Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9kKm9TGVH7YMsoD7kWmpZj1tzzo.roa
File:                     9kKm9TGVH7YMsoD7kWmpZj1tzzo.roa (raw, json)
Hash identifier:          wPGG0lvV3Bje4fZD++6oJc6gM31Mr5yDtC5QU+5PblI=
Subject key identifier:   F6:42:A6:F5:31:95:1F:B6:0C:B2:80:FB:91:69:A9:66:3D:6D:CF:3A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A579383
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9kKm9TGVH7YMsoD7kWmpZj1tzzo.roa
Signing time:             Tue 31 May 2022 06:39:14 +0000
ROA not before:           Tue 31 May 2022 06:39:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212983
IP address blocks:        2a06:a005:2d9::/48 maxlen: 48
                          2a06:a005:a10::/44 maxlen: 48
                          2a06:a005:43e::/48 maxlen: 48
                          2a06:a005:13::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441947011 (0x1a579383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 31 06:39:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f642a6f531951fb60cb280fb9169a9663d6dcf3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:57:e1:9d:f0:15:e7:c0:0d:0c:ed:34:a3:da:
                    87:69:77:90:cf:2c:da:55:4e:f4:e4:f3:7f:9a:0a:
                    dc:3f:ad:d6:df:1d:6c:02:21:11:19:b3:74:8e:54:
                    76:bb:9c:d6:2b:02:5c:b7:72:5f:90:ee:ef:a0:5b:
                    66:74:67:d9:74:97:31:b3:43:34:31:bd:0f:1b:d2:
                    c5:60:21:6b:3c:27:5a:9c:3d:cd:da:a4:05:d2:04:
                    52:27:22:d8:a0:5a:3b:07:f5:19:66:ea:e8:64:dd:
                    51:8f:20:0b:44:fe:55:39:36:6f:26:71:6c:17:a0:
                    82:bf:23:b0:2a:d5:36:55:df:ec:75:44:23:f6:9d:
                    70:2d:b3:c1:99:28:c9:17:b3:f2:30:37:ac:99:24:
                    42:c0:38:a2:ef:59:cb:1b:be:24:6f:ad:f8:6d:93:
                    6a:a2:7e:aa:97:7a:83:1d:1d:79:da:19:36:82:ef:
                    7f:67:cf:7f:58:03:bf:0b:d9:cb:04:f5:28:8e:38:
                    6e:df:15:ad:57:68:bc:d7:ad:ae:43:bb:72:7f:93:
                    16:8e:2d:9b:e1:37:6d:ac:5b:33:4f:1c:4c:f9:0a:
                    a0:87:7d:2e:54:3d:85:20:5e:bc:56:62:91:98:c9:
                    ef:db:3e:82:b0:50:07:98:37:b0:da:66:7e:0c:85:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:42:A6:F5:31:95:1F:B6:0C:B2:80:FB:91:69:A9:66:3D:6D:CF:3A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9kKm9TGVH7YMsoD7kWmpZj1tzzo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:13::/48
                  2a06:a005:2d9::/48
                  2a06:a005:43e::/48
                  2a06:a005:a10::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:18:3e:63:e9:2a:01:30:ec:a6:15:9c:1a:d7:1e:1a:b6:7d:
         fc:d9:bd:3e:f2:ca:ae:8c:fb:cf:8d:dd:50:2c:f2:d0:99:91:
         11:89:65:fe:f3:30:29:43:eb:84:ac:e3:fd:ea:81:64:b9:41:
         c3:a0:4e:e0:84:ce:eb:ee:ca:c7:05:da:3b:73:21:61:d5:66:
         dc:66:16:e3:b3:07:17:0b:0d:06:ac:8c:a3:b9:ac:76:13:68:
         b2:37:01:96:89:e5:f4:b8:ed:e1:4a:a8:ef:e3:a7:d6:42:28:
         8d:3b:9a:11:f0:51:cf:3f:70:53:77:ba:0d:40:95:10:56:25:
         62:b7:95:24:b1:34:9e:a4:f8:ad:d6:de:cb:ca:48:c1:f2:5a:
         bb:30:88:db:7b:9f:12:09:1e:aa:31:cf:42:d3:44:e6:8f:b6:
         78:2e:54:4a:68:67:09:33:b5:a8:a1:32:df:3f:e3:98:94:07:
         55:06:1a:62:a6:60:5b:ca:0b:a1:a5:8f:87:90:06:10:b6:7c:
         46:c7:46:f0:35:d5:d7:e9:eb:6b:29:4b:26:e4:cf:c6:33:02:
         0f:40:8c:3c:93:51:6d:ed:4c:5c:48:84:c0:9f:a5:3a:6c:ab:
         90:4c:97:5d:24:cc:59:0f:01:36:bb:c4:ec:73:c1:7e:81:0d:
         fd:c9:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----