:fd:ae:
                    33:e6:96:bd:31:bd:2f:20:a4:38:e5:50:37:a7:57:
                    d6:01:71:ac:99:47:2b:8f:83:2f:4e:f2:e6:b8:f8:
                    67:9c:b6:06:17:c6:d7:af:45:6a:31:fc:82:fe:fb:
                    31:15:0d:e1:1d:31:51:cf:3f:7a:77:e9:a1:a0:5e:
                    08:a9:41:a7:be:20:1e:ce:79:c8:9a:ff:05:9a:a4:
                    90:85:63:73:46:3e:65:69:e7:5c:20:58:1f:56:32:
                    3d:71:f3:fa:52:c0:60:76:df:3b:f9:93:fc:b0:33:
                    76:11:38:70:3c:d8:6f:57:ae:74:f8:bd:9d:15:3a:
                    a4:4e:49:f2:df:82:cf:6a:8b:ce:2c:52:8a:59:16:
                    1d:47:75:0a:d0:fa:22:5d:fa:dd:10:7e:1d:4a:65:
                    e0:65:86:51:94:8b:2d:2f:f3:cf:2a:86:24:f5:ff:
                    bb:21:dc:81:55:c9:27:4e:06:97:cf:99:c5:67:94:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:61:39:96:88:BF:DF:31:8A:6A:C2:70:20:1C:C6:F1:53:2E:D5:00
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/22E5loi_3zGKasJwIBzG8VMu1QA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5e1::/48
                  2a06:a005:5f9::/48
                  2a06:a005:c80::/44

    Signature Algorithm: sha256WithRSAEncryption
         3e:75:3b:1c:47:53:50:3d:9f:f7:d0:67:cd:46:44:4c:3e:b5:
         b0:92:c0:3a:f7:7c:49:d1:79:93:12:51:e7:89:a6:3b:5d:a1:
         1a:3e:0e:4b:72:e9:ca:f4:83:9d:18:19:ed:0a:a9:e2:40:ac:
         4c:1a:25:bc:66:b2:5b:c6:18:4f:a6:8b:75:d4:26:80:b3:84:
         26:ff:e2:7f:2c:b3:71:47:5e:6f:18:59:92:cd:a8:9e:f3:f0:
         f8:f5:5f:82:0e:98:78:f3:60:96:13:6c:04:7f:90:46:38:68:
         d3:c8:19:54:c8:01:a1:3b:57:b7:59:24:17:44:cd:43:cc:be:
         c5:56:eb:7c:02:f1:6b:f4:4d:ff:e7:b8:e8:c8:74:71:c1:90:
         b4:f0:b6:ec:d6:5f:ff:7d:9e:b5:0e:0d:fc:28:30:59:03:3c:
         b3:31:75:1d:07:27:bb:43:49:28:42:ba:c6:45:92:c9:e1:dd:
         97:3d:e6:0c:0c:34:2c:0f:c7:3f:89:a0:aa:85:ec:02:cf:46:
         5a:e8:d2:26:26:c7:5a:8a:2e:a0:1d:3e:1e:cc:58:07:09:f9:
         d5:f9:e4:a8:0a:ee:63:5e:9c:cb:36:0a:19:ff:35:f9:eb:29:
         6c:6c:ad:ab:44:60:46:83:90:c0:37:a7:bd:47:5f:ea:af:33:
         16:37:f3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----