Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AM201Xia-iDWWp7OjFhgA2lW7Ow.roa
File:                     AM201Xia-iDWWp7OjFhgA2lW7Ow.roa (raw, json)
Hash identifier:          s1MyoWieeBYKyaV7YiudNHkGP5qz1c5BVVcSNFu/q24=
Subject key identifier:   00:CD:B4:D5:78:9A:FA:20:D6:5A:9E:CE:8C:58:60:03:69:56:EC:EC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184EAC6B5657F0E7D817897C842834D98DA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AM201Xia-iDWWp7OjFhgA2lW7Ow.roa
Signing time:             Wed 07 Dec 2022 04:10:01 +0000
ROA not before:           Wed 07 Dec 2022 04:10:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210888
IP address blocks:        2a06:a005:1169::/48 maxlen: 48
                          2a06:a005:4f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ea:c6:b5:65:7f:0e:7d:81:78:97:c8:42:83:4d:98:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  7 04:10:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=00cdb4d5789afa20d65a9ece8c5860036956ecec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:43:46:39:94:ae:ba:5f:55:47:c3:f7:b5:
                    34:ea:03:2b:71:67:5c:4c:a7:f3:08:d6:c6:ae:32:
                    4d:a7:eb:1c:86:10:12:b6:3e:ff:d7:07:47:39:ad:
                    44:68:07:9f:fa:d2:da:4b:21:71:5e:f8:d4:df:2d:
                    d0:0c:5e:2b:d0:62:54:18:f1:b8:c8:ae:ba:23:f2:
                    83:1a:76:35:fa:b0:94:4e:65:aa:9c:bc:8b:49:28:
                    c9:91:8c:c9:b2:a9:8c:cd:3c:1c:67:23:a6:53:f8:
                    2b:d1:35:db:46:2e:8b:05:07:9c:ed:cd:16:c1:24:
                    18:c4:a2:2e:10:54:25:3a:16:ba:1d:46:8f:f8:80:
                    21:8d:22:69:44:1e:f2:37:ed:c2:e1:40:d8:2d:f2:
                    c5:88:ba:d1:d4:30:8a:9c:ac:69:60:f6:0f:3b:9b:
                    6b:e4:01:fb:26:50:87:f3:60:a4:82:24:29:dc:61:
                    df:60:e3:23:8e:5a:0b:f8:92:e6:e1:8b:db:d2:d3:
                    1e:41:36:6c:2f:0b:a5:1d:1c:cf:7b:f6:05:9e:bc:
                    f8:f3:f7:53:9f:9e:70:8e:0b:a9:e7:92:7d:68:ad:
                    25:2a:7b:f1:53:0c:f3:db:36:32:d2:a2:40:d2:b2:
                    8d:7b:34:21:bc:46:81:e0:31:98:01:45:2d:16:6b:
                    aa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CD:B4:D5:78:9A:FA:20:D6:5A:9E:CE:8C:58:60:03:69:56:EC:EC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AM201Xia-iDWWp7OjFhgA2lW7Ow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4f0::/44
                  2a06:a005:1169::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:40:4c:04:d5:9f:18:c8:8a:47:ba:e5:35:6a:08:35:2f:50:
         e5:3b:7e:cb:98:df:65:24:cf:e1:85:54:f4:d1:7a:a8:7a:ad:
         f8:28:18:61:30:6d:fb:2b:c6:05:aa:53:dc:90:e1:4d:0f:32:
         a0:9e:7b:b8:b9:a9:d1:a2:35:f1:4f:7b:a5:3a:f5:27:d4:e4:
         8c:20:64:27:39:aa:ce:c1:a7:07:8c:29:b9:78:51:c0:3d:12:
         10:45:69:09:b4:38:65:14:79:45:cd:42:ad:0a:26:04:6f:b0:
         13:7b:ea:ef:ef:f0:7d:fd:8d:8d:41:e8:ae:d1:7e:04:18:83:
         df:c9:83:81:22:23:59:1a:16:f7:b0:d0:26:64:61:11:9b:96:
         9a:8b:96:40:d1:3c:72:90:54:17:ed:76:d3:66:d0:d1:3f:0e:
         60:49:08:c9:e4:a4:df:5c:26:69:11:b7:bf:fc:ad:a3:02:8f:
         5b:e8:d9:fe:03:47:61:c0:da:15:e8:b0:17:f9:33:93:d2:77:
         3e:de:4b:eb:22:df:a0:88:4f:a8:94:5b:c9:e4:82:03:ea:fa:
         2a:1d:f0:98:d4:02:42:77:7e:d5:38:ea:45:0a:b3:c3:b2:a2:
         d5:3b:a8:00:c7:48:00:eb:5b:c1:0f:67:78:bf:52:17:ae:7f:
         0c:24:0e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----