Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4H9goHhDiWaDEHg36VXqG4j1fJU.roa
File:                     4H9goHhDiWaDEHg36VXqG4j1fJU.roa (raw, json)
Hash identifier:          3dKv3gSM/s7NWuCLXBkfky2VlHgPlQTHQHhq1cZmcBc=
Subject key identifier:   E0:7F:60:A0:78:43:89:66:83:10:78:37:E9:55:EA:1B:88:F5:7C:95
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184F35B0E05564CD945D4AC72FF77AF0071
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4H9goHhDiWaDEHg36VXqG4j1fJU.roa
Signing time:             Thu 08 Dec 2022 20:09:01 +0000
ROA not before:           Thu 08 Dec 2022 20:09:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200952
IP address blocks:        2a06:a005:2570::/44 maxlen: 48
                          2a06:a005:2660::/44 maxlen: 48
                          2a06:a005:2650::/44 maxlen: 48
                          2a06:a005:2640::/44 maxlen: 48
                          2a06:a005:2630::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f3:5b:0e:05:56:4c:d9:45:d4:ac:72:ff:77:af:00:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  8 20:09:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e07f60a07843896683107837e955ea1b88f57c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:35:60:d9:01:bf:48:93:9d:05:f6:4d:f4:
                    5d:67:db:bb:0e:b1:36:df:af:b1:e9:ec:9e:6c:4e:
                    f3:ec:95:d0:c9:29:a2:5b:25:85:4a:b8:39:79:98:
                    91:11:44:85:81:95:a9:cb:71:24:63:d8:75:ee:e6:
                    e8:6a:13:4a:8f:52:8a:49:54:d6:bb:3f:af:25:6a:
                    70:ad:24:3e:5c:ad:8b:f2:a0:60:51:48:61:96:ba:
                    47:19:5c:bb:50:79:06:1e:27:a9:87:a2:3f:04:96:
                    fc:8c:c6:d4:9b:cd:c3:c8:66:3c:18:f3:ba:4f:a9:
                    cc:cd:ed:62:9d:39:67:f4:d3:8a:ea:4c:47:d6:38:
                    c9:51:ea:77:39:c8:e2:6b:ef:ae:a6:29:cb:cd:ae:
                    51:a6:2f:e4:b3:ee:6e:51:6a:c6:dc:3d:a8:de:14:
                    65:94:01:05:46:95:50:df:75:1a:25:e3:ba:69:d5:
                    37:9f:74:a9:48:18:ef:15:36:bc:c1:16:14:97:d7:
                    47:ec:a6:1b:90:b3:22:86:53:a8:a7:78:1d:31:4e:
                    f6:27:28:58:04:06:4f:bc:b6:1d:6e:09:c5:c8:bd:
                    b1:68:e9:e0:c7:2a:35:f3:9d:a8:38:f5:dc:d2:30:
                    cb:69:1b:09:fd:ac:b3:19:00:fa:b0:45:0d:fd:37:
                    d6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7F:60:A0:78:43:89:66:83:10:78:37:E9:55:EA:1B:88:F5:7C:95
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4H9goHhDiWaDEHg36VXqG4j1fJU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2570::/44
                  2a06:a005:2630::-2a06:a005:266f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         9a:c5:e1:ff:3b:93:19:08:71:36:de:3b:7c:f3:f8:5f:de:1a:
         db:85:81:c8:6a:65:a3:ef:56:15:86:d6:3f:72:bb:dc:34:f8:
         20:71:73:29:d0:d4:fc:12:67:ba:d3:87:a0:f4:fb:fa:7e:54:
         85:ac:aa:d8:e7:72:6e:4e:6d:4e:25:10:a8:02:0f:3a:87:9d:
         74:fe:f5:0f:fe:5b:11:c4:23:a5:ad:89:53:bd:83:53:a4:e2:
         61:99:68:6c:a1:7b:f1:50:ab:46:aa:72:e8:01:b8:22:ba:ca:
         7a:bf:b7:71:f0:37:3a:59:85:eb:ed:6c:36:2b:86:3a:a7:b5:
         19:d8:d2:19:c1:a8:04:27:23:76:cf:a6:f9:48:05:01:ab:80:
         72:95:99:b5:44:15:57:fe:7d:b5:df:06:05:9f:f1:79:21:be:
         02:6d:a9:09:e0:a8:78:27:f2:d1:3b:16:d0:c0:df:3b:ee:db:
         c1:11:df:d2:40:68:bf:25:dc:d5:8e:bd:35:0a:28:65:f0:08:
         ac:16:0e:00:6c:9e:25:d6:19:cf:d0:99:5c:08:57:2c:3d:cf:
         fe:75:41:a3:06:1d:35:b1:df:3f:da:09:72:85:d1:fe:c6:a3:
         81:8c:6a:ef:af:8e:fb:28:e5:75:67:4c:ae:ff:f8:e2:f7:55:
         cf:28:ed:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----