Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B0fzxkyJRBnwSkLL4ubzhQUqMPo.roa
File:                     B0fzxkyJRBnwSkLL4ubzhQUqMPo.roa (raw, json)
Hash identifier:          1I0J1xNTf9C00VQY7YJpC078FaZ7TFK32i7DoMnZSb4=
Subject key identifier:   07:47:F3:C6:4C:89:44:19:F0:4A:42:CB:E2:E6:F3:85:05:2A:30:FA
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018240CAB969CC426335C9FF0606190AA4FD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B0fzxkyJRBnwSkLL4ubzhQUqMPo.roa
Signing time:             Wed 27 Jul 2022 17:53:23 +0000
ROA not before:           Wed 27 Jul 2022 17:53:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203888
IP address blocks:        2a06:a005:45c::/48 maxlen: 48
                          2a06:a005:45a::/48 maxlen: 48
                          2a06:a005:45d::/48 maxlen: 48
                          2a06:a005:45e::/48 maxlen: 48
                          2a06:a005:45b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:40:ca:b9:69:cc:42:63:35:c9:ff:06:06:19:0a:a4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 27 17:53:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0747f3c64c894419f04a42cbe2e6f385052a30fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2c:e3:02:9c:2a:e7:6f:9a:ec:d9:7f:84:03:
                    a5:c6:4c:c4:0d:10:f0:08:77:0d:3e:44:9e:1f:24:
                    46:27:49:40:1f:60:fa:33:78:30:db:b5:75:ec:df:
                    1d:a2:e1:65:88:12:56:17:9e:55:6c:c0:12:f9:55:
                    aa:53:ee:1a:af:21:d9:6b:8c:48:d5:84:67:99:c4:
                    dc:b5:55:49:99:09:06:71:bd:00:ef:54:b0:0f:06:
                    c3:7c:0a:11:51:cb:d8:57:84:b8:3a:51:ad:33:c0:
                    65:54:c7:a4:8d:17:5b:a6:ac:6a:c6:79:ae:ff:d9:
                    5f:3c:e5:36:90:79:7e:25:2c:95:9e:0e:8f:3f:aa:
                    24:1c:87:07:1e:a6:4c:85:b8:1b:a3:74:cb:f1:8b:
                    18:48:1c:52:11:47:4d:89:47:b8:81:e6:de:f7:79:
                    ff:11:0c:d3:de:12:46:04:07:ba:d6:8f:51:00:4d:
                    49:07:19:0f:28:be:b8:3e:5e:af:9c:6a:eb:aa:a5:
                    1c:50:47:5e:11:a2:6b:18:f7:df:71:0c:3c:69:f1:
                    50:36:2b:a9:a4:41:c6:c7:24:75:06:7e:45:f7:6c:
                    6d:57:b5:28:55:e3:1a:29:a9:aa:77:13:20:48:08:
                    6e:77:f4:74:23:d4:de:e4:87:6f:72:56:0e:fa:17:
                    c7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:47:F3:C6:4C:89:44:19:F0:4A:42:CB:E2:E6:F3:85:05:2A:30:FA
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/B0fzxkyJRBnwSkLL4ubzhQUqMPo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:45a::-2a06:a005:45e:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         8c:59:35:2a:26:67:17:57:c2:33:27:64:39:b1:e7:97:31:2d:
         f6:85:b3:8f:2b:fc:2a:8b:8c:0e:32:5b:be:8c:3b:fe:df:c1:
         47:c6:35:9e:2b:9a:e2:83:bd:cf:7e:ae:23:55:90:0c:70:c1:
         74:7a:95:bb:f2:bc:17:e6:48:b4:59:7c:37:a5:e7:6b:dc:e0:
         23:75:67:a5:8d:18:a7:b5:45:1f:f4:bf:bd:e4:1c:0c:e1:08:
         b8:e9:fe:04:1b:d0:83:6e:ec:7a:ec:a7:a6:1d:bb:04:8f:e5:
         81:1b:6e:05:ae:4f:ca:84:e8:10:6b:5b:d3:9c:0e:28:3f:b7:
         91:05:9e:93:18:40:d5:02:08:6d:d0:4e:3e:c1:c3:f3:39:25:
         e1:52:39:8a:2a:8b:a3:c4:6f:a6:8f:6b:e9:90:0c:93:e9:39:
         81:97:78:01:b9:1e:72:c6:28:d6:cc:87:a4:34:9e:01:f1:f9:
         53:2c:78:f6:1f:57:ff:81:e8:33:50:34:d6:53:16:18:aa:28:
         54:59:72:b7:7d:65:0b:f1:56:c6:20:36:bf:05:9c:07:38:f9:
         7c:ea:79:5b:cd:56:ee:8d:92:29:7a:da:44:26:f8:e8:1f:78:
         90:b7:98:b4:0c:b7:7f:90:04:9f:d5:a8:87:87:c4:be:aa:d7:
         dc:6c:35:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----