Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6pyiy8I6ZaI9RQvia4CchO2Qc-o.roa
File:                     6pyiy8I6ZaI9RQvia4CchO2Qc-o.roa (raw, json)
Hash identifier:          6w4TQkMeRPQ/AlA9A3pvQE456Gv/ZMWfq/TU7npwR+Q=
Subject key identifier:   EA:9C:A2:CB:C2:3A:65:A2:3D:45:0B:E2:6B:80:9C:84:ED:90:73:EA
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181D95789371DDD0BF917D86AFD8ECD7DAA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6pyiy8I6ZaI9RQvia4CchO2Qc-o.roa
Signing time:             Thu 07 Jul 2022 15:46:41 +0000
ROA not before:           Thu 07 Jul 2022 15:46:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60326
IP address blocks:        2a06:a005:1060::/44 maxlen: 48
                          2a06:a005:8f0::/44 maxlen: 48
                          2a06:a005:590::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d9:57:89:37:1d:dd:0b:f9:17:d8:6a:fd:8e:cd:7d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  7 15:46:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea9ca2cbc23a65a23d450be26b809c84ed9073ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f7:77:a0:12:db:5b:80:51:ea:89:24:51:c2:
                    1a:78:f3:d5:28:e5:1a:8b:58:43:b8:f3:b4:57:f9:
                    3f:5a:27:54:ff:31:21:61:08:a7:ba:35:57:27:b5:
                    c5:28:69:3e:c5:c7:31:d5:7d:b7:b7:d9:f5:6e:a0:
                    e3:52:7c:c4:f6:37:52:65:f3:63:2d:5e:8c:23:44:
                    71:05:8b:8d:d1:bc:b0:b7:40:e3:8f:44:c1:8e:e9:
                    c7:fc:ff:57:5c:35:4b:f8:a7:e0:be:a2:cf:b7:a2:
                    43:54:b6:af:bb:15:6e:c0:0d:b1:60:6a:c3:b3:08:
                    92:8b:73:48:64:bb:25:5f:9e:60:13:42:4b:9b:a9:
                    ef:e9:b3:3d:29:71:e9:14:e5:23:09:93:01:dd:72:
                    b4:07:05:90:72:1a:fe:19:5c:0f:96:cd:fd:39:2b:
                    f8:4a:f4:3c:4c:7a:4e:d0:23:a8:03:4b:02:4f:23:
                    8b:63:74:9c:1d:d1:71:98:02:63:35:dd:a2:89:26:
                    5e:00:be:db:6a:07:68:07:0f:6d:e6:44:93:50:78:
                    a0:0f:a6:e0:d3:fd:58:33:ed:de:fe:f5:f0:0e:be:
                    1f:03:d0:8e:16:9d:46:1d:70:66:d7:5c:58:ad:7f:
                    ed:cd:7b:60:dc:b5:de:d5:b5:53:c8:3b:15:98:23:
                    5b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9C:A2:CB:C2:3A:65:A2:3D:45:0B:E2:6B:80:9C:84:ED:90:73:EA
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6pyiy8I6ZaI9RQvia4CchO2Qc-o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:590::/44
                  2a06:a005:8f0::/44
                  2a06:a005:1060::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:25:20:a1:d0:2c:d6:95:5c:3b:3e:67:80:ac:99:21:5e:b9:
         9b:2c:5a:12:c5:ca:b2:e0:b0:00:32:03:61:69:7d:d6:d3:65:
         df:be:2a:60:07:61:46:64:b2:d6:ea:21:e3:f8:37:6f:0c:5f:
         5e:59:4a:05:6e:2b:d8:14:8d:ce:a7:81:23:3e:c8:1a:42:f6:
         1c:74:8a:01:d2:c8:2f:32:2b:89:df:f9:0d:cc:7a:e9:b9:0d:
         97:a3:17:50:9f:93:0a:15:55:a8:6c:41:4c:cc:90:b4:eb:dc:
         70:bc:20:0d:a1:77:20:02:28:2b:af:8d:93:76:60:6a:22:be:
         33:45:67:95:a9:52:dd:d5:2c:04:81:70:30:5f:b2:02:7d:64:
         e1:25:5b:45:a6:e8:93:6c:cb:b1:af:f1:ce:7c:ab:19:e8:98:
         4d:b8:19:af:74:ee:5d:c5:78:4c:5c:4c:e1:ca:72:61:f8:c1:
         9e:a5:5d:28:11:bd:09:e5:61:b7:98:0d:ea:73:de:d2:32:70:
         e2:f4:79:15:0f:a1:c1:47:55:2c:df:7d:9a:b4:71:8c:ae:e5:
         47:05:bb:49:57:7e:e1:b5:6b:81:9a:24:07:d8:04:bb:84:d4:
         ca:c5:91:ed:11:29:a1:95:cb:74:85:e8:57:88:11:62:55:8b:
         24:d2:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----