Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8AxSt7MzV2NiTBGinIlYiXEhWcI.roa
File:                     8AxSt7MzV2NiTBGinIlYiXEhWcI.roa (raw, json)
Hash identifier:          Q2UO1j/WRKDsa7vBNVGSz7uLzIkYJ24RQcaNDtsm4Gs=
Subject key identifier:   F0:0C:52:B7:B3:33:57:63:62:4C:11:A2:9C:89:58:89:71:21:59:C2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183CB8AD7F01CB518F34BCC34EBA5A9F61A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8AxSt7MzV2NiTBGinIlYiXEhWcI.roa
Signing time:             Wed 12 Oct 2022 09:33:37 +0000
ROA not before:           Wed 12 Oct 2022 09:33:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147016
IP address blocks:        2a06:a005:baa::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:cb:8a:d7:f0:1c:b5:18:f3:4b:cc:34:eb:a5:a9:f6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 12 09:33:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f00c52b7b3335763624c11a29c895889712159c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:dc:16:f6:14:0c:1f:45:44:a3:b5:b1:13:
                    5f:39:f6:65:ed:cd:b8:98:93:6d:73:a6:43:97:5e:
                    57:6c:72:e5:23:e9:f4:88:04:17:a0:c0:f2:0f:d6:
                    86:79:10:d3:e3:e4:6c:7d:4a:55:52:98:a3:37:56:
                    cf:d9:be:a6:95:92:43:b8:e7:02:25:1b:5d:1e:46:
                    5f:64:3c:71:40:55:b3:f5:32:c8:bf:90:29:a5:0d:
                    70:8c:23:8e:ac:8e:e9:3d:ec:c6:03:56:c1:73:c0:
                    8f:34:cd:28:5e:83:12:8b:1f:59:21:a0:db:23:de:
                    9b:fe:9f:91:b0:2b:7e:cb:80:62:7e:0d:d2:ed:30:
                    cc:70:92:5e:04:ef:97:18:37:b5:d5:80:29:df:c9:
                    6e:fe:e1:e0:f3:83:1d:21:dc:44:1d:ba:de:5a:6f:
                    20:ab:1a:de:ff:ff:66:5e:06:df:e2:b0:92:8b:ff:
                    88:84:14:6a:44:34:24:0b:7e:37:66:55:c6:2e:d3:
                    f3:23:1e:2d:05:2d:6f:6b:9b:ac:58:c0:89:9c:98:
                    7f:1a:11:6c:e0:b4:9f:fd:eb:e1:99:5a:8e:0f:93:
                    c4:35:73:26:61:09:2a:a9:1b:5c:95:0d:38:cb:1c:
                    d7:64:a6:19:be:68:c8:6c:b9:10:cd:7a:10:5e:ca:
                    71:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0C:52:B7:B3:33:57:63:62:4C:11:A2:9C:89:58:89:71:21:59:C2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/8AxSt7MzV2NiTBGinIlYiXEhWcI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:baa::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:ca:2e:ac:0f:76:d5:1f:cd:c7:c0:1c:9e:b4:be:af:75:a1:
         5f:58:ac:96:bd:83:7c:cb:1d:8d:4b:2a:3d:13:c5:75:37:d7:
         74:a0:94:d5:ee:33:e2:48:df:3c:50:e0:37:72:2d:18:a8:0e:
         b6:0f:0b:e2:e8:95:58:3a:c1:b3:34:ab:a7:ba:d8:ea:eb:89:
         a1:53:6c:18:74:35:da:0a:61:95:fc:28:1b:95:a2:23:8f:ec:
         2d:bf:4e:df:90:e5:61:5d:8b:3c:91:5d:9a:c3:08:5c:07:8f:
         0e:77:2b:b7:cf:4d:2c:ec:ec:84:2a:c2:55:1d:3e:a7:5b:46:
         62:40:2f:27:cc:f7:59:9c:03:8f:84:22:d9:6b:ce:de:c7:e6:
         a8:6c:20:66:45:12:38:1e:42:37:94:80:d2:89:6c:ad:9c:43:
         1f:e4:fc:af:c9:ca:0f:82:08:26:f0:f8:e1:af:6e:6e:cf:10:
         6b:2f:21:a7:b1:1d:36:59:56:61:8b:52:ee:b5:ca:94:77:aa:
         c1:53:f7:61:61:8f:41:bd:3a:72:35:cd:b9:8b:47:f4:4b:32:
         83:c3:05:50:a2:63:21:dd:fc:73:c4:b7:a6:4d:87:7f:ae:a9:
         f2:08:fa:d0:b9:71:94:6d:0b:c8:a7:cf:b2:b1:17:d8:39:83:
         0f:22:b4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----