Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BTQ51KZ8tIhH1v-m0Ur0vBG12CM.roa
File:                     BTQ51KZ8tIhH1v-m0Ur0vBG12CM.roa (raw, json)
Hash identifier:          YXDozAXyL17amj0wjgZdx4lpDMp9xs53pjgRvHRaFMw=
Subject key identifier:   05:34:39:D4:A6:7C:B4:88:47:D6:FF:A6:D1:4A:F4:BC:11:B5:D8:23
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       194B9C33
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BTQ51KZ8tIhH1v-m0Ur0vBG12CM.roa
Signing time:             Fri 06 May 2022 03:48:46 +0000
ROA not before:           Fri 06 May 2022 03:48:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213312
IP address blocks:        2a06:a005:620::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424385587 (0x194b9c33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  6 03:48:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=053439d4a67cb48847d6ffa6d14af4bc11b5d823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b5:ef:f3:e3:4b:e0:4f:65:8f:f2:69:e9:bb:
                    9b:84:82:71:bf:26:97:ee:79:12:b0:e4:31:6d:3b:
                    4f:38:18:4b:9a:c1:a4:9c:e5:2a:fd:31:d1:0f:c1:
                    4a:65:d2:9e:39:a0:22:49:91:40:89:6a:4b:b5:37:
                    05:c7:f4:7e:6c:24:97:ac:06:ff:29:19:f1:27:0b:
                    4f:78:c5:cb:79:4d:e9:03:ba:49:1d:3c:6a:89:c9:
                    4a:26:d3:09:3b:8b:15:ca:f5:bb:15:6e:ed:b4:a2:
                    9a:a3:6b:d3:90:9a:d7:61:56:33:37:10:8f:a5:52:
                    83:9b:3a:f8:05:be:0f:0e:2d:b1:ae:f7:d9:89:87:
                    69:79:b6:c9:3f:12:73:55:74:8f:b1:28:9d:ff:9d:
                    63:86:70:05:aa:9c:b8:08:5c:7a:8d:bc:dc:6a:5c:
                    87:03:c6:9f:1c:bb:1a:7e:1a:72:aa:57:6a:c5:12:
                    b0:1f:80:d8:bb:33:ca:22:05:4e:66:a5:d7:08:96:
                    b3:9d:ad:b5:e5:59:72:99:59:2f:c2:8e:6a:82:36:
                    20:94:5f:e5:e3:04:05:4d:7c:6c:8e:b9:d2:6a:fe:
                    f5:e5:c8:b3:c6:ea:36:6c:42:f8:6f:34:c4:5c:ec:
                    cb:72:c1:60:87:15:1d:0a:44:f8:47:26:38:90:e4:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:34:39:D4:A6:7C:B4:88:47:D6:FF:A6:D1:4A:F4:BC:11:B5:D8:23
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BTQ51KZ8tIhH1v-m0Ur0vBG12CM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:620::/44

    Signature Algorithm: sha256WithRSAEncryption
         01:61:ee:5d:11:4f:ae:f2:dc:84:a3:c6:a1:8b:09:c4:80:4c:
         f0:01:15:f7:57:11:c8:e5:2e:0f:5d:97:a0:7b:a5:1d:d9:06:
         11:82:24:3c:ff:41:6f:82:e2:3e:33:02:33:3a:5c:3e:0e:68:
         3c:5d:78:cd:c1:ec:91:3d:cb:96:d4:c0:36:25:ff:6b:b6:a5:
         0d:17:62:b0:99:dd:43:be:48:91:bc:98:47:ab:5c:61:90:43:
         f9:06:5d:c8:d3:61:e8:3e:73:29:1f:38:07:31:0c:29:36:b3:
         b2:d9:c8:97:b0:e6:91:de:f4:8c:25:e7:c9:ad:3c:6a:0c:e0:
         29:c9:81:99:58:63:ad:63:03:5d:47:fc:cc:f5:c4:88:c4:21:
         53:05:ef:9d:29:a0:ce:b0:1a:ac:85:75:34:6d:d0:41:f8:4b:
         15:d6:5f:50:dd:b1:41:c9:fe:aa:55:5c:74:5a:d9:60:24:be:
         d3:c3:ea:13:d2:a5:e4:03:c1:53:e5:64:3f:0c:db:b9:6d:e8:
         59:39:97:8b:0a:21:8c:d3:55:66:e5:88:a7:a6:cf:b8:3c:9d:
         2e:63:f9:86:39:8f:dc:39:6a:86:2d:32:57:5b:13:45:14:18:
         2e:7e:22:70:5f:70:f8:96:8e:7a:e2:77:05:18:b8:54:81:02:
         87:dd:2e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----