Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5udGG_zqQrHXbW4Lx0LMF8TW8ko.roa
File:                     5udGG_zqQrHXbW4Lx0LMF8TW8ko.roa (raw, json)
Hash identifier:          o/v9iNxCiENTwQeqBcnu4vypFF8XE1TVRbq6y2i540U=
Subject key identifier:   E6:E7:46:1B:FC:EA:42:B1:D7:6D:6E:0B:C7:42:CC:17:C4:D6:F2:4A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01839DD3166B84E3A40FEB386ABA31771B88
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5udGG_zqQrHXbW4Lx0LMF8TW8ko.roa
Signing time:             Mon 03 Oct 2022 12:29:59 +0000
ROA not before:           Mon 03 Oct 2022 12:29:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57406
IP address blocks:        2a06:a005:b60::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:9d:d3:16:6b:84:e3:a4:0f:eb:38:6a:ba:31:77:1b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct  3 12:29:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e6e7461bfcea42b1d76d6e0bc742cc17c4d6f24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:53:27:9f:3f:74:e1:f5:64:ea:24:68:1a:
                    09:ae:86:d5:14:4b:8b:04:c5:31:7e:d8:c6:c2:65:
                    fe:0c:3d:2a:7b:04:be:e2:f5:a6:d2:05:a5:6a:af:
                    99:27:33:0f:ed:47:a2:9a:8a:84:fc:7b:f8:6b:59:
                    6e:80:14:db:b7:02:29:c2:29:fa:19:fe:aa:b7:13:
                    18:9a:24:6d:b5:6f:d6:36:7f:ca:1c:d1:d4:c7:c8:
                    37:43:1c:5f:c6:14:58:63:25:55:2f:bf:e0:e0:3f:
                    fc:9b:32:b6:bd:94:1b:2d:6f:47:51:f4:75:da:3a:
                    cf:a6:97:db:c0:80:3e:34:dd:b1:fd:68:28:b5:b5:
                    ad:6c:8b:75:ce:c4:87:ff:ed:77:f7:5e:2a:b0:fe:
                    2e:f7:34:46:f7:6b:23:91:34:c9:d7:b1:9d:15:05:
                    9e:dc:85:2b:d9:6c:16:d4:50:79:e4:f8:41:a7:37:
                    08:cd:a4:b5:6a:80:e4:88:46:9d:2c:88:c1:72:b5:
                    3c:2c:43:c5:34:83:a7:3a:c8:45:70:99:4b:11:b3:
                    e3:35:1e:e0:5d:68:c0:bb:d8:c8:79:8e:41:43:d0:
                    fa:92:65:95:f0:29:fd:94:de:30:e1:41:0d:79:c0:
                    b0:bb:8b:3c:8d:e7:b8:1f:ea:88:01:6f:8f:7a:e5:
                    ab:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E7:46:1B:FC:EA:42:B1:D7:6D:6E:0B:C7:42:CC:17:C4:D6:F2:4A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/5udGG_zqQrHXbW4Lx0LMF8TW8ko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b60::/44

    Signature Algorithm: sha256WithRSAEncryption
         63:b5:f2:fe:ed:2e:c3:fa:2b:65:4a:2c:20:52:0e:05:e8:96:
         50:bc:49:bf:06:40:9f:b1:1c:6e:e3:f7:ee:78:03:dd:68:87:
         64:18:46:50:78:cb:ff:fa:10:9d:3f:d3:05:97:91:d2:cf:cf:
         bc:9a:91:64:7a:7b:b4:a8:19:56:ff:42:1a:44:c2:05:2d:88:
         c3:c5:8f:c1:d3:e3:f3:9f:bf:e7:f3:f7:4e:d8:5b:6b:4d:c5:
         fe:06:38:d9:05:28:b4:56:04:d5:96:a6:ba:74:4c:0a:4f:3e:
         04:3c:69:75:7f:b3:cd:0f:1d:98:19:bb:82:65:3c:11:46:be:
         87:1f:a2:2a:c2:15:ff:e4:1a:de:34:ec:77:01:fb:0f:79:41:
         46:cd:a4:0e:2a:66:c8:a8:7c:15:58:d5:46:52:90:b0:91:0e:
         71:19:82:21:56:9f:ce:42:b1:8a:16:30:14:de:02:01:2c:be:
         e0:1b:a8:04:71:89:5e:14:2e:75:bb:f8:35:5d:cd:3b:17:fe:
         07:32:60:fb:67:79:5e:62:bd:e8:e1:d0:2c:31:72:75:09:90:
         87:7e:3e:1c:f6:8d:34:df:75:a5:1e:b6:75:34:a5:1f:fa:42:
         26:1a:24:99:58:58:5a:74:15:a3:13:ba:52:5e:65:18:6b:4c:
         a9:53:77:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----