Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C3PGXHrFkCSlyWelFFSDG8zW10A.roa
File:                     C3PGXHrFkCSlyWelFFSDG8zW10A.roa (raw, json)
Hash identifier:          5CBSJFxgDtxH5xrjouA39KG/CwONm0Fam2Q8sse4+J8=
Subject key identifier:   0B:73:C6:5C:7A:C5:90:24:A5:C9:67:A5:14:54:83:1B:CC:D6:D7:40
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18F8BD94
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C3PGXHrFkCSlyWelFFSDG8zW10A.roa
Signing time:             Sun 01 May 2022 20:40:49 +0000
ROA not before:           Sun 01 May 2022 20:40:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212983
IP address blocks:        2a06:a005:43e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418954644 (0x18f8bd94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  1 20:40:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b73c65c7ac59024a5c967a51454831bccd6d740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:44:aa:f5:09:f7:fd:1d:a3:7d:76:04:2a:52:
                    97:a9:d6:7f:e7:56:3b:c7:c5:77:4a:ab:8f:66:71:
                    34:af:b9:27:b2:16:6e:6b:42:d9:43:f6:82:9a:8a:
                    03:43:e9:4d:d5:a5:44:19:aa:6f:79:6d:09:a1:63:
                    95:86:c4:68:0f:ec:39:16:9e:af:39:1b:a9:1a:03:
                    6b:b0:2b:4d:b1:59:f0:e2:86:3d:4e:c6:7e:64:a8:
                    8f:7a:34:8a:c6:9f:71:a4:de:6b:3f:c0:aa:76:dd:
                    af:36:20:79:05:0b:a1:2c:5a:54:f7:cc:20:67:14:
                    f0:19:60:04:b0:31:c2:e6:b0:75:f3:12:1d:62:fa:
                    1b:68:d8:00:ee:1b:d7:a3:97:65:25:d5:23:ca:39:
                    b9:bb:1a:ad:d0:81:e3:47:a8:48:86:bc:35:12:a9:
                    97:fe:cf:8c:3d:ec:db:ad:40:dd:3a:de:be:06:3b:
                    5b:13:65:aa:7c:70:66:9a:26:df:99:00:a6:bc:f4:
                    41:d6:89:ca:e1:c8:e6:3a:6b:3b:d6:ee:45:00:e3:
                    26:0a:c6:b1:fb:7d:0a:b2:2b:c4:f3:3b:9c:b3:80:
                    bd:e1:70:40:b8:a2:36:95:5a:79:70:8b:05:98:20:
                    66:ee:c6:2a:4d:59:5a:ce:78:c1:c7:f4:4f:0b:e1:
                    ba:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:73:C6:5C:7A:C5:90:24:A5:C9:67:A5:14:54:83:1B:CC:D6:D7:40
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C3PGXHrFkCSlyWelFFSDG8zW10A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:43e::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:a4:d9:1a:90:3a:21:96:1b:12:0a:c8:09:0a:0d:52:a3:08:
         02:06:31:c9:af:d5:8a:af:ef:0a:7e:91:e6:c2:1d:49:4f:9b:
         81:28:af:fb:50:e4:20:65:ed:25:ed:e9:f5:22:65:e1:e9:82:
         e4:05:b6:60:b4:c8:7f:c4:88:2c:2f:15:5f:0f:7a:07:67:72:
         a0:65:a1:67:10:30:76:3c:af:aa:b6:58:a7:e0:0e:c6:3a:7d:
         fb:ff:92:90:3a:63:94:d9:88:5d:9d:7a:8c:2b:b8:d7:45:1d:
         95:10:52:fa:80:21:62:7b:c4:59:da:7f:66:83:f9:bf:3c:ef:
         fb:5e:d6:47:5c:62:f5:be:39:00:83:b1:54:9c:7a:f4:9c:d7:
         25:c4:3f:91:c4:70:d9:e8:8a:48:c1:de:2b:b9:20:93:1b:65:
         2a:85:42:ac:40:8c:02:ec:58:1b:4b:2f:7a:c9:38:c6:5c:8e:
         f0:0d:35:45:2f:cc:1b:e6:d6:00:08:dc:e8:79:0a:99:48:19:
         54:1c:0e:d8:cb:89:3d:78:52:94:21:d2:c6:18:0f:70:b6:23:
         0e:f2:f0:15:07:a0:0a:fe:07:0d:e7:06:7d:14:06:49:de:e4:
         3b:91:c4:71:3e:a0:37:72:8e:0e:ad:c3:a2:7e:84:87:52:c0:
         9e:02:e2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----