Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9LvUwk0p8wreLvZ3xx6eYSAbIHQ.roa
File:                     9LvUwk0p8wreLvZ3xx6eYSAbIHQ.roa (raw, json)
Hash identifier:          jfHZgnkz/G11ijG5JSY0a70YTA//HBb014vi2ivK3IM=
Subject key identifier:   F4:BB:D4:C2:4D:29:F3:0A:DE:2E:F6:77:C7:1E:9E:61:20:1B:20:74
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B7BEDF6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9LvUwk0p8wreLvZ3xx6eYSAbIHQ.roa
Signing time:             Mon 27 Jun 2022 17:12:40 +0000
ROA not before:           Mon 27 Jun 2022 17:12:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204508
IP address blocks:        2a06:a005:d29::/48 maxlen: 48
                          2a06:a005:5f2::/48 maxlen: 48
                          2a06:a005:f50::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461106678 (0x1b7bedf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 27 17:12:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f4bbd4c24d29f30ade2ef677c71e9e61201b2074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8f:e9:ad:d3:5f:cc:0e:96:da:4e:c5:9d:62:
                    41:bd:6b:8d:3c:67:03:6f:3e:51:f8:b1:b8:a0:3d:
                    8d:97:66:23:47:55:53:30:d0:8a:07:f3:e8:bc:04:
                    05:80:11:a9:23:7c:5a:5f:08:77:d3:7f:38:d5:44:
                    0e:ce:8b:ab:0b:2e:4c:65:09:d6:5e:3d:1e:ca:71:
                    19:18:c0:87:3a:4f:51:f8:be:45:a6:20:ae:d1:c3:
                    63:78:cd:f7:a7:ef:02:c4:aa:90:56:d2:fa:92:ea:
                    fc:f7:8b:98:37:d6:75:2c:c2:f7:07:22:3d:bb:98:
                    60:44:40:d4:87:55:b4:0c:b5:de:bb:07:8b:9a:e9:
                    97:11:09:c3:46:f4:d8:f9:4f:db:08:28:67:ce:78:
                    0c:3f:0d:cf:09:53:b2:5b:7c:4b:5b:a0:55:fc:d0:
                    ef:6d:91:74:bd:f3:56:ab:90:4b:d4:58:60:08:a3:
                    35:d6:b3:65:b4:6f:57:44:52:cf:29:e3:5c:d4:54:
                    34:74:29:b4:f6:2d:d1:14:18:3d:89:48:b2:a4:42:
                    ac:f8:29:68:5e:08:80:7a:42:66:59:5d:83:7f:01:
                    83:a4:f6:1a:42:d2:a2:f3:e2:a2:57:12:df:cc:35:
                    99:48:0c:cd:31:2f:a3:41:a8:6a:f9:98:5a:c6:b3:
                    db:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BB:D4:C2:4D:29:F3:0A:DE:2E:F6:77:C7:1E:9E:61:20:1B:20:74
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9LvUwk0p8wreLvZ3xx6eYSAbIHQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5f2::/48
                  2a06:a005:d29::/48
                  2a06:a005:f50::/44

    Signature Algorithm: sha256WithRSAEncryption
         1c:2f:3b:bd:0b:23:a0:58:4c:85:05:be:bf:2c:7e:3c:b7:26:
         41:19:18:74:25:20:c9:22:84:63:04:ed:22:68:2a:ae:5a:86:
         d3:da:7e:ee:71:0b:15:cd:e6:5e:31:2f:6a:09:9c:66:b8:1a:
         ee:61:37:d6:ff:e3:30:a7:b3:42:e6:2c:42:43:37:bb:12:44:
         8c:33:53:34:8b:6c:0f:93:b6:fa:17:5f:21:d7:11:10:a8:a2:
         05:fa:0c:4f:23:f5:c0:16:3b:98:a6:35:63:40:96:12:11:2b:
         07:83:9d:74:1d:c9:4b:be:d9:c9:56:90:e0:83:1a:60:39:ca:
         9f:a8:7f:be:1c:31:ca:f3:33:5b:19:f5:36:c9:32:e9:b8:35:
         c0:85:c6:ce:77:7a:2d:09:be:9b:7c:a4:e2:de:43:13:94:6b:
         cb:7b:b1:5c:c4:3d:cd:1e:8c:8c:fc:fd:02:26:cd:b9:fc:95:
         98:38:0c:60:7e:7b:7e:8f:ac:3d:29:ff:04:b6:1d:71:28:3e:
         f7:b0:58:04:4e:45:81:9f:49:23:5d:d1:ef:43:50:77:f0:a4:
         31:88:25:0a:a0:ce:80:2e:f3:e1:57:9e:be:95:e6:a4:98:3e:
         7a:67:6a:a3:d9:b6:95:39:8f:3d:cb:89:d8:4b:b0:c1:c0:1d:
         98:da:ba:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----