Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2UxPpSar3VAl2wfHxN5yZPQSxGQ.roa
File:                     2UxPpSar3VAl2wfHxN5yZPQSxGQ.roa (raw, json)
Hash identifier:          Qw0Khra/+MjqroRNag5kTF/AubeUAja8YyYYWyDMIhk=
Subject key identifier:   D9:4C:4F:A5:26:AB:DD:50:25:DB:07:C7:C4:DE:72:64:F4:12:C4:64
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18846982
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2UxPpSar3VAl2wfHxN5yZPQSxGQ.roa
Signing time:             Fri 22 Apr 2022 05:24:59 +0000
ROA not before:           Fri 22 Apr 2022 05:24:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210932
IP address blocks:        2a06:a005:570::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411330946 (0x18846982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 22 05:24:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d94c4fa526abdd5025db07c7c4de7264f412c464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1d:5c:33:4d:28:c6:40:b8:f9:53:ea:7a:f5:
                    1b:00:f4:23:64:fc:27:d1:a6:9e:a0:e3:da:1f:47:
                    c2:b8:dc:2b:1a:e2:aa:19:18:52:ef:f7:61:10:b0:
                    00:b4:44:1e:e8:36:bd:ca:54:f5:60:e3:4b:b4:ad:
                    44:e8:d2:45:5b:a1:53:8a:b4:c5:b5:45:de:e6:92:
                    81:de:b7:10:42:c7:a0:ed:be:62:3a:94:a4:4f:07:
                    42:33:da:5c:1c:92:6c:36:0d:d0:fe:70:b1:4f:52:
                    37:cf:d8:8a:a9:a7:71:1c:d4:79:27:99:11:32:a9:
                    1b:b1:49:10:3c:32:fc:7c:7b:67:8d:b8:13:c5:e1:
                    9b:59:84:04:a3:60:73:8e:b9:c2:50:fb:87:3a:7b:
                    e6:11:ec:d4:8d:c2:6b:65:95:28:bb:8f:a7:df:5c:
                    eb:4f:9a:be:7a:11:37:4c:84:01:74:22:02:51:46:
                    03:d1:9c:83:e1:f5:b5:a4:91:5b:77:3c:d2:27:ca:
                    5d:62:f0:10:a7:54:50:a2:fe:ce:78:06:cb:51:78:
                    df:9f:66:e2:1f:13:50:f9:45:e1:ab:d4:f8:5b:e1:
                    7b:6d:47:14:8b:ad:b8:f7:b9:c3:a3:e8:4f:82:b9:
                    b4:53:8d:30:ac:22:3b:a5:70:d9:34:16:6a:ef:ec:
                    8d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4C:4F:A5:26:AB:DD:50:25:DB:07:C7:C4:DE:72:64:F4:12:C4:64
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2UxPpSar3VAl2wfHxN5yZPQSxGQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:570::/44

    Signature Algorithm: sha256WithRSAEncryption
         3f:a0:59:a7:e1:79:52:1e:76:42:a3:78:e5:c7:e6:79:cc:73:
         97:3c:86:0d:61:d4:57:dc:fc:43:bc:9d:5e:09:32:af:d0:25:
         39:b0:14:c5:70:bc:32:6c:fe:de:ab:c6:83:ae:25:1a:2e:62:
         ff:c3:a5:14:71:19:5f:98:74:5d:9b:58:28:89:17:a7:6e:be:
         ee:5f:c5:2f:61:d3:7d:39:6e:43:64:c3:70:4d:ee:ef:9c:0c:
         67:62:3b:b2:88:dd:f5:da:82:ea:ae:2d:c8:85:01:cf:e5:a9:
         ea:28:4a:87:7d:36:8a:00:61:b0:2e:50:2a:71:86:9e:24:62:
         a5:81:7c:a7:89:b9:a1:af:f9:c7:fb:e6:de:fb:c2:9e:3f:8e:
         3e:6d:05:91:b9:78:1a:3e:5f:aa:17:dd:a8:c5:90:3f:c8:2f:
         97:1e:ef:c8:16:f6:54:b6:64:db:eb:26:a7:4b:fe:48:f5:3e:
         93:f9:ee:64:e9:33:c5:0b:53:b9:49:2c:52:df:ec:ff:7e:bb:
         52:95:3b:20:ec:7c:cf:ce:eb:d9:39:3d:92:59:a7:3a:fd:3b:
         4f:06:ca:d7:46:c8:5d:a9:d5:60:49:9b:b5:51:67:9f:3f:c0:
         22:ec:d7:d8:ad:1c:cb:54:a2:3e:64:f9:b1:07:12:20:07:39:
         c0:d3:2a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----