Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C6M8L97fPjMT7HsQlohOgF2oF1o.roa
File:                     C6M8L97fPjMT7HsQlohOgF2oF1o.roa (raw, json)
Hash identifier:          NZ+ltsDYUanwNUXRCLHbn+Lx50i7U5lvaM669m7m5B0=
Subject key identifier:   0B:A3:3C:2F:DE:DF:3E:33:13:EC:7B:10:96:88:4E:80:5D:A8:17:5A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184E21A104BA8BEB04914217A5AB434B837
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C6M8L97fPjMT7HsQlohOgF2oF1o.roa
Signing time:             Mon 05 Dec 2022 11:44:29 +0000
ROA not before:           Mon 05 Dec 2022 11:44:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200912
IP address blocks:        2a0a:6040:e400::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e2:1a:10:4b:a8:be:b0:49:14:21:7a:5a:b4:34:b8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  5 11:44:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0ba33c2fdedf3e3313ec7b1096884e805da8175a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6d:59:58:3d:e3:60:fc:35:6d:12:f0:1a:57:
                    bf:f0:d1:12:a2:b0:9b:b5:ff:14:70:5b:77:e5:cb:
                    5d:91:8b:56:44:02:dc:67:23:3a:5f:1c:80:b3:81:
                    49:d3:3e:a9:75:88:fb:3c:72:11:ce:40:47:06:0e:
                    6e:00:65:37:5f:26:54:5d:a3:7a:3c:68:ea:ed:c0:
                    7f:b2:a1:3c:e1:90:74:c3:f3:97:9d:31:7c:38:62:
                    75:09:e5:5b:fc:a0:26:02:90:0f:3d:b2:62:df:c8:
                    0f:50:e5:b4:d4:ae:4f:c0:12:01:91:3c:3a:22:e8:
                    d9:ec:1a:df:09:d6:78:37:37:1f:ff:70:46:4c:48:
                    d8:85:2f:8c:7e:e6:1c:9b:ae:8f:a7:fc:35:47:58:
                    16:d6:00:8a:1f:75:84:85:2e:55:29:b2:fa:65:95:
                    0d:7b:04:d3:f0:fd:b8:00:fc:68:27:27:c3:06:f6:
                    bf:b2:4d:df:b8:e3:a5:67:b4:6b:4a:d0:ce:74:e3:
                    1c:93:53:c3:85:07:75:1a:72:bf:a3:fb:3b:6e:c8:
                    e3:e0:07:46:f7:c2:2a:21:f3:00:5f:2e:7b:1f:ee:
                    00:53:ed:b0:c0:de:eb:cf:52:5a:d9:90:ee:16:e5:
                    56:6a:9a:8c:08:a1:56:f6:a4:a9:a9:91:2c:d4:57:
                    55:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A3:3C:2F:DE:DF:3E:33:13:EC:7B:10:96:88:4E:80:5D:A8:17:5A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/C6M8L97fPjMT7HsQlohOgF2oF1o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:e400::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:39:4c:d1:3d:4c:87:43:f4:9f:33:a9:2e:fe:36:56:aa:4a:
         df:37:f2:5e:8d:fb:eb:0e:f6:79:68:6d:6f:af:64:ed:82:aa:
         60:af:9d:3f:df:f6:9b:3f:50:01:a6:cf:fe:9a:b3:57:5f:ac:
         1d:8f:ce:77:a8:2b:a5:ae:e4:f0:f7:27:9a:21:86:82:2b:87:
         9e:49:95:25:4e:67:57:c6:c8:31:56:c3:41:eb:b4:ce:8f:d3:
         8e:18:9e:09:cc:27:86:9d:5f:03:06:b9:b3:53:5e:42:e7:ea:
         96:3a:c2:f1:7f:5a:5f:25:33:d9:27:94:a2:92:01:8f:a3:63:
         fc:60:93:2a:c7:62:5f:8e:14:f6:dc:c9:08:bb:db:de:27:6d:
         44:3a:c0:24:82:d1:5d:d2:29:6a:be:1a:44:cd:02:c2:e4:38:
         59:57:25:dc:24:34:08:23:e0:03:fe:ff:9e:1c:0a:19:31:9c:
         c7:64:97:41:5b:0d:a0:e2:9c:e4:a7:86:ee:b0:2e:56:da:2c:
         fb:1b:27:1a:b4:6e:d6:7e:cd:4c:41:15:6d:db:5b:76:13:e9:
         19:29:11:c1:2e:dc:7d:e9:3f:d9:75:77:66:9e:84:03:4a:f5:
         0d:15:93:65:56:d7:d2:78:fa:68:df:4e:44:22:d5:5f:c3:a9:
         52:96:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----