Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BBgxn6e3BDYMguLteDMDMcV3b_8.roa
File:                     BBgxn6e3BDYMguLteDMDMcV3b_8.roa (raw, json)
Hash identifier:          trOTsgUm4bMYM5dtmb3b4+vhuXzRYGS/fVSbTmk7BmY=
Subject key identifier:   04:18:31:9F:A7:B7:04:36:0C:82:E2:ED:78:33:03:31:C5:77:6F:FF
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184CF49ABB3EABEE2F4A63F5E7440FF65A9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BBgxn6e3BDYMguLteDMDMcV3b_8.roa
Signing time:             Thu 01 Dec 2022 20:03:42 +0000
ROA not before:           Thu 01 Dec 2022 20:03:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201242
IP address blocks:        2a06:a005:1084::/48 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:cf:49:ab:b3:ea:be:e2:f4:a6:3f:5e:74:40:ff:65:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  1 20:03:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0418319fa7b704360c82e2ed78330331c5776fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4e:a1:db:dc:cb:0b:d1:37:52:aa:ca:d8:8b:
                    10:21:c0:55:f0:cb:d7:9d:97:9f:70:cf:54:65:d4:
                    5b:ae:48:ee:98:71:94:22:8b:19:ee:b8:cf:f9:84:
                    2d:c9:94:af:b2:6d:6c:fe:34:98:25:b9:5b:75:3f:
                    cd:25:cd:f0:92:29:0b:20:13:bc:76:24:c2:07:61:
                    e9:61:77:01:f9:9d:cf:87:4a:ff:ce:6b:d6:1b:bc:
                    27:92:84:84:bb:2c:bf:55:41:48:8d:8d:15:2e:c1:
                    00:61:a7:d0:27:af:56:ca:9b:be:96:b9:1c:a4:84:
                    bb:f7:38:e2:d1:91:48:7a:34:33:4a:e4:f4:6e:f2:
                    93:26:ae:a6:ca:b2:31:d1:24:ed:90:ea:0e:25:79:
                    5a:87:1d:e3:a1:22:d3:a3:9f:97:9a:14:0e:43:3c:
                    5a:cc:e9:6c:52:f0:b2:5f:36:de:c9:86:85:1b:8e:
                    1f:e0:8e:b2:e9:70:91:47:01:f6:f2:4c:2d:52:0b:
                    e4:c0:7d:94:28:19:6e:16:76:d4:85:29:02:20:48:
                    4a:a0:cb:90:84:3e:0c:08:a1:02:3b:09:9a:b9:4f:
                    a6:74:1d:72:c9:f6:f5:1a:7f:41:c9:a0:25:4a:76:
                    8f:dd:37:13:2c:ad:bc:cf:8b:90:2d:ef:96:29:d6:
                    9b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:18:31:9F:A7:B7:04:36:0C:82:E2:ED:78:33:03:31:C5:77:6F:FF
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BBgxn6e3BDYMguLteDMDMcV3b_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1084::/48
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:92:54:55:e8:3a:0e:20:1a:74:9c:31:63:50:b1:ba:41:57:
         6a:6e:0e:3b:ac:a3:6e:8a:1d:fd:c7:bd:ef:d2:66:52:74:c0:
         e4:37:79:4e:59:5b:0c:5e:eb:cb:69:47:ce:a7:23:39:64:38:
         e1:b6:1b:3d:fb:03:d7:fe:a0:f5:c4:49:60:fb:36:1c:8f:40:
         ab:15:0e:32:22:67:bb:e8:b3:db:79:2c:42:dd:74:3d:50:d7:
         1b:1f:8a:a9:d4:de:fa:d9:bf:44:27:c0:74:06:c7:41:2b:5e:
         a1:b3:ec:a8:c6:ad:c1:2c:a2:8b:be:e1:43:62:f4:98:38:6d:
         58:da:38:45:dc:a5:be:c9:f8:7b:32:ef:a6:5c:8f:35:65:ca:
         62:13:af:3b:cd:fe:31:a3:21:5d:72:15:e1:b7:b7:43:8c:32:
         e7:69:05:6b:98:a1:97:26:e3:d5:a4:50:1c:c3:0c:ba:f4:f0:
         e3:06:87:81:c4:d9:3d:64:cd:08:87:13:30:ae:2f:1a:8c:c7:
         3d:23:e5:07:f8:60:77:d0:ce:61:6d:4a:3e:ee:b0:de:6a:c6:
         c3:df:2b:8b:fc:da:e4:85:bb:11:cd:5e:f4:09:56:e0:00:fb:
         2a:80:44:30:3f:05:54:f7:49:98:e6:03:de:9d:46:bc:60:67:
         75:69:da:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----