Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/45VJdeZCRy5d28KkD0qI7T4fZbU.roa
File:                     45VJdeZCRy5d28KkD0qI7T4fZbU.roa (raw, json)
Hash identifier:          Mh/C+nQsoWyG7CMQroG78yuJ2KUgJv+WgaI4w87TknU=
Subject key identifier:   E3:95:49:75:E6:42:47:2E:5D:DB:C2:A4:0F:4A:88:ED:3E:1F:65:B5
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182457F8F5E388915831232C93967CB63F3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/45VJdeZCRy5d28KkD0qI7T4fZbU.roa
Signing time:             Thu 28 Jul 2022 15:49:23 +0000
ROA not before:           Thu 28 Jul 2022 15:49:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212983
IP address blocks:        2a06:a005:45c::/48 maxlen: 48
                          2a06:a005:43e::/48 maxlen: 48
                          2a06:a005:13::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:45:7f:8f:5e:38:89:15:83:12:32:c9:39:67:cb:63:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 28 15:49:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e3954975e642472e5ddbc2a40f4a88ed3e1f65b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ce:dc:83:99:69:6d:e0:3a:b8:d9:80:70:1f:
                    d5:05:eb:95:d3:a5:e9:22:3f:a4:30:1b:2a:84:ce:
                    1c:f1:59:b8:7c:e7:27:55:aa:9d:1c:07:b0:9c:30:
                    11:e1:33:f0:63:49:60:77:53:49:f8:54:0f:65:01:
                    43:30:59:3e:16:98:8c:8c:8e:46:f9:05:18:4e:d8:
                    96:1d:56:d3:e7:ad:6a:e4:1a:bf:8a:ec:fa:1f:98:
                    19:b0:e4:f0:6e:91:7c:9f:8a:df:eb:3a:ef:5a:e5:
                    dd:78:c9:98:7c:ed:17:82:28:f7:05:d8:ce:c4:22:
                    55:f9:eb:84:70:a6:80:bd:63:ac:6f:b6:9d:75:47:
                    f1:6e:17:11:22:26:eb:d7:60:dd:5f:dd:a1:74:e4:
                    f3:55:b2:c2:e1:ab:84:2d:45:ef:25:f5:e3:56:8e:
                    a3:fb:a4:b6:f5:e0:f9:6b:64:fc:e8:27:5a:7f:f5:
                    ec:2d:2e:e2:ed:21:fc:e6:d9:61:4a:ec:b2:47:bc:
                    29:b5:ac:0f:67:eb:6f:58:e7:b8:88:5e:7a:83:68:
                    b9:42:f9:7a:67:06:97:0b:d7:7a:d4:74:c7:fb:ee:
                    98:57:f2:16:6c:77:39:ca:9a:94:43:8f:79:61:9c:
                    15:6f:b9:7a:25:9d:ce:16:a2:90:5e:1c:0c:4b:da:
                    13:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:95:49:75:E6:42:47:2E:5D:DB:C2:A4:0F:4A:88:ED:3E:1F:65:B5
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/45VJdeZCRy5d28KkD0qI7T4fZbU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:13::/48
                  2a06:a005:43e::/48
                  2a06:a005:45c::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:75:df:54:a8:8d:e6:48:90:82:d2:0a:14:e7:43:62:ff:e6:
         3d:68:77:2f:6b:df:fa:2f:c1:ca:82:70:aa:d2:3e:c1:1f:20:
         b2:83:72:a2:3f:c2:22:cf:3c:6b:e9:bd:cf:94:e6:97:f3:ba:
         f0:1d:e3:e0:f6:36:71:1b:da:eb:8f:44:d3:66:8e:2e:c1:e4:
         68:55:55:29:2c:93:01:58:12:ae:4b:38:a6:03:40:cb:7f:a9:
         98:42:b7:62:62:77:42:15:f4:f3:21:ab:2f:06:be:fd:c4:e3:
         b1:c9:cb:8c:6a:a1:e9:c1:1b:b0:34:d3:9f:3d:b4:0d:8c:fd:
         f7:b5:db:0c:47:15:9e:a6:3e:2d:31:73:69:79:6e:dd:02:d2:
         bb:bd:85:0a:ff:aa:c5:0e:b2:64:7c:8c:bb:01:fb:7a:39:9e:
         3a:48:0c:c4:24:02:90:94:41:f3:7e:e4:9b:fc:fa:a4:a9:b6:
         e7:68:36:8b:83:c6:55:8b:4a:40:62:bc:3c:cb:bc:11:26:9c:
         5e:f7:41:44:76:39:df:51:ab:02:09:89:72:58:ea:ae:37:b7:
         55:66:c7:14:70:02:2d:9b:48:7c:2d:4d:c2:2d:b9:fd:7f:81:
         9d:e5:cc:83:b1:6d:51:3d:54:8b:4d:d4:4b:fa:77:23:d9:16:
         15:3b:a7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----