Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4WiLo3wsrKGqNFY05jRFO0ezscs.roa
File:                     4WiLo3wsrKGqNFY05jRFO0ezscs.roa (raw, json)
Hash identifier:          6EbJAOzlUDX3+5gcUOBamMnS8pIv3raa2fxg7FAUCzk=
Subject key identifier:   E1:68:8B:A3:7C:2C:AC:A1:AA:34:56:34:E6:34:45:3B:47:B3:B1:CB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182EEE81D83CF06FF2688A7161768BE578E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4WiLo3wsrKGqNFY05jRFO0ezscs.roa
Signing time:             Tue 30 Aug 2022 13:19:25 +0000
ROA not before:           Tue 30 Aug 2022 13:19:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210260
IP address blocks:        2a06:a001:a0b0::/44 maxlen: 48
                          2a06:a005:1a20::/44 maxlen: 48
                          2a06:a005:20::/44 maxlen: 48
                          2a06:a005:40::/44 maxlen: 48
                          2a06:a005:1a40::/44 maxlen: 48
                          2a06:a005:1a60::/44 maxlen: 48
                          2a06:a005:1650::/44 maxlen: 48
                          2a06:a005:50::/44 maxlen: 48
                          2a06:a005:1a50::/44 maxlen: 48
                          2a06:a005:30::/44 maxlen: 48
                          2a06:a005:1a30::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ee:e8:1d:83:cf:06:ff:26:88:a7:16:17:68:be:57:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 30 13:19:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e1688ba37c2caca1aa345634e634453b47b3b1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:a5:22:9f:70:3e:e2:c3:47:95:25:5f:a1:
                    5b:ff:ed:5c:79:8d:a7:f2:9b:41:aa:84:0e:46:a7:
                    3a:dc:be:59:cc:a1:9e:13:56:e7:35:81:8e:8a:55:
                    f8:bc:38:cf:ee:57:85:89:ec:44:c9:62:35:3c:0c:
                    87:e1:63:70:2f:68:ac:d9:fd:af:af:c3:ce:e8:6a:
                    26:ac:0d:d5:67:c3:ab:e4:0e:d7:3f:94:cc:d9:1f:
                    f0:28:0b:83:c4:2e:f9:97:d2:c9:57:32:1c:6f:03:
                    17:7b:4b:9a:d1:55:cb:40:2c:72:65:62:fd:cd:76:
                    7a:60:0c:1f:50:48:40:06:fe:00:c4:b3:db:47:20:
                    74:c4:7f:d5:16:4b:7d:5c:50:6e:2d:08:8a:bf:30:
                    a6:7c:32:a2:3d:d5:42:07:d3:76:2b:b2:79:4d:51:
                    67:13:62:94:7d:8b:2e:bb:89:11:1c:d1:83:00:92:
                    d7:01:0f:d2:0e:77:84:4b:0a:79:fe:50:86:4d:43:
                    d9:66:9e:c8:dc:11:49:66:f4:0e:42:5e:5a:bb:cc:
                    14:11:de:d7:67:2a:3e:0f:31:62:6c:ad:2b:1e:3d:
                    de:97:c3:af:61:f0:53:37:e2:20:8c:c5:ab:99:6a:
                    81:16:2e:37:b6:a5:11:86:b0:64:01:10:bc:17:25:
                    c7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:68:8B:A3:7C:2C:AC:A1:AA:34:56:34:E6:34:45:3B:47:B3:B1:CB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4WiLo3wsrKGqNFY05jRFO0ezscs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a0b0::/44
                  2a06:a005:20::-2a06:a005:5f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1650::/44
                  2a06:a005:1a20::-2a06:a005:1a6f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         61:0a:9c:53:ba:28:17:46:4d:44:6a:d9:80:a0:07:a1:60:60:
         89:90:e0:3a:62:46:bf:9a:76:c8:e7:dd:55:00:66:33:36:aa:
         5e:1f:02:2c:cf:42:a7:b9:9c:86:9f:d8:5f:f5:f7:0c:26:6c:
         96:9f:06:ff:4f:d5:cf:8c:9c:2f:19:0f:81:c6:9e:78:35:e3:
         f0:42:c5:fa:e0:96:63:42:f6:18:7d:62:81:e2:4b:d9:60:56:
         49:51:07:d2:87:85:b2:c8:7b:68:f4:7a:8c:c6:ee:64:8b:50:
         bc:43:1e:9b:c7:0d:d4:d6:2b:a9:4a:a9:61:ad:f8:70:5a:fd:
         2c:6b:79:04:15:ce:b2:33:7d:b5:86:65:60:ed:e2:fb:23:26:
         27:4a:ab:83:c4:0b:85:36:69:9a:b4:7e:74:38:3d:2c:9e:31:
         0b:a9:75:0b:22:24:c0:0e:91:76:8d:15:22:8f:cf:5f:da:a9:
         f5:86:a4:7c:92:2c:ca:1a:af:c0:ae:f1:ac:28:63:98:2d:8d:
         08:0f:63:39:4c:71:7c:bb:a0:2a:5e:b6:98:ae:4e:c7:76:ba:
         db:d8:0f:3a:2d:ac:e0:ac:0e:ed:49:6d:8f:5f:7f:a6:f9:ea:
         15:eb:78:58:40:d8:3b:0c:48:92:c4:c3:5b:7a:c4:fa:1e:d9:
         5c:2c:65:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----