Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2Bfj0OfrqmON918oJiqw0gJVwbA.roa
File:                     2Bfj0OfrqmON918oJiqw0gJVwbA.roa (raw, json)
Hash identifier:          u/pEZyPgnGavFwGu2x+BEN8+2H4wlX2JPVA876utK94=
Subject key identifier:   D8:17:E3:D0:E7:EB:AA:63:8D:F7:5F:28:26:2A:B0:D2:02:55:C1:B0
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01841E5846D6D3FC881B3E9F41211E9D56E9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2Bfj0OfrqmON918oJiqw0gJVwbA.roa
Signing time:             Fri 28 Oct 2022 11:26:52 +0000
ROA not before:           Fri 28 Oct 2022 11:26:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210537
IP address blocks:        2a06:a005:1507::/48 maxlen: 48
                          2a06:a005:20c0::/44 maxlen: 48
                          2a06:a005:1508::/48 maxlen: 48
                          2a06:a005:d2d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1e:58:46:d6:d3:fc:88:1b:3e:9f:41:21:1e:9d:56:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 28 11:26:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d817e3d0e7ebaa638df75f28262ab0d20255c1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:e3:e2:59:14:e1:d6:ec:45:d2:2c:79:4e:
                    1f:48:ef:36:1d:aa:2c:1b:03:5f:34:66:6e:db:74:
                    ec:32:b0:77:52:56:61:ee:e0:76:ad:4d:36:c2:7c:
                    9f:01:b1:6f:30:54:72:3a:ea:28:80:2c:76:d3:47:
                    76:a8:09:2b:78:51:ba:d6:d7:a3:fb:0b:8b:40:00:
                    bb:f4:e8:3f:f0:c6:5a:80:cf:e2:85:e3:44:6a:7a:
                    89:85:ef:46:4e:12:32:36:94:3f:2d:0c:19:28:a1:
                    0a:2b:6b:0f:68:19:f3:fa:c1:6b:fd:4c:22:dc:4c:
                    7d:54:14:37:92:24:cd:6a:49:73:6b:c0:b1:b1:76:
                    02:05:b2:0f:6b:fc:51:69:65:f8:c3:d0:a2:d2:e6:
                    09:9b:35:c2:55:60:ee:70:f0:97:4c:49:83:1e:d8:
                    27:00:c7:ea:55:58:51:93:a8:68:0a:df:3c:cc:1c:
                    9c:d3:c5:e2:30:d2:05:3e:d6:9c:29:08:30:0d:c0:
                    28:4f:1d:86:7c:eb:77:59:a0:d5:23:5f:f6:2c:2b:
                    e2:77:4a:b8:0b:74:b5:2a:1f:3d:ea:c1:76:ee:f4:
                    43:ed:91:31:8d:25:90:1a:1b:38:cf:76:8d:45:2c:
                    8a:cb:30:5a:09:a5:67:c2:bd:4c:48:0e:55:2a:06:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:17:E3:D0:E7:EB:AA:63:8D:F7:5F:28:26:2A:B0:D2:02:55:C1:B0
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2Bfj0OfrqmON918oJiqw0gJVwbA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2d::/48
                  2a06:a005:1507::-2a06:a005:1508:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:20c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         18:0b:6d:e5:1d:f7:df:47:09:62:c6:2f:d8:23:cb:5a:dc:35:
         74:36:33:3f:f7:03:b1:cb:b1:78:ea:4f:69:d1:b2:d9:0d:c3:
         6c:44:4c:bb:25:38:22:d7:4a:40:bf:30:a4:90:9b:43:71:df:
         4b:c2:d4:1c:65:a6:f0:fc:de:ed:9f:2f:4b:ae:26:2e:77:6e:
         7f:fc:91:d2:82:9c:5d:1c:48:18:e0:03:33:7e:8a:96:a4:2c:
         0a:f7:1f:93:ca:b7:56:95:11:46:c7:40:5c:7d:b8:65:0c:55:
         ad:1f:69:e5:6a:ad:47:48:73:8a:01:b8:06:3c:71:45:bd:fe:
         76:40:8b:8e:c9:b5:c7:0b:68:69:31:25:cd:3b:83:01:1f:4e:
         d2:9d:cd:54:10:20:28:68:81:e7:47:08:65:5b:36:18:52:17:
         89:68:95:72:94:d4:7b:b2:10:ff:a2:6d:a0:6a:09:43:f9:4e:
         a6:7e:be:28:71:ae:bd:8d:6a:3a:63:12:8b:c5:a1:71:3b:15:
         6a:6a:60:11:d9:bd:f3:6a:e7:10:44:56:77:4f:8d:0d:05:4a:
         fe:d2:3c:c3:23:99:e3:8c:dc:0c:15:4c:b6:5e:5e:a8:5f:7e:
         22:2a:dc:9b:5d:85:5f:64:98:12:7e:6b:fe:44:a8:d6:78:e3:
         62:20:09:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----