Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5UJSHW5ZE0Wl2s3cQMw3MpuNG6s.roa
File:                     5UJSHW5ZE0Wl2s3cQMw3MpuNG6s.roa (raw, json)
Hash identifier:          9RaPRagV9DSea9jCjacICpanUxplxEM1hh+e51ds0AY=
Subject key identifier:   E5:42:52:1D:6E:59:13:45:A5:DA:CD:DC:40:CC:37:32:9B:8D:1B:AB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       178ADB7A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5UJSHW5ZE0Wl2s3cQMw3MpuNG6s.roa
Signing time:             Tue 29 Mar 2022 13:53:45 +0000
ROA not before:           Tue 29 Mar 2022 13:53:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210925
IP address blocks:        2a06:a005:14::/48 maxlen: 48
                          2a06:a005:15::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394976122 (0x178adb7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Mar 29 13:53:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e542521d6e591345a5dacddc40cc37329b8d1bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ba:bb:28:8d:6d:99:de:d3:23:5d:70:11:50:
                    45:45:18:7e:32:4e:6f:15:10:65:ab:60:d7:66:c5:
                    dd:80:22:a2:90:3b:41:cd:28:79:a6:f6:bd:67:4d:
                    07:fa:b6:10:e1:0c:e5:ad:33:f5:c1:83:29:47:4e:
                    0b:e0:8a:78:5d:0b:c2:5d:dd:14:bd:73:79:e5:00:
                    1e:6d:1c:cf:2c:d7:a4:68:3d:89:b1:81:3a:c9:d1:
                    14:5f:3d:9e:bc:8e:ea:e8:00:7e:c7:a4:01:d3:83:
                    0d:bf:2b:6c:9b:16:9b:80:bf:2f:7b:a4:42:25:ed:
                    86:74:bc:d9:55:f9:9a:1e:a8:01:71:48:cc:b7:94:
                    69:87:00:b9:d6:dd:02:ef:e0:45:1b:b0:a6:59:82:
                    83:1d:3c:81:3a:bd:0b:f3:67:e7:04:a7:44:92:85:
                    f6:cd:72:4c:7a:e9:5f:df:29:6d:b7:46:15:b2:48:
                    88:9d:9c:27:30:32:d2:b0:ab:c0:74:21:c7:2d:03:
                    3f:7a:c9:d8:03:84:5e:05:d6:61:7f:a9:b2:c2:e8:
                    81:4a:94:07:99:dd:23:16:f1:b5:3e:58:79:47:47:
                    32:ae:63:88:27:a9:92:59:d3:dc:35:70:2d:f7:29:
                    2d:e6:dc:8f:f4:a1:fe:83:e9:8f:c8:04:7d:ec:f4:
                    f0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:42:52:1D:6E:59:13:45:A5:DA:CD:DC:40:CC:37:32:9B:8D:1B:AB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5UJSHW5ZE0Wl2s3cQMw3MpuNG6s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:14::/47

    Signature Algorithm: sha256WithRSAEncryption
         36:28:0e:c7:45:12:bd:65:a0:d1:4f:69:d9:1c:a0:3f:df:7f:
         7d:82:c5:fb:b4:ad:c0:68:f7:7f:b9:49:5d:d3:66:36:56:b3:
         d9:e6:e9:b2:0c:4f:8d:52:21:9f:89:b9:b0:e5:20:2b:24:6b:
         bc:76:b4:60:31:1f:5c:d0:39:f7:9d:38:4f:f5:cb:4a:28:16:
         18:0f:c9:55:bd:f3:11:a6:ec:0a:e9:52:2b:13:26:27:64:88:
         5a:a2:a7:89:1d:18:4c:f6:c6:07:87:2e:0d:46:e8:39:a0:a8:
         5c:59:28:54:eb:48:cc:eb:5a:dd:eb:92:06:0c:3b:aa:b1:f5:
         94:00:d7:cb:b4:7a:3c:84:0e:d3:22:e8:2c:f1:c0:b9:4d:1d:
         41:b9:90:dd:10:22:3c:a6:e1:49:93:c0:62:13:1c:2d:cd:9c:
         57:b2:26:92:b4:b4:45:56:14:1e:24:a2:eb:ec:19:84:10:93:
         4b:78:f6:83:0f:bd:e9:da:08:b7:4d:d6:94:f1:42:a2:af:56:
         37:ba:9c:f8:cf:db:59:75:6a:c4:e3:09:37:60:e6:44:9b:f9:
         4e:60:09:37:cb:e4:bb:0e:4b:30:a5:84:d3:0f:6c:90:21:e5:
         98:62:96:78:d0:43:3c:9b:89:7f:87:52:0a:df:67:46:49:0f:
         58:dd:82:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----