Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9vfoR-Uvq7uQmjkREjzH-ocyQ8s.roa
File:                     9vfoR-Uvq7uQmjkREjzH-ocyQ8s.roa (raw, json)
Hash identifier:          dUU+xQvQSiktXQVbZt08+WHgMaWTA1uDewJZ6m3LlR0=
Subject key identifier:   F6:F7:E8:47:E5:2F:AB:BB:90:9A:39:11:12:3C:C7:FA:87:32:43:CB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184E702A9E61D5D2AD5334165E279B8B305
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9vfoR-Uvq7uQmjkREjzH-ocyQ8s.roa
Signing time:             Tue 06 Dec 2022 10:37:02 +0000
ROA not before:           Tue 06 Dec 2022 10:37:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212532
IP address blocks:        2a0a:6040:f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e7:02:a9:e6:1d:5d:2a:d5:33:41:65:e2:79:b8:b3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  6 10:37:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f6f7e847e52fabbb909a3911123cc7fa873243cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5b:cf:d8:48:10:ed:0b:b2:1a:50:49:84:e8:
                    3c:11:16:35:e0:1f:fe:55:5f:63:d1:80:ec:67:71:
                    e0:fc:f0:b8:c8:e0:6f:99:a4:2e:ab:8d:37:36:70:
                    d3:25:b9:2f:35:d2:cd:a4:f5:3f:77:1c:ff:1e:c1:
                    ad:09:5a:6f:24:70:b7:45:8c:04:2f:96:9b:44:38:
                    1a:e5:88:ad:5a:5e:6b:32:95:56:de:6d:e0:0d:61:
                    e8:59:bd:c2:0d:1d:a3:c1:0b:8c:cf:31:c8:93:24:
                    06:b1:55:db:50:93:b4:d8:84:b5:56:b5:5f:1b:44:
                    fb:42:84:8b:68:6a:e2:b6:a1:1f:81:60:8a:a4:d5:
                    d4:02:21:51:64:ce:6b:88:65:0e:e2:f9:9b:ac:19:
                    0e:dc:4a:c1:d3:22:79:4b:a1:35:93:bf:46:5b:68:
                    b6:29:9c:de:a5:d4:6d:24:47:b9:9f:e5:32:17:59:
                    e3:bb:24:84:52:0e:d4:0f:50:ea:93:e6:26:8c:3e:
                    8d:6e:f6:03:39:8b:8a:4e:8b:bf:6f:90:4f:75:d2:
                    cc:63:9b:a4:1d:23:92:cb:99:80:89:ae:75:a1:3a:
                    86:55:2f:fa:6c:fb:ac:b1:13:c8:04:27:1f:f7:60:
                    e5:3d:ea:11:cd:7e:22:be:33:a7:93:70:c1:68:58:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F7:E8:47:E5:2F:AB:BB:90:9A:39:11:12:3C:C7:FA:87:32:43:CB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9vfoR-Uvq7uQmjkREjzH-ocyQ8s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:bd:b5:1d:d6:b8:0e:0f:76:31:5d:2b:d4:55:d7:4d:61:0a:
         89:b9:5b:d8:53:e9:7c:11:84:06:de:f0:69:91:ba:83:28:67:
         9c:8e:b9:c0:24:12:49:d7:48:f9:9f:d0:e6:23:f1:3f:93:8e:
         e3:47:b9:e3:5f:fd:0e:dc:e0:15:28:8f:ce:94:4e:f2:e2:36:
         4a:da:35:53:f1:3f:32:e2:dd:7a:1e:a3:32:7b:ac:c2:1e:ca:
         91:13:ad:c7:71:3d:6d:f9:8b:35:2e:33:cf:bb:a0:22:1c:69:
         e5:bc:84:4c:29:dd:dd:7a:3e:25:2d:4b:7f:4b:6d:46:8c:e2:
         54:89:25:21:c0:9b:d7:9a:20:94:41:e8:14:ac:f8:7c:9b:69:
         13:2d:71:57:c2:bc:1f:b1:72:88:62:2e:0c:f2:b5:44:97:f9:
         7f:85:f0:ff:97:59:d7:a2:5f:4d:3b:64:5d:62:6e:cc:b4:29:
         ae:c2:8d:bd:92:9e:20:1e:25:89:a6:b2:55:f7:a6:24:ad:e0:
         88:fc:a8:49:9c:c9:c7:ee:9c:94:cb:b4:87:0f:8c:e4:71:8d:
         3d:b8:a3:48:dd:d1:dc:77:79:8e:bc:81:4c:88:9d:b9:7b:fc:
         e3:e5:ac:c4:d1:e9:85:84:54:90:03:c5:e4:8b:70:74:0d:6b:
         af:1a:01:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----