Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7eF8IGU8MnfcBgojyocq9EFsSWI.roa
File:                     7eF8IGU8MnfcBgojyocq9EFsSWI.roa (raw, json)
Hash identifier:          bCakTieT+Wav3InBGLdfyPFXRNpz9vRYonFNZvnDzN8=
Subject key identifier:   ED:E1:7C:20:65:3C:32:77:DC:06:0A:23:CA:87:2A:F4:41:6C:49:62
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018228D59B5BC4F3E66884D138FA00D7FBBD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7eF8IGU8MnfcBgojyocq9EFsSWI.roa
Signing time:             Sat 23 Jul 2022 02:14:23 +0000
ROA not before:           Sat 23 Jul 2022 02:14:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203979
IP address blocks:        2a06:a005:454::/48 maxlen: 48
                          2a06:a005:8b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:28:d5:9b:5b:c4:f3:e6:68:84:d1:38:fa:00:d7:fb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 23 02:14:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ede17c20653c3277dc060a23ca872af4416c4962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:17:91:14:ee:13:75:3f:c8:f8:56:8b:2e:
                    58:a5:34:f3:88:64:a9:f3:5f:15:39:7e:8b:92:d5:
                    11:6b:0b:18:61:cb:f2:2f:e3:4a:47:10:12:8e:fe:
                    24:77:37:1a:d0:9a:f0:e3:ea:29:76:26:ed:ee:20:
                    cb:8c:55:40:24:2b:71:6c:60:81:89:2e:6c:d8:d4:
                    74:dc:61:c0:d7:f9:3a:de:4b:9a:56:0c:f4:40:98:
                    c6:32:2a:74:ee:eb:6f:98:62:c2:21:72:03:09:ae:
                    ef:5b:73:01:37:4b:a4:20:21:8d:67:a3:57:45:40:
                    f0:29:8e:35:c1:63:67:9d:aa:53:06:db:89:85:d8:
                    95:ed:d9:24:ef:3d:2b:23:f3:b0:22:c9:d6:9c:4d:
                    66:19:d0:1a:06:a1:b0:7e:c3:7c:dc:1a:81:a6:fa:
                    4c:63:31:8f:59:02:b3:44:59:fe:4c:d9:1d:4b:dc:
                    7a:40:42:f9:32:1a:f8:1c:8a:d1:5b:2a:c4:b3:32:
                    58:15:11:65:71:5e:c4:cb:47:d2:61:37:ce:57:75:
                    0f:86:e4:56:d6:32:5e:92:0b:bc:b4:ca:01:8a:bf:
                    de:db:07:61:15:4b:4c:b0:72:45:cd:cb:b0:67:26:
                    ea:7a:fb:9d:0a:c3:36:35:57:9c:64:1f:57:1d:1b:
                    d1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E1:7C:20:65:3C:32:77:DC:06:0A:23:CA:87:2A:F4:41:6C:49:62
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7eF8IGU8MnfcBgojyocq9EFsSWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:454::/48
                  2a06:a005:8b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:cb:38:c5:8d:61:ca:85:6c:66:b5:b2:d4:6c:14:1f:2b:55:
         47:d5:e5:70:15:ed:6e:92:33:7c:a4:28:0f:49:f9:8f:f9:6b:
         25:47:5f:4c:5d:49:98:bd:17:b6:86:79:45:fa:99:83:f0:53:
         d2:22:ae:53:f5:a1:1b:11:c5:6c:4c:d8:c1:f8:99:a5:f2:62:
         b5:a4:66:10:8e:ec:b0:ce:96:74:b2:af:4c:b7:76:b5:56:06:
         96:30:19:76:25:bb:ca:ad:82:81:87:5d:93:e3:b0:a0:3f:07:
         9a:b9:9e:35:62:16:8a:52:e1:c2:0a:6a:df:e2:25:0b:1e:82:
         13:34:3e:d8:71:b9:38:ef:20:cb:ba:56:6f:f4:8a:85:d5:0a:
         d7:6b:36:c5:d0:ac:c7:16:1f:82:8d:cb:39:2a:91:91:d3:4b:
         5c:3b:37:0a:93:d8:c3:6a:cd:fe:47:15:03:4c:b2:56:81:04:
         a4:5e:6d:1f:b7:a9:1b:d1:45:c1:71:a5:90:dd:8c:97:7e:22:
         e0:3b:e4:c2:eb:38:66:b3:35:9d:ea:c7:c1:2b:66:e4:fe:1e:
         0d:1b:12:91:78:39:56:99:10:7f:45:7e:76:c3:93:f0:f9:fb:
         b5:f6:34:03:6f:cd:ed:92:77:49:8e:95:47:24:ff:c8:50:b3:
         8b:88:ec:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----