Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9eJnQcZt4vnr2iorAfeSkBQSoCE.roa
File:                     9eJnQcZt4vnr2iorAfeSkBQSoCE.roa (raw, json)
Hash identifier:          anWuI8qMBVvcDbNnL4kkFeEdYGcxCjEqCyJAg6gX26g=
Subject key identifier:   F5:E2:67:41:C6:6D:E2:F9:EB:DA:2A:2B:01:F7:92:90:14:12:A0:21
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018234C2E4D9D5A84AEE3669C3BD24D8A0AB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9eJnQcZt4vnr2iorAfeSkBQSoCE.roa
Signing time:             Mon 25 Jul 2022 09:49:23 +0000
ROA not before:           Mon 25 Jul 2022 09:49:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206016
IP address blocks:        2a06:a005:a0c::/48 maxlen: 48
                          2a06:a005:db0::/44 maxlen: 48
                          2a06:a005:990::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:34:c2:e4:d9:d5:a8:4a:ee:36:69:c3:bd:24:d8:a0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 25 09:49:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f5e26741c66de2f9ebda2a2b01f792901412a021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:7c:a5:30:e8:b3:3c:1c:25:59:bb:b8:cf:
                    8d:ad:b2:f7:1e:cb:55:e8:7b:fd:c0:75:f4:ab:38:
                    19:a3:eb:63:71:a7:f6:d5:66:48:b5:96:0e:01:0f:
                    bb:87:62:25:00:48:f8:a9:35:7c:dd:39:bc:d3:f3:
                    1a:10:71:51:99:1e:d7:71:4d:f7:f8:f8:22:e6:75:
                    65:f4:c8:b1:19:78:a1:b6:02:b0:1d:ff:f0:28:0c:
                    3b:cb:c4:c7:fb:1e:2e:f0:76:c6:9d:3b:b8:98:3e:
                    e2:dd:a3:dd:50:11:08:49:21:98:8c:f9:58:3c:3a:
                    38:a6:ca:52:99:2e:b8:7c:6a:4e:d1:e4:7e:5d:f7:
                    b3:fe:9c:79:05:f5:5c:75:1b:53:11:d7:28:ae:06:
                    1b:a1:ff:2b:92:5c:ef:c4:3b:e0:05:11:cb:69:6c:
                    f3:02:98:74:7e:2e:0e:06:f4:90:c6:fc:1a:f0:6b:
                    d2:a8:6a:24:ba:b3:f6:b8:77:6a:d2:0d:d6:2e:1f:
                    a7:7c:a6:44:b7:26:7b:2f:4f:bd:d0:8e:6a:58:68:
                    59:5b:c0:3c:f1:2c:16:ae:d3:04:03:58:f0:cf:db:
                    d9:85:5b:a2:9c:43:c4:26:e8:1f:47:01:85:45:d2:
                    b0:17:87:e4:0d:b7:09:4c:81:a4:e5:eb:4c:a6:d2:
                    83:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E2:67:41:C6:6D:E2:F9:EB:DA:2A:2B:01:F7:92:90:14:12:A0:21
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9eJnQcZt4vnr2iorAfeSkBQSoCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:990::/44
                  2a06:a005:a0c::/48
                  2a06:a005:db0::/44

    Signature Algorithm: sha256WithRSAEncryption
         36:16:b2:c7:60:de:e7:38:f4:12:49:68:33:a4:76:b2:2a:ab:
         dd:52:26:61:3e:04:10:42:d5:9c:c6:df:6c:ec:2f:24:7f:97:
         9b:d2:3a:4a:35:48:d5:1c:93:ed:fa:c2:e1:93:5b:57:f0:91:
         31:fb:59:71:54:20:32:9e:2f:99:0e:1a:dc:07:c3:d1:65:bd:
         df:69:54:c5:bc:4a:5f:cf:f9:57:df:dd:e8:3a:9e:77:35:db:
         7e:70:35:0d:78:f5:8f:04:e8:18:3a:e9:65:4f:a3:b1:44:e7:
         5c:73:63:1c:39:19:ed:88:4b:43:00:43:d6:7c:91:80:f7:50:
         e8:29:3c:45:92:e3:1b:4c:45:0b:c3:cf:37:97:f7:2e:7c:0f:
         64:a0:c7:d0:42:9c:58:aa:6d:e5:f5:0f:75:e1:e6:6d:a9:43:
         d3:84:49:0b:11:a6:33:58:74:e7:2f:9e:1f:13:12:85:93:d8:
         8a:26:bb:61:94:ce:9e:49:e4:19:6b:46:f0:17:cd:8f:e8:aa:
         1a:ff:bd:98:7a:27:b8:ac:93:e3:fa:2a:a7:0f:ca:55:90:6e:
         7f:85:ed:65:20:ef:d9:06:c7:62:ed:e0:e1:e3:ab:46:23:3d:
         93:c5:ff:51:3f:0b:38:4b:28:01:6a:03:58:fe:03:12:ff:06:
         46:1f:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----