Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7ivsBOmOBYzuiq_C4RJ-_zPy-iQ.roa
File:                     7ivsBOmOBYzuiq_C4RJ-_zPy-iQ.roa (raw, json)
Hash identifier:          y9T5NbPm32TamyRClTxPfi2IW9nhYHgZ14IA1fTNlQU=
Subject key identifier:   EE:2B:EC:04:E9:8E:05:8C:EE:8A:AF:C2:E1:12:7E:FF:33:F2:FA:24
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184ED572368E180C35E257AD27A75E070D5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7ivsBOmOBYzuiq_C4RJ-_zPy-iQ.roa
Signing time:             Wed 07 Dec 2022 16:07:01 +0000
ROA not before:           Wed 07 Dec 2022 16:07:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200879
IP address blocks:        2a0a:6040:f200::/40 maxlen: 48
                          2a06:a005:25f0::/44 maxlen: 48
                          2a06:a005:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ed:57:23:68:e1:80:c3:5e:25:7a:d2:7a:75:e0:70:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  7 16:07:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee2bec04e98e058cee8aafc2e1127eff33f2fa24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ed:45:08:d7:38:eb:10:e1:42:df:37:d4:9e:
                    ef:71:e5:8f:dd:eb:35:2e:42:c2:0e:a6:7b:c1:6b:
                    6b:a7:a6:00:dc:2d:9b:47:26:1a:63:1b:63:b4:88:
                    ea:d3:1b:39:b1:76:ff:37:74:3b:dc:9b:1e:ca:83:
                    30:6e:de:9c:23:f2:b7:4c:a9:23:e8:ce:cc:92:4b:
                    63:7e:57:b4:77:39:51:be:8d:12:be:9e:f1:8f:0c:
                    63:49:31:05:57:38:f1:9b:f8:ee:95:f5:9f:95:88:
                    0e:76:84:d2:95:86:89:07:c2:69:fc:bc:9d:dd:f5:
                    07:df:9d:0f:d0:8d:49:f0:17:7b:ed:39:8a:a5:3b:
                    6e:c9:80:a7:dd:11:82:a0:9e:d5:f5:b3:22:47:d6:
                    6c:95:ad:82:06:9d:30:44:37:d3:ea:ef:bb:26:18:
                    bb:97:3e:ba:55:cf:bf:2e:bf:1d:a5:43:15:3c:e0:
                    80:0c:cc:74:55:ed:ee:cd:5f:11:a2:8e:b1:1c:93:
                    17:c5:7f:87:01:08:03:f0:da:9e:ab:f6:70:7a:0b:
                    75:67:db:4f:08:8b:e4:4c:7c:66:6c:bc:18:a3:48:
                    af:7d:d3:8f:ef:b8:98:f9:17:0b:f3:8c:78:e6:d0:
                    c4:7c:82:a8:09:19:33:89:6c:3b:cc:40:3d:76:fc:
                    dd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2B:EC:04:E9:8E:05:8C:EE:8A:AF:C2:E1:12:7E:FF:33:F2:FA:24
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7ivsBOmOBYzuiq_C4RJ-_zPy-iQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:6::/48
                  2a06:a005:25f0::/44
                  2a0a:6040:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:97:e8:0e:05:3a:04:c3:99:00:26:b8:70:45:f2:ed:bf:70:
         fb:fc:19:d9:f1:69:cb:33:e5:7a:2c:6f:a0:8c:4a:36:b0:4e:
         b7:7f:27:71:50:6d:20:f9:a9:cb:fa:4f:fd:86:d2:26:d0:db:
         50:fb:f8:3b:6d:a3:a7:93:14:6d:31:b2:f4:b8:ae:8f:5e:9a:
         0e:70:d7:0d:ec:09:78:d5:f6:96:6f:6b:81:c5:de:b2:53:0c:
         5e:e4:be:56:1e:81:87:85:ec:77:cd:e6:3f:d0:c2:46:f2:05:
         e5:dc:d1:2c:0a:18:de:f4:31:7f:57:02:36:5d:f8:31:03:92:
         3b:dd:b4:d5:5d:59:a0:21:b1:0c:06:86:a1:6e:85:d1:50:7f:
         0a:be:04:d6:60:9a:2f:46:c4:ca:34:a2:1e:45:11:08:9b:cd:
         e1:49:3c:de:cf:3a:b6:df:3f:c6:9d:26:80:f0:c0:37:86:c2:
         71:a1:8c:55:f1:06:d4:25:4d:12:72:76:14:84:5c:5b:e3:a5:
         82:4a:95:cb:b7:9f:1e:a3:4e:70:01:bc:e2:be:a8:42:7d:70:
         52:af:f0:94:84:33:d9:ee:76:f4:4a:2a:b4:04:35:1b:92:aa:
         d6:63:c6:1e:1f:af:f4:19:75:0e:27:e5:b2:33:f2:d0:0c:12:
         48:14:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----