Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7NibVOyYPFIPAYCMP2dYxLZ6ecU.roa
File:                     7NibVOyYPFIPAYCMP2dYxLZ6ecU.roa (raw, json)
Hash identifier:          daSw7G8RspCK1UboNZZn8yb+4NuETUz/EPQ4PSmn9VU=
Subject key identifier:   EC:D8:9B:54:EC:98:3C:52:0F:01:80:8C:3F:67:58:C4:B6:7A:79:C5
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183222F3F4AD93CE09489DF438EF7BBAE65
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7NibVOyYPFIPAYCMP2dYxLZ6ecU.roa
Signing time:             Fri 09 Sep 2022 12:17:45 +0000
ROA not before:           Fri 09 Sep 2022 12:17:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59788
IP address blocks:        2a07:54c3::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:22:2f:3f:4a:d9:3c:e0:94:89:df:43:8e:f7:bb:ae:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  9 12:17:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ecd89b54ec983c520f01808c3f6758c4b67a79c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:48:18:7f:91:99:c4:c4:db:f5:6a:2a:da:
                    95:b4:df:7d:8e:6c:6c:30:66:46:ed:2c:ba:4d:2d:
                    76:b9:c8:a0:16:f2:a9:77:14:dd:0f:32:ca:c7:e6:
                    b5:b8:b1:d3:3e:d3:4d:3a:1d:6d:a5:0c:aa:20:4f:
                    78:9b:ac:a9:9b:60:74:7c:04:fd:59:8f:2f:30:e2:
                    cf:b4:a4:f1:36:07:c3:2b:9d:87:50:df:2e:93:e0:
                    5c:66:42:43:c1:64:aa:ce:b1:c6:ed:2a:0f:1c:e5:
                    80:58:f1:56:26:a7:46:44:1e:64:7f:b8:fb:a1:31:
                    2e:e0:fe:60:d6:30:d0:6d:ea:cd:ca:02:e8:70:d8:
                    90:11:30:7f:d6:04:f2:73:f1:21:84:28:29:a7:31:
                    4e:66:5a:50:d7:75:5a:4c:2b:13:da:24:69:03:ba:
                    c9:20:99:0c:cd:d2:bf:8c:5f:3c:80:2c:70:ac:04:
                    04:0e:e8:2e:f0:21:5f:5b:d1:44:be:ab:01:78:85:
                    dd:0a:47:99:45:af:8f:b1:24:c7:8a:12:6b:7f:1b:
                    b2:80:4e:17:74:53:2a:64:22:97:43:28:08:8e:32:
                    eb:a3:c4:70:c3:7b:95:7e:3b:0e:f6:a3:83:b3:0b:
                    5c:bb:d9:93:68:f8:6d:66:3b:38:7c:3a:f9:4b:10:
                    d4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D8:9B:54:EC:98:3C:52:0F:01:80:8C:3F:67:58:C4:B6:7A:79:C5
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7NibVOyYPFIPAYCMP2dYxLZ6ecU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:f7:48:16:03:b5:c1:74:6f:aa:0f:ff:0e:4b:58:c0:61:36:
         7c:60:62:29:8f:23:21:79:63:be:e4:4f:3c:ad:5d:a8:6b:35:
         ee:b4:ab:d1:c8:4b:b2:a8:70:65:ba:08:4c:50:b7:8f:d8:45:
         1f:1d:c7:38:34:7c:f3:f0:23:5c:f7:e7:a4:42:4a:fd:e1:35:
         94:e0:83:7e:ee:e1:84:b4:1a:36:36:cd:20:1e:9a:df:36:af:
         38:c2:00:33:0f:07:d9:b4:a5:90:95:80:43:1b:51:41:f6:3f:
         86:19:81:52:64:38:c1:99:fd:43:07:39:ed:09:14:85:f4:83:
         99:47:bf:10:85:dc:c7:7e:61:af:b2:a3:ba:93:75:3d:b0:a0:
         26:6b:10:d7:67:fc:61:3c:ed:f0:05:b3:e0:ae:2f:e8:3f:da:
         f7:8f:97:00:23:ee:bb:23:e7:03:a9:ec:aa:11:4c:15:0a:90:
         92:21:d7:32:0e:f0:54:f2:c2:da:79:56:c9:f9:66:99:4d:20:
         ba:ca:ac:f5:b7:aa:d8:29:3f:f6:43:1d:ee:b8:07:1e:0f:b3:
         04:88:28:33:fb:c2:aa:16:02:c0:c1:b9:40:8a:da:42:af:59:
         80:bc:d5:b2:49:1f:cc:d6:0f:7e:e8:6b:9b:61:50:1f:a2:f7:
         78:18:ed:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----