Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2ICMvNTBvDh2Pt8XSaexSDRiyn4.roa
File:                     2ICMvNTBvDh2Pt8XSaexSDRiyn4.roa (raw, json)
Hash identifier:          t5wOlHYpXhzZc3ZKgdKnjG5+lUQXRQ5UsRXq6HSy/Po=
Subject key identifier:   D8:80:8C:BC:D4:C1:BC:38:76:3E:DF:17:49:A7:B1:48:34:62:CA:7E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184C00D828A12E83FA3BACFB4F53586EC6F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2ICMvNTBvDh2Pt8XSaexSDRiyn4.roa
Signing time:             Mon 28 Nov 2022 21:03:41 +0000
ROA not before:           Mon 28 Nov 2022 21:03:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8075
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c0:0d:82:8a:12:e8:3f:a3:ba:cf:b4:f5:35:86:ec:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 28 21:03:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d8808cbcd4c1bc38763edf1749a7b1483462ca7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:d5:ea:d0:19:ee:a1:17:82:88:37:f7:87:
                    9c:2c:42:61:23:89:c1:cd:7d:a1:25:fe:5f:cb:cb:
                    b0:b1:22:41:ac:4a:67:94:84:0a:34:3b:bd:c8:30:
                    8e:f4:39:fb:6a:00:1b:56:63:2a:76:1d:b5:3b:06:
                    90:99:3e:d2:74:4d:2f:94:f3:13:b8:5d:8b:26:ca:
                    8d:3d:a7:49:40:a7:bb:5b:2c:81:e1:b8:3e:8c:c3:
                    e6:4e:ee:14:ff:3f:b6:68:2d:cd:05:93:26:ac:ea:
                    58:9f:3e:fa:cd:e8:cb:43:ed:d6:ee:0d:71:bc:79:
                    20:1e:2e:4f:b8:37:84:ee:9a:3f:a4:77:a7:f4:56:
                    21:aa:93:f8:dc:60:13:4c:ae:8c:13:8f:21:65:68:
                    35:a9:ff:0e:95:09:79:ff:2b:20:d7:08:b4:c4:03:
                    18:50:66:6f:e4:a0:bc:d6:56:b1:65:1f:e2:69:6f:
                    9c:5e:6f:bf:70:6f:30:2a:b3:23:e7:96:c8:2e:15:
                    bf:e3:0b:bd:cc:b2:8d:5b:40:8e:5e:da:ce:11:d5:
                    0f:f0:06:8e:6e:84:9d:a5:29:38:ad:ef:e7:87:48:
                    0b:1a:87:84:3b:44:cf:64:7c:76:d0:ad:05:49:e5:
                    26:7e:3e:b8:49:1e:7a:ee:65:ef:72:de:84:01:fb:
                    f8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:80:8C:BC:D4:C1:BC:38:76:3E:DF:17:49:A7:B1:48:34:62:CA:7E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2ICMvNTBvDh2Pt8XSaexSDRiyn4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:17:28:98:73:8d:8c:52:bf:0e:d2:1c:8f:ab:3f:07:ef:82:
         c7:05:bf:06:7b:ca:d1:c6:89:b8:27:e9:5d:d1:b1:d4:d9:ac:
         87:8c:37:88:13:ca:88:45:9e:b4:45:72:84:a2:d6:bb:28:ec:
         24:d3:5c:40:3b:5b:dd:96:01:78:7a:02:52:f5:15:0a:93:5f:
         78:44:59:f0:8b:ea:67:1b:32:4e:51:9d:e3:54:51:1f:3b:80:
         42:7d:ed:5b:11:26:18:dc:eb:a7:ba:4b:0a:fe:2e:c9:a5:cb:
         5b:90:95:81:c0:08:2e:a3:86:5f:8b:a3:f0:6d:15:c1:e3:d0:
         cf:31:38:67:0a:8e:14:1a:97:2e:d6:1f:cf:63:48:d9:3d:1e:
         73:9a:a2:8f:51:57:e3:b9:f9:7e:c4:2e:94:d4:03:f9:0a:3d:
         17:57:1f:f5:36:0e:bd:1d:54:d0:ad:47:a0:2b:f0:e6:70:82:
         c6:bf:62:ea:04:83:5c:e9:64:d1:49:8c:31:d8:42:1b:7d:15:
         6d:d8:82:e1:07:23:63:d5:3f:9d:b1:bf:3b:50:22:2b:e8:e6:
         53:48:5c:04:29:f3:f6:c8:49:05:1a:50:82:a7:5a:6f:13:7b:
         3d:d5:32:0e:0c:a4:64:2a:14:d0:ad:e0:76:f0:ef:5d:34:21:
         a4:6b:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----