Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C4TA86E1vr60X4ZkudVawQLtOj4.roa
File:                     C4TA86E1vr60X4ZkudVawQLtOj4.roa (raw, json)
Hash identifier:          G09d4v12+KW/MBDXXj5s/2nTjfJLIi/Hu/tqtc+p3GI=
Subject key identifier:   0B:84:C0:F3:A1:35:BE:BE:B4:5F:86:64:B9:D5:5A:C1:02:ED:3A:3E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01833D0F9F122D425A4DC3B343605954DE92
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C4TA86E1vr60X4ZkudVawQLtOj4.roa
Signing time:             Wed 14 Sep 2022 17:32:57 +0000
ROA not before:           Wed 14 Sep 2022 17:32:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205431
IP address blocks:        2a06:a005:5a4::/48 maxlen: 48
                          2a06:a002::/32 maxlen: 48
                          2a06:a005:1d10::/44 maxlen: 48
                          2a06:a005:1d20::/44 maxlen: 48
                          2a06:a005:17a0::/44 maxlen: 48
                          2a06:a005:1d30::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:3d:0f:9f:12:2d:42:5a:4d:c3:b3:43:60:59:54:de:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 14 17:32:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b84c0f3a135bebeb45f8664b9d55ac102ed3a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:78:b6:2e:e5:86:d1:7e:09:de:e9:37:16:86:
                    79:e1:dc:a1:16:af:5d:7f:6d:67:1a:f4:1d:08:74:
                    34:2a:ee:5c:e3:67:c3:a2:e3:ff:02:1d:c9:2c:3c:
                    7e:a7:3b:e6:8e:3a:78:6c:63:ba:ee:4e:6c:f1:bf:
                    b3:76:c1:df:12:f7:e0:f7:f1:0a:a5:00:e1:70:46:
                    9e:e5:a4:4b:4e:40:a7:d4:a6:26:0d:3e:8f:de:1b:
                    51:69:b6:1e:b4:4a:9a:4b:ac:1a:62:e7:3f:1c:6d:
                    45:0f:d0:8f:ee:61:c7:be:70:de:b6:36:4a:87:7b:
                    89:84:8d:0d:d4:00:4c:63:59:ac:65:4e:ce:8f:26:
                    ce:fa:13:30:e4:f6:18:bc:ee:9f:13:b5:c2:ec:9e:
                    bc:c7:a9:9f:4b:43:af:9f:81:cc:a6:84:ae:9b:06:
                    52:2d:f7:73:a3:e7:81:21:b3:d8:e7:bf:a5:59:de:
                    6d:8e:43:53:37:c7:0b:bd:e4:0f:1d:74:a3:e6:fd:
                    91:1c:5f:16:e4:93:25:aa:36:17:e6:7b:1c:93:84:
                    dd:6b:bb:5b:00:f4:b5:70:f8:3a:0d:cb:33:bc:e4:
                    f7:a4:eb:f0:86:1e:90:c3:8b:ea:49:b2:3c:bc:f1:
                    66:e3:b5:24:8f:1a:9c:36:96:7f:81:dc:ff:13:9d:
                    55:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:84:C0:F3:A1:35:BE:BE:B4:5F:86:64:B9:D5:5A:C1:02:ED:3A:3E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C4TA86E1vr60X4ZkudVawQLtOj4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002::/32
                  2a06:a005:5a4::/48
                  2a06:a005:17a0::/44
                  2a06:a005:1d10::-2a06:a005:1d3f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         71:56:6e:68:a2:e6:65:00:d7:9b:22:f4:ca:82:21:2c:5b:fc:
         ef:76:44:69:f3:9c:55:3f:94:72:c9:b9:76:37:9a:d0:54:7a:
         a0:ea:dd:0a:19:98:59:ed:9d:c4:02:56:54:46:2b:84:0d:33:
         15:4a:32:f0:e8:45:c6:ef:38:00:83:7d:89:40:56:97:1c:0e:
         56:06:c8:98:59:f3:53:c5:45:ee:b4:b9:7e:23:75:07:2f:9e:
         13:82:a6:6d:4b:12:c8:e9:ae:ba:c8:ec:be:62:9d:64:c1:0e:
         8d:8f:54:5d:64:61:6d:9f:47:56:b8:fb:37:f5:a0:70:a3:88:
         ef:30:27:f6:9e:a5:b1:bc:53:49:93:e1:ab:a3:07:30:9d:8e:
         9d:4a:98:bc:e5:32:bf:f6:ea:e2:58:6e:fd:ab:a6:99:fe:8b:
         bf:0f:bf:e4:4a:cb:fd:d9:ea:8e:f7:61:ae:0d:45:5b:d9:cc:
         da:f1:14:f0:6e:db:94:11:d8:16:3c:f4:5d:7a:4d:b6:1d:53:
         39:09:b0:df:10:dd:53:4c:c1:7d:2d:5a:7a:23:79:92:50:a1:
         f5:fe:0a:e0:6b:c9:da:d2:5b:7c:fa:a4:c7:e8:65:65:5d:43:
         c9:9e:51:ec:54:f6:5e:5a:f6:76:83:e3:c1:59:0d:84:c8:55:
         a4:04:2e:cf
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYM9D58SLUJaTcOzQ2BZVN6SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTE0MTczMjU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjg0YzBmM2ExMzViZWJlYjQ1Zjg2NjRiOWQ1NWFjMTAyZWQzYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33i2LuWG0X4J3uk3FoZ54dyhFq9d
f21nGvQdCHQ0Ku5c42fDouP/Ah3JLDx+pzvmjjp4bGO67k5s8b+zdsHfEvfg9/EK
pQDhcEae5aRLTkCn1KYmDT6P3htRabYetEqaS6waYuc/HG1FD9CP7mHHvnDetjZK
h3uJhI0N1ABMY1msZU7OjybO+hMw5PYYvO6fE7XC7J68x6mfS0Ovn4HMpoSumwZS
Lfdzo+eBIbPY57+lWd5tjkNTN8cLveQPHXSj5v2RHF8W5JMlqjYX5nsck4Tda7tb
APS1cPg6DcszvOT3pOvwhh6Qw4vqSbI8vPFm47UkjxqcNpZ/gdz/E51VtQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFAuEwPOhNb6+tF+GZLnVWsEC7To+MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvQzRUQTg2RTF2cjYwWDRaa3VkVmF3UUx0T2o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwUAKgagAgMH
ACoGoAUFpAMHBCoGoAUXoDASAwcEKgagBR0QAwcGKgagBR0AMA0GCSqGSIb3DQEB
CwUAA4IBAQBxVm5oouZlANebIvTKgiEsW/zvdkRp85xVP5Ryybl2N5rQVHqg6t0K
GZhZ7Z3EAlZURiuEDTMVSjLw6EXG7zgAg32JQFaXHA5WBsiYWfNTxUXutLl+I3UH
L54TgqZtSxLI6a66yOy+Yp1kwQ6Nj1RdZGFtn0dWuPs39aBwo4jvMCf2nqWxvFNJ
k+GrowcwnY6dSpi85TK/9uriWG79q6aZ/ou/D7/kSsv92eqO92GuDUVb2cza8RTw
btuUEdgWPPRdek22HVM5CbDfEN1TTMF9LVp6I3mSUKH1/grga8na0lt8+qTH6GVl
XUPJnlHsVPZeWvZ2g+PBWQ2EyFWkBC7P
-----END CERTIFICATE-----