Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3elUShiCyVNILKA9Ge50vlhLhr8.roa
File:                     3elUShiCyVNILKA9Ge50vlhLhr8.roa (raw, json)
Hash identifier:          YE9/WCyoCbccAinrCxbz2TiJxJs9mmW1FQlqq82k3Lw=
Subject key identifier:   DD:E9:54:4A:18:82:C9:53:48:2C:A0:3D:19:EE:74:BE:58:4B:86:BF
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A799516
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3elUShiCyVNILKA9Ge50vlhLhr8.roa
Signing time:             Wed 01 Jun 2022 14:00:20 +0000
ROA not before:           Wed 01 Jun 2022 14:00:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205088
IP address blocks:        2a06:a005:bc0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444175638 (0x1a799516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun  1 14:00:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dde9544a1882c953482ca03d19ee74be584b86bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:36:6f:64:f2:7e:ce:dc:1d:39:47:21:af:
                    fa:78:79:41:61:bc:88:21:4e:35:76:03:84:da:11:
                    99:38:31:a2:d7:75:0b:3f:b0:b3:7d:5f:c3:ad:31:
                    27:68:cc:d0:bf:0e:3f:f9:ab:bc:c0:9e:cf:26:d0:
                    09:68:00:bd:0f:04:54:ea:75:ec:1e:f0:f5:ef:9c:
                    98:59:3f:ad:0e:28:bf:ba:0d:06:d9:6f:9f:71:d2:
                    4c:52:fe:77:77:aa:2c:c1:f5:44:90:06:24:eb:3d:
                    f1:1f:44:b9:bc:93:9f:3d:65:14:6a:61:ea:ba:40:
                    55:5d:5c:44:fd:06:4d:db:dd:e3:13:6b:a1:a8:77:
                    f5:eb:ea:17:dc:35:70:0a:7f:86:05:40:79:9a:9f:
                    8d:90:3c:b7:1c:f8:24:0f:59:28:da:47:bb:1a:e3:
                    ef:5f:af:d6:98:63:fe:d1:58:a2:31:98:2d:08:72:
                    76:06:20:69:fb:d8:5c:10:25:c9:2f:94:05:41:c6:
                    34:17:e5:51:fe:0b:a5:67:f4:8e:de:bf:7f:10:94:
                    af:73:fd:f0:a5:5e:fe:f6:4f:bb:53:3e:5f:35:28:
                    ea:4d:ff:84:ab:a6:c9:f6:93:ab:12:72:b4:45:1d:
                    9a:8f:bb:67:70:d9:2d:fa:e7:53:fe:60:7e:2e:7c:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E9:54:4A:18:82:C9:53:48:2C:A0:3D:19:EE:74:BE:58:4B:86:BF
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3elUShiCyVNILKA9Ge50vlhLhr8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:bc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:c7:88:c1:00:65:62:36:4b:25:ce:6b:3d:25:34:cb:19:19:
         4c:54:a5:91:4e:20:12:6e:d8:70:e2:d3:09:e2:54:45:f1:18:
         89:55:04:7a:45:d1:fb:1e:5b:69:81:d4:29:2a:f0:53:49:84:
         2b:1b:45:1c:e4:67:8a:23:cc:73:f6:53:15:6b:e3:02:7b:a2:
         0b:dc:07:36:3a:9f:ae:95:f0:bd:f3:65:28:c9:f8:65:33:77:
         7f:f1:1b:dd:15:6a:24:9b:66:fb:48:b9:f8:f2:c4:6a:c1:c6:
         ab:46:a5:51:c4:1d:1c:19:ba:fe:19:df:7d:4f:b6:8e:d5:e5:
         52:98:72:2a:57:91:15:da:14:11:c8:f7:bd:36:8e:3a:cd:aa:
         14:ae:ef:9c:71:e6:17:0b:3f:f4:90:79:60:33:d9:3c:e4:c2:
         93:ac:66:1e:ee:78:c7:63:e6:95:1a:be:22:df:e0:08:a3:68:
         8b:46:c3:a1:d6:93:b0:db:7c:e9:0c:65:71:d7:6c:82:bd:eb:
         89:38:75:03:58:46:91:18:25:c4:51:d1:e5:63:f9:8a:a4:a5:
         41:41:5b:e8:92:bc:0e:98:c1:0a:77:2c:bc:e7:a9:f6:80:6c:
         23:15:17:4c:d6:e7:7e:36:74:c7:df:03:8e:ef:3b:63:39:7a:
         64:99:bc:58
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGnmVFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYw
MTE0MDAyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGRlOTU0NGExODgy
Yzk1MzQ4MmNhMDNkMTllZTc0YmU1ODRiODZiZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANLMNm9k8n7O3B05RyGv+nh5QWG8iCFONXYDhNoRmTgxotd1
Cz+ws31fw60xJ2jM0L8OP/mrvMCezybQCWgAvQ8EVOp17B7w9e+cmFk/rQ4ov7oN
Btlvn3HSTFL+d3eqLMH1RJAGJOs98R9EubyTnz1lFGph6rpAVV1cRP0GTdvd4xNr
oah39evqF9w1cAp/hgVAeZqfjZA8txz4JA9ZKNpHuxrj71+v1phj/tFYojGYLQhy
dgYgafvYXBAlyS+UBUHGNBflUf4LpWf0jt6/fxCUr3P98KVe/vZPu1M+XzUo6k3/
hKumyfaTqxJytEUdmo+7Z3DZLfrnU/5gfi58dxUCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTd6VRKGILJU0gsoD0Z7nS+WEuGvzAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
LzNlbFVTaGlDeVZOSUxLQTlHZTUwdmxoTGhyOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGoAULwDANBgkqhkiG9w0BAQsF
AAOCAQEAf8eIwQBlYjZLJc5rPSU0yxkZTFSlkU4gEm7YcOLTCeJURfEYiVUEekXR
+x5baYHUKSrwU0mEKxtFHORniiPMc/ZTFWvjAnuiC9wHNjqfrpXwvfNlKMn4ZTN3
f/Eb3RVqJJtm+0i5+PLEasHGq0alUcQdHBm6/hnffU+2jtXlUphyKleRFdoUEcj3
vTaOOs2qFK7vnHHmFws/9JB5YDPZPOTCk6xmHu54x2PmlRq+It/gCKNoi0bDodaT
sNt86Qxlcddsgr3riTh1A1hGkRglxFHR5WP5iqSlQUFb6JK8DpjBCncsvOep9oBs
IxUXTNbnfjZ0x98Dju87Yzl6ZJm8WA==
-----END CERTIFICATE-----