Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6zBHKW88qhVO44F0Lot47oIuVrg.roa
File:                     6zBHKW88qhVO44F0Lot47oIuVrg.roa (raw, json)
Hash identifier:          q26DjxYmXInpGHVWret2JGbY4pXB6Fm54Ye4FTunbJE=
Subject key identifier:   EB:30:47:29:6F:3C:AA:15:4E:E3:81:74:2E:8B:78:EE:82:2E:56:B8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01826CEFFF156BB7E7623E79C6DC8E98D4D7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6zBHKW88qhVO44F0Lot47oIuVrg.roa
Signing time:             Fri 05 Aug 2022 07:37:23 +0000
ROA not before:           Fri 05 Aug 2022 07:37:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203635
IP address blocks:        2a06:a005:14d0::/44 maxlen: 48
                          2a06:a005:1490::/44 maxlen: 48
                          2a06:a005:1040::/44 maxlen: 48
                          2a06:a005:14b0::/44 maxlen: 48
                          2a06:a005:14c0::/44 maxlen: 48
                          2a06:a005:14a0::/44 maxlen: 48
                          2a06:a005:1050::/44 maxlen: 48
                          2a06:a005:1600::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:6c:ef:ff:15:6b:b7:e7:62:3e:79:c6:dc:8e:98:d4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  5 07:37:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb3047296f3caa154ee381742e8b78ee822e56b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:3c:e5:62:9c:91:25:39:a2:9e:fe:df:d0:
                    fd:64:06:70:a0:d1:5e:b3:30:fe:ef:de:71:50:84:
                    91:f4:a5:14:c7:66:c4:1f:d6:58:b9:29:bb:7c:61:
                    b1:63:a7:e6:fc:08:57:1d:55:e8:55:e5:14:37:f9:
                    81:54:8d:b3:74:45:b5:35:60:8d:d3:e6:0d:28:c3:
                    cd:e8:52:34:75:d1:47:82:87:e1:74:4a:5b:58:d8:
                    ed:7f:d7:5b:86:b1:82:4e:8b:2b:19:b5:bb:43:86:
                    f2:f9:cb:ad:2d:b1:19:3e:dd:c1:1a:66:5d:23:f4:
                    fb:91:47:5b:7e:46:83:28:2d:95:b1:90:9a:d3:8a:
                    7a:72:09:0c:ae:aa:9f:97:70:00:46:22:2b:4f:7a:
                    7c:57:cd:cc:b4:f9:1b:04:f9:f2:58:63:2a:54:60:
                    4e:25:4d:cf:5d:0d:6a:d8:1c:4b:a3:20:e9:c1:1a:
                    1a:f4:2b:e9:a7:e7:38:c4:1e:b3:66:5a:b8:f2:87:
                    e5:b9:f8:35:33:6d:7b:31:07:4a:7d:a2:9a:52:94:
                    05:e0:25:24:b0:21:bf:79:ed:4b:1e:94:b8:a9:f6:
                    0b:4c:6a:73:5d:06:8d:a6:93:50:53:4b:7f:16:e2:
                    ec:27:33:b4:53:e6:95:77:c3:f5:50:d4:b1:47:b3:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:30:47:29:6F:3C:AA:15:4E:E3:81:74:2E:8B:78:EE:82:2E:56:B8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6zBHKW88qhVO44F0Lot47oIuVrg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1040::/43
                  2a06:a005:1490::-2a06:a005:14df:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1600::/44
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:65:34:25:16:49:31:e6:cd:82:a6:f8:5e:4b:b4:1a:da:
         95:ef:c5:56:6c:6d:cd:b6:89:ef:a2:07:a4:61:d3:0a:7d:59:
         a5:86:52:c2:10:09:7a:05:46:56:1c:24:e3:66:d8:d9:f2:80:
         f0:f7:67:35:ef:73:53:6c:aa:56:1b:2f:9c:20:50:38:cf:00:
         62:73:44:b4:d9:d1:74:28:a9:4d:56:27:5a:87:75:8f:eb:1d:
         7f:09:3b:55:f3:f1:b0:50:41:12:1c:98:e4:18:bd:00:11:ee:
         0c:f2:b1:94:dd:b0:85:8d:25:75:98:48:90:a8:51:8d:60:16:
         73:bf:ee:51:72:42:1e:ba:dc:59:e2:f2:76:fe:b4:1d:58:86:
         23:94:1d:b3:d9:59:83:19:1c:e3:21:14:89:57:6b:e5:ca:d8:
         5e:21:77:c5:99:75:3d:4a:a5:81:00:71:f5:61:7a:38:c7:9b:
         d7:22:72:12:29:56:d7:b1:8f:03:0c:15:80:77:d3:e4:2d:1a:
         6f:5d:cd:9a:51:05:3a:23:02:36:3d:65:80:82:b1:58:ae:b4:
         2c:95:a0:b8:fe:c8:0c:df:f3:a6:c8:b1:85:1c:6d:8d:c2:16:
         09:5c:0f:3c:ec:72:e2:71:ef:8d:bb:1e:b6:1e:9e:83:be:55:
         38:88:99:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----