Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3nQIrerqPQMgAtPUh3EIdmaVyqs.roa
File:                     3nQIrerqPQMgAtPUh3EIdmaVyqs.roa (raw, json)
Hash identifier:          Ld4oAHC5vWHVJKlTQmJmcmX2gr6vkIljtvXKVwPR6C0=
Subject key identifier:   DE:74:08:AD:EA:EA:3D:03:20:02:D3:D4:87:71:08:76:66:95:CA:AB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183D92F7F2FD89948AC55685694CEFAD24A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3nQIrerqPQMgAtPUh3EIdmaVyqs.roa
Signing time:             Sat 15 Oct 2022 01:08:32 +0000
ROA not before:           Sat 15 Oct 2022 01:08:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41666
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d9:2f:7f:2f:d8:99:48:ac:55:68:56:94:ce:fa:d2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 15 01:08:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=de7408adeaea3d032002d3d4877108766695caab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:b0:9d:93:2f:da:f7:91:92:1e:4a:a1:19:
                    20:0c:47:69:d2:cf:a2:e1:2d:c1:9e:2a:58:d6:ae:
                    1b:01:58:0e:bb:67:15:a0:4b:e5:eb:d5:1c:67:0b:
                    ba:f9:35:6b:66:d8:eb:69:64:e2:d1:cf:42:17:88:
                    c4:61:0d:ee:96:80:3e:5e:0a:85:4c:e6:37:95:9a:
                    da:22:47:28:1c:08:07:fc:2b:1f:cb:73:51:2d:fd:
                    60:9a:10:68:cc:c3:51:cf:71:3c:15:7f:61:fd:da:
                    e3:11:5f:0d:a1:f5:13:9d:0b:1c:16:aa:1f:22:2d:
                    75:55:fa:2d:e1:66:6a:b7:3e:af:fc:98:92:f3:23:
                    1f:09:24:f3:bd:e9:f8:60:f3:f2:26:75:a8:59:a5:
                    66:3b:7c:22:36:0e:cb:d6:90:18:a2:37:2a:db:52:
                    81:2b:83:51:d2:ad:ae:eb:b8:a7:4a:eb:b1:7a:21:
                    7a:68:4f:13:07:d2:70:eb:c1:04:62:41:81:6b:89:
                    c5:ce:92:76:bf:59:d2:1c:c7:c7:4e:ad:99:95:bc:
                    a2:38:d7:af:71:c9:c9:5d:3b:b0:e3:d8:7e:2d:58:
                    58:ef:cc:90:f8:26:d7:db:19:da:78:b3:6a:21:61:
                    79:26:55:11:e8:dd:2e:1e:91:83:69:7a:bc:6b:27:
                    2e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:74:08:AD:EA:EA:3D:03:20:02:D3:D4:87:71:08:76:66:95:CA:AB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/3nQIrerqPQMgAtPUh3EIdmaVyqs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:f1:0d:bf:e5:7c:39:0e:eb:1e:04:1d:05:3b:c8:99:42:09:
         af:1d:4e:a0:2b:9b:a6:42:aa:e3:98:82:79:1a:f0:d1:9c:73:
         0d:68:3c:04:05:f8:ac:bf:60:fc:d0:27:cc:57:73:34:07:b5:
         ae:e8:6b:0b:6f:7b:2e:3e:8d:45:28:03:9d:31:85:71:9f:a6:
         17:51:ae:7d:b4:c6:7c:61:bf:c2:b1:c1:b2:3e:f9:be:96:19:
         47:5a:a3:3e:9f:6a:34:c5:3e:50:7b:a5:3c:35:e2:3e:0d:09:
         5b:1c:fd:0b:d8:00:54:5a:98:80:46:24:95:d7:44:b8:db:89:
         6d:cf:fc:26:5e:b2:b3:70:4f:cc:b5:51:83:cd:b5:f9:0e:ac:
         db:b9:33:f9:57:9d:85:c0:2b:4f:39:07:d5:0c:57:d5:a8:23:
         8f:05:28:b5:8a:4e:37:dc:cd:07:98:c4:e2:1d:f5:54:4e:28:
         67:8e:57:84:36:ff:14:f8:4a:3a:fd:4e:54:be:8a:08:f6:b6:
         66:4e:63:9e:8f:62:a5:59:82:c0:0f:81:03:7a:0c:97:e4:96:
         5c:6f:92:f4:d2:6e:83:d1:fe:c8:59:d9:77:82:c4:09:ff:ad:
         cc:83:83:49:ae:ec:08:29:1e:5d:3f:b9:de:b9:2a:33:b1:b4:
         72:ac:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----