Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BU62ttozkMP1IMaSq4y_beu38EU.roa
File:                     BU62ttozkMP1IMaSq4y_beu38EU.roa (raw, json)
Hash identifier:          SHyh75RZsDsLXssWSE9egICanVUsZwSuE0eo5ldD6wg=
Subject key identifier:   05:4E:B6:B6:DA:33:90:C3:F5:20:C6:92:AB:8C:BF:6D:EB:B7:F0:45
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01829111DA78021D99E79CFE384DD34ABCC9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BU62ttozkMP1IMaSq4y_beu38EU.roa
Signing time:             Fri 12 Aug 2022 08:00:42 +0000
ROA not before:           Fri 12 Aug 2022 08:00:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212154
IP address blocks:        2a06:a005:5ae::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:91:11:da:78:02:1d:99:e7:9c:fe:38:4d:d3:4a:bc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 12 08:00:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=054eb6b6da3390c3f520c692ab8cbf6debb7f045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:14:83:9c:2a:78:0c:9b:f4:a9:db:bf:92:
                    48:cc:35:9f:cf:26:a2:a9:cd:c9:c6:15:63:73:cb:
                    ec:94:29:4f:ea:71:40:2d:70:23:fc:cd:6e:4c:ce:
                    47:69:c8:f6:5d:44:f1:ac:70:d9:f8:62:79:fd:79:
                    d6:ea:24:7f:3b:ce:e2:1a:e4:a3:78:08:b5:a8:33:
                    ac:10:47:b0:62:fe:a8:b6:44:c0:9b:fb:28:af:9f:
                    50:e5:04:d8:c3:12:c3:10:87:d1:36:6a:b4:00:1e:
                    4e:06:35:f5:6d:a0:48:4a:23:1d:3d:a4:ee:6e:df:
                    8a:fe:ae:8e:fc:bb:8a:f5:13:9a:3d:ad:1c:bb:13:
                    63:0b:fb:5b:1a:a2:0f:ff:da:67:3f:17:1e:ac:ce:
                    c5:28:b8:1c:7d:3b:5d:37:1f:ff:50:48:5e:ff:ee:
                    99:17:59:14:ea:14:88:a6:11:86:0f:cf:2a:69:47:
                    8d:68:2f:bf:11:d8:69:75:86:84:82:19:f5:b1:b0:
                    56:2e:38:5a:db:fe:dd:10:fb:97:7b:86:d9:b7:da:
                    87:8e:ed:30:12:57:0d:33:12:43:35:c0:0d:1d:05:
                    e6:f3:92:27:aa:7a:20:f2:4f:c7:9c:d5:91:a7:e3:
                    e2:78:f6:a5:5c:ae:bc:f4:be:20:ea:af:ac:6c:08:
                    34:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4E:B6:B6:DA:33:90:C3:F5:20:C6:92:AB:8C:BF:6D:EB:B7:F0:45
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BU62ttozkMP1IMaSq4y_beu38EU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5ae::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:76:4e:8c:d2:3e:33:0b:83:ed:f4:b6:bf:6a:77:95:2b:7d:
         49:84:bc:ba:33:be:18:fb:4e:9b:cb:23:a3:ef:d3:f1:81:2e:
         fb:b1:3c:1c:fe:6e:cd:1b:1f:a3:e9:03:e3:5f:8e:38:95:1a:
         25:ea:03:38:08:1a:aa:21:f7:df:e6:47:54:71:e8:ae:1f:f6:
         b0:1a:55:d3:62:43:a9:dc:71:f9:d7:1f:3e:33:2b:6f:b8:bd:
         9a:a7:df:a8:68:2e:6c:73:7b:b6:57:f2:ca:41:e5:38:70:4f:
         15:3d:c2:74:e8:c1:9f:ca:e7:27:d2:37:1e:03:bd:7f:77:34:
         23:6e:bc:4b:73:94:09:c2:40:48:2c:1d:d8:14:42:e2:e4:ba:
         1e:71:44:02:95:c2:c1:b1:14:8d:dc:ee:53:d8:bf:71:81:be:
         51:d3:01:20:78:d3:c6:a8:f8:3a:c8:ee:60:b5:ce:cf:d4:da:
         46:4e:78:a1:17:f1:25:29:03:8a:c6:74:5b:54:1b:db:5b:e9:
         d1:df:10:9e:7a:ea:ca:29:78:d7:5d:d5:50:aa:58:3d:c2:44:
         7b:ce:16:2f:b6:ef:33:82:61:fd:9b:0b:98:fc:c5:1b:bf:58:
         6b:d5:c9:ce:16:82:d9:34:c6:9b:84:2a:42:15:b4:e3:6a:82:
         c1:0f:f4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----