Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AigaUaceasPDpNdy5KHVwZCkpYQ.roa
File:                     AigaUaceasPDpNdy5KHVwZCkpYQ.roa (raw, json)
Hash identifier:          xsr4XyDiszAYVwioW+q7YBl4/885RScf/TYmp86Frzo=
Subject key identifier:   02:28:1A:51:A7:1E:6A:C3:C3:A4:D7:72:E4:A1:D5:C1:90:A4:A5:84
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184A56FB7DD7243B5CE13601FED453F7B1D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AigaUaceasPDpNdy5KHVwZCkpYQ.roa
Signing time:             Wed 23 Nov 2022 17:01:12 +0000
ROA not before:           Wed 23 Nov 2022 17:01:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206271
IP address blocks:        2a0a:6040:fa00::/40 maxlen: 48
                          2a06:a005:437::/48 maxlen: 48
                          2a0a:6040:ef00::/40 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:a5:6f:b7:dd:72:43:b5:ce:13:60:1f:ed:45:3f:7b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 23 17:01:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02281a51a71e6ac3c3a4d772e4a1d5c190a4a584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:25:ee:cb:8c:9f:91:3c:6a:db:11:79:0b:f9:
                    2f:f0:1c:fe:b8:02:00:1e:ea:30:4b:b1:7d:aa:03:
                    8a:82:fc:94:22:9a:d1:ba:e1:b3:fe:65:ac:48:05:
                    4f:54:3b:c4:9d:42:e4:a6:83:d9:d5:54:e0:f1:4a:
                    67:5c:12:71:ea:02:c9:2d:56:2a:92:6c:91:c5:8d:
                    bd:81:48:ec:88:17:4a:57:4d:d5:98:04:fa:ff:7b:
                    bf:2c:42:be:31:00:a0:69:e0:06:7c:06:a2:a9:8f:
                    16:1c:5d:1e:8d:3c:71:4b:d6:76:08:a8:b2:d8:fb:
                    7d:34:43:c8:0a:e6:34:a9:12:37:d9:fd:ff:58:17:
                    1d:15:a7:48:77:11:1c:3d:dc:48:cc:71:61:05:b3:
                    3a:49:c0:64:96:e1:9b:c9:ee:3c:cb:7d:5b:e6:68:
                    7b:25:4d:0c:94:41:b7:ad:ef:43:6e:db:29:e4:72:
                    98:19:36:8b:99:21:d0:d3:01:ca:6b:2f:ad:72:b5:
                    9d:29:c0:32:f2:d9:c0:2a:82:d5:2c:4f:e6:b5:2d:
                    10:ec:7b:79:9a:14:89:43:96:75:2c:d7:85:0f:c4:
                    39:80:73:ae:91:5c:1a:31:88:96:46:67:76:84:b8:
                    b9:9a:ee:f8:3d:0b:23:08:d8:61:56:91:f9:1a:37:
                    17:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:28:1A:51:A7:1E:6A:C3:C3:A4:D7:72:E4:A1:D5:C1:90:A4:A5:84
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/AigaUaceasPDpNdy5KHVwZCkpYQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:437::/48
                  2a07:54c2:b00b::/48
                  2a0a:6040:ef00::/40
                  2a0a:6040:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:39:6b:f9:c9:f1:83:12:e4:42:58:e3:7e:df:85:52:9d:de:
         c5:30:a0:56:3b:5e:e1:bf:6e:4d:35:c4:01:fa:c6:d9:de:ac:
         c7:e5:3a:d9:a3:2b:fe:7b:85:c4:7d:1c:ba:38:d0:8a:0b:d6:
         f1:59:69:67:24:76:47:d5:c4:9d:ab:b1:e8:38:fb:f2:41:5d:
         4a:ae:6a:7e:be:ed:73:e0:ce:83:25:57:4c:d9:3f:bc:d8:3e:
         64:21:d5:45:01:8f:4e:03:8f:da:90:a5:73:a1:74:0b:fb:6c:
         87:15:86:69:cb:9d:c3:9d:91:8b:d3:06:56:7b:97:c8:e9:23:
         55:55:54:fa:72:58:ac:d5:c1:b2:fa:e2:33:6b:f1:73:eb:fb:
         fb:3f:fb:93:c4:ea:f1:cc:83:a0:99:88:d5:26:4e:21:84:0f:
         36:f6:c0:74:90:33:38:13:62:66:ff:11:eb:69:9d:a9:c6:7f:
         93:6c:f9:ed:dd:5b:8a:c1:a3:14:1d:60:b4:6b:6f:0f:22:43:
         ca:d8:d7:06:a4:34:e2:dc:e1:3c:b6:a3:73:35:d6:1b:74:91:
         56:84:fe:4a:fe:c3:36:9a:fa:1d:95:5f:3b:98:fc:89:60:62:
         0f:ec:c8:06:3e:4e:1e:32:00:d6:3f:dd:d9:e5:70:17:e5:60:
         c9:95:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----