Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/74Ms8jATJnRRIBzylzjuK5dzGgQ.roa
File:                     74Ms8jATJnRRIBzylzjuK5dzGgQ.roa (raw, json)
Hash identifier:          bWUnvDBnoMcrVKGly+Zm9Mz4kx7BHjd03iOmHqWSpVw=
Subject key identifier:   EF:83:2C:F2:30:13:26:74:51:20:1C:F2:97:38:EE:2B:97:73:1A:04
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184BE37F52942E273154F9E285380B5DE7C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/74Ms8jATJnRRIBzylzjuK5dzGgQ.roa
Signing time:             Mon 28 Nov 2022 12:30:49 +0000
ROA not before:           Mon 28 Nov 2022 12:30:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     138211
IP address blocks:        2a06:a005:520::/44 maxlen: 48
                          2a06:a005:4c0::/44 maxlen: 48
                          2a06:a005:c20::/44 maxlen: 48
                          2a06:a005:7c0::/44 maxlen: 48
                          2a06:a005:2400::/44 maxlen: 48
                          2a06:a005:540::/44 maxlen: 48
                          2a06:a005:c30::/44 maxlen: 48
                          2a06:a005:510::/44 maxlen: 48
                          2a06:a005:11f0::/44 maxlen: 48
                          2a06:a005:530::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:be:37:f5:29:42:e2:73:15:4f:9e:28:53:80:b5:de:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 28 12:30:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef832cf23013267451201cf29738ee2b97731a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2d:3d:fb:70:75:77:7b:f3:13:45:87:57:20:
                    71:74:6c:71:5e:cb:c1:89:2c:16:af:77:a0:b8:3a:
                    6a:6a:11:39:8b:3b:2c:b1:c7:23:b5:95:13:ae:ea:
                    e4:3e:7d:ee:ba:73:21:02:6b:c4:06:31:53:b9:e8:
                    30:bf:80:94:3e:e3:bc:43:87:33:9b:76:4f:c5:52:
                    66:5f:b6:ad:83:d1:61:52:f4:08:de:63:11:31:ac:
                    bc:24:01:c7:12:ec:3f:7c:46:4e:0d:43:8f:a0:8f:
                    ae:d8:54:f1:76:4d:1f:74:60:95:6c:d4:5d:ce:b3:
                    b1:d8:24:f1:7e:02:75:ea:d6:1d:0f:9b:b9:07:82:
                    99:bf:e6:ae:35:f6:84:1a:66:b8:75:bb:4b:d4:e3:
                    89:38:92:66:b0:cc:af:1d:9c:27:7b:fc:f1:b7:0e:
                    dc:d1:8f:d6:a5:c9:9d:70:48:52:13:c4:6d:f4:ca:
                    ef:ad:e7:21:81:ce:d2:75:a3:a3:b2:01:9f:4c:28:
                    b9:08:fe:5f:5f:4d:77:ae:07:bd:e7:40:6d:9e:db:
                    41:41:40:2c:b3:3c:19:72:51:1c:b3:d2:3e:52:3a:
                    4d:74:3e:77:f8:c6:67:ec:5a:67:eb:4d:4b:83:8c:
                    c8:20:78:35:75:0e:ec:0b:00:90:36:f6:b2:d0:e1:
                    22:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:83:2C:F2:30:13:26:74:51:20:1C:F2:97:38:EE:2B:97:73:1A:04
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/74Ms8jATJnRRIBzylzjuK5dzGgQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4c0::/44
                  2a06:a005:510::-2a06:a005:54f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:7c0::/44
                  2a06:a005:c20::/43
                  2a06:a005:11f0::/44
                  2a06:a005:2400::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:59:63:1a:71:a9:85:99:50:29:b9:3b:06:39:0c:2d:23:a0:
         77:4a:3a:78:50:71:09:18:ac:99:fd:9a:29:2e:1a:cc:03:e2:
         89:e0:44:03:0d:f9:1c:9f:34:4b:af:01:89:7d:cb:2f:83:85:
         6a:ad:34:f5:6c:17:82:1c:57:c3:75:31:20:fc:8f:9a:a9:0e:
         0c:73:60:a5:a7:f3:4f:21:6c:5a:51:9c:04:de:b7:41:23:f4:
         f1:7d:1c:c1:86:8a:b9:e1:e0:12:a9:cf:9d:f9:78:9e:6e:9b:
         c9:e3:c2:b8:6c:13:79:84:e7:75:3c:20:b9:0f:b1:08:37:5f:
         13:df:7a:cb:c7:7f:5d:cf:8e:1e:53:50:3e:0a:d3:02:39:d7:
         79:a8:d8:d6:84:f3:15:3f:c8:02:1b:60:3c:c3:ed:ce:a2:fd:
         b3:1b:3a:c5:71:83:49:65:b6:4d:d0:02:39:f2:ab:0d:83:e9:
         42:07:46:de:49:d6:67:27:5b:30:1b:e8:fb:98:87:65:4d:f8:
         3b:a3:15:18:f3:7d:05:73:b1:85:01:9f:0a:b8:e0:d7:57:e8:
         3b:7a:89:65:e9:be:e4:42:1b:05:7c:03:85:43:a8:11:51:48:
         3d:39:47:db:c5:f1:e4:1d:95:a9:af:14:31:c5:6b:7b:c2:ca:
         bf:9c:8b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----