Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3EfT4W26NUUPgGq9lH-of_tfwG8.roa
File:                     3EfT4W26NUUPgGq9lH-of_tfwG8.roa (raw, json)
Hash identifier:          8P6i03o7LXipevTYeEObp7/smk5IeNrTBc0uTjA/yXo=
Subject key identifier:   DC:47:D3:E1:6D:BA:35:45:0F:80:6A:BD:94:7F:A8:7F:FB:5F:C0:6F
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B8EC136
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3EfT4W26NUUPgGq9lH-of_tfwG8.roa
Signing time:             Wed 29 Jun 2022 10:20:10 +0000
ROA not before:           Wed 29 Jun 2022 10:20:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     136591
IP address blocks:        2a06:a005:fe0::/44 maxlen: 48
                          2a06:a005:ff0::/44 maxlen: 48
                          2a06:a005:fd0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462340406 (0x1b8ec136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 29 10:20:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dc47d3e16dba35450f806abd947fa87ffb5fc06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:93:c5:e8:48:33:57:30:83:b4:c3:18:a7:
                    00:96:60:76:29:67:a1:01:4f:0d:94:4b:73:35:93:
                    42:32:a1:70:db:6c:55:26:0b:4c:69:0a:55:7e:34:
                    9c:c8:8f:4d:00:d5:ad:a2:69:fd:e0:f6:5d:54:c4:
                    f1:87:c0:1f:37:6f:bc:8e:93:37:4e:7d:6d:24:5b:
                    7d:eb:d4:b8:5c:d3:71:d1:b2:43:56:ab:33:1e:fc:
                    66:42:d6:1d:e5:24:4c:9b:db:2d:24:39:e8:aa:07:
                    fc:de:5c:d7:a9:b7:33:10:54:6a:06:5f:48:db:77:
                    85:36:25:53:c8:c9:59:0a:e8:27:8d:ec:54:e9:53:
                    98:ba:53:1c:d4:34:65:00:7d:a3:81:f3:f2:8f:b3:
                    b1:56:72:c7:ee:7a:9d:09:ce:15:e3:4f:83:e3:88:
                    d9:64:96:b5:ba:e5:83:53:c7:f1:0c:3c:77:c5:53:
                    f9:3f:18:b3:71:f8:03:17:68:3b:a6:ae:b4:1f:95:
                    ae:8a:62:35:7d:0b:e9:74:e3:e8:ba:52:fd:aa:1d:
                    ba:65:79:52:d8:21:ef:f9:32:a7:eb:fc:24:ae:e1:
                    48:eb:45:41:96:20:ac:3e:c5:43:c9:d3:57:e5:34:
                    fe:8b:a2:5e:54:1f:9f:0f:38:8b:ab:9e:34:23:9a:
                    16:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:47:D3:E1:6D:BA:35:45:0F:80:6A:BD:94:7F:A8:7F:FB:5F:C0:6F
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3EfT4W26NUUPgGq9lH-of_tfwG8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:fd0::-2a06:a005:fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         37:33:46:4e:ee:8a:12:eb:9c:13:0e:f8:bd:41:6a:84:3d:cb:
         59:40:e6:ee:8b:62:3b:6f:7e:d7:0d:89:b2:b6:0b:8d:54:c4:
         4d:9c:79:0a:92:36:f2:a0:5f:63:3f:ea:2f:a6:5a:0f:bd:a7:
         3e:6b:94:1d:1d:c8:60:83:ce:81:3a:7c:27:eb:e7:1a:20:fc:
         e2:88:02:7e:bf:c4:4d:e2:86:7c:60:80:22:b3:a1:63:58:64:
         27:94:7f:2f:a0:7e:de:98:32:98:36:b9:d0:c7:e9:53:4e:3e:
         71:12:42:d3:7e:6b:66:4b:01:93:9b:f7:b2:db:54:0e:41:a8:
         a8:74:40:f1:e9:0e:16:0a:4b:62:19:e0:6f:b9:e7:98:bb:2e:
         4c:a4:44:3b:a2:0b:29:b2:c2:71:01:7c:a0:2e:b5:d5:64:01:
         89:59:d8:01:15:60:0f:a7:2d:97:94:69:08:4c:38:aa:98:97:
         6a:ea:45:b8:af:b5:60:a0:00:dc:1a:92:a1:a9:e7:21:51:b0:
         2b:f5:84:49:11:b5:f9:b2:33:45:90:f6:1d:4b:65:8c:b1:23:
         45:42:3e:28:4d:50:14:ee:0f:72:8f:b5:6b:d5:4d:1f:b4:70:
         be:1b:4f:7c:4e:93:63:a3:d0:03:12:95:c3:d2:da:1d:da:af:
         3b:51:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----