Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BetOVdp8lVHAC2L0Uh0YaWLtF_M.roa
File:                     BetOVdp8lVHAC2L0Uh0YaWLtF_M.roa (raw, json)
Hash identifier:          LztlVeuWr1N/8kpcT4unV06Z1V8EQuioyjFrfHADC44=
Subject key identifier:   05:EB:4E:55:DA:7C:95:51:C0:0B:62:F4:52:1D:18:69:62:ED:17:F3
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01840EE3FE56913927A65E5587863884C6EC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BetOVdp8lVHAC2L0Uh0YaWLtF_M.roa
Signing time:             Tue 25 Oct 2022 11:25:33 +0000
ROA not before:           Tue 25 Oct 2022 11:25:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44570
IP address blocks:        2a06:a004::/32 maxlen: 48
                          2a06:a000::/32 maxlen: 48
                          2a06:1280:1000::/36 maxlen: 48
                          2a06:a003::/32 maxlen: 48
                          2a06:a005::/32 maxlen: 48
                          2a06:a005:18b0::/44 maxlen: 48
                          2a06:a005:1a70::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a05:dfc7:1300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0e:e3:fe:56:91:39:27:a6:5e:55:87:86:38:84:c6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 25 11:25:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05eb4e55da7c9551c00b62f4521d186962ed17f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c0:16:2d:2b:d4:9f:e1:78:26:05:c2:ae:11:
                    59:60:f9:06:ed:51:33:57:0d:1d:92:2d:48:6e:ba:
                    4f:9f:35:af:86:18:7f:dd:cb:33:4e:29:07:f5:95:
                    28:7b:15:75:99:55:43:81:d4:d6:4c:0a:1d:79:c4:
                    89:cf:76:83:a6:ea:f0:5a:5f:cb:a4:1a:ea:73:b9:
                    2b:44:27:99:65:89:a7:d0:45:ba:74:3f:d4:b4:c4:
                    90:41:99:7b:b0:ca:bd:2e:ef:76:9b:a2:7f:3c:44:
                    63:42:13:68:fb:c3:1a:9b:4d:0f:8b:9e:bb:74:35:
                    1a:98:4f:24:e0:87:d1:16:d6:19:50:9a:72:21:73:
                    35:83:20:5d:43:b3:62:a2:f2:08:1b:e2:ef:25:0c:
                    7b:00:d6:5e:71:fd:04:31:1f:50:5d:7d:c9:cc:27:
                    42:02:ff:71:03:9e:96:c4:58:97:bc:81:34:5c:ca:
                    a0:94:21:55:e5:1b:6f:12:4e:e7:95:45:50:41:48:
                    8f:b8:9a:dc:87:fb:f0:54:c1:cf:8f:35:5d:97:ce:
                    00:57:41:9e:e9:db:ad:55:f1:c4:c7:3c:79:ca:8a:
                    77:3b:68:03:31:74:8f:83:03:c0:54:cb:31:af:cf:
                    2d:ee:94:40:1b:4c:30:1c:b0:9e:75:ad:e5:82:34:
                    e6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EB:4E:55:DA:7C:95:51:C0:0B:62:F4:52:1D:18:69:62:ED:17:F3
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BetOVdp8lVHAC2L0Uh0YaWLtF_M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1300::/40
                  2a06:1280:1000::/36
                  2a06:a000::/32
                  2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:74:88:db:a4:c2:c9:98:11:94:92:74:b5:36:5e:fd:07:e5:
         c0:88:fe:1e:4c:07:78:5e:01:64:71:1c:b8:d0:0a:2e:97:e6:
         1a:c1:7f:2a:14:96:5e:89:41:8d:8e:51:c8:8c:a6:3f:c6:ad:
         67:d9:41:49:5d:0f:dd:b9:03:3b:de:25:ac:5d:3e:23:cb:cc:
         1b:a1:39:85:27:3a:ea:98:b5:e0:bd:72:a8:65:40:ca:ba:2b:
         6b:2d:c5:a3:28:ac:53:8c:6b:9f:7a:a3:ec:47:d5:71:52:ab:
         9d:77:1b:26:db:90:7b:26:f8:b1:15:e6:db:09:9b:a5:58:2d:
         a7:c8:25:6b:86:4e:af:bb:36:bc:26:33:a7:2e:8f:ea:ae:fa:
         b0:e3:4a:e7:32:cf:08:34:af:bd:49:7f:4d:1e:2f:22:05:9b:
         7c:8b:6c:91:07:09:5b:89:50:b5:1a:36:64:92:aa:a6:51:52:
         36:8a:cc:a1:42:1a:84:04:57:8e:d9:99:44:ea:31:63:0d:3a:
         76:11:b5:90:ea:70:ac:a0:5d:e6:82:1f:ea:ff:34:e3:06:2c:
         a4:8e:a2:9c:42:5a:38:29:d6:e6:a4:a4:78:1b:6d:11:fe:01:
         3d:83:9a:30:29:d7:68:87:ef:8d:6a:53:19:b3:24:62:e8:a1:
         bc:92:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----