Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CoYcIEdOBfAZbqULY74Bzu-gEpI.roa
File:                     CoYcIEdOBfAZbqULY74Bzu-gEpI.roa (raw, json)
Hash identifier:          ItnKy0Vmv87gKaDcycDvmPnQmCv86tqD7oW0wUODSlg=
Subject key identifier:   0A:86:1C:20:47:4E:05:F0:19:6E:A5:0B:63:BE:01:CE:EF:A0:12:92
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18546D51
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CoYcIEdOBfAZbqULY74Bzu-gEpI.roa
Signing time:             Mon 18 Apr 2022 18:25:08 +0000
ROA not before:           Mon 18 Apr 2022 18:25:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213169
IP address blocks:        2a06:a005:350::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408186193 (0x18546d51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 18 18:25:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a861c20474e05f0196ea50b63be01ceefa01292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:85:07:40:0e:ba:6f:ff:47:f1:8c:cc:10:0a:
                    08:21:9b:5a:7a:80:19:19:56:2a:5d:d5:a2:0f:93:
                    eb:df:bb:30:87:6b:9e:ff:98:36:5c:e0:a9:b0:05:
                    25:5f:e1:12:d4:71:a0:9b:38:6c:20:51:a3:de:d6:
                    c6:e2:aa:41:87:ce:a6:64:a8:58:f2:9e:d4:ec:09:
                    50:73:0e:fc:37:5d:f8:50:62:e8:dd:fa:ef:38:36:
                    ea:00:61:9e:fa:f9:06:13:f8:4a:76:b1:28:f3:91:
                    3a:4a:a9:b9:cf:44:7e:2e:6d:2b:21:70:13:8c:d3:
                    01:90:ab:ae:b5:2d:77:1b:d2:0c:48:62:c3:35:10:
                    94:a5:44:c6:4c:b3:b1:f6:42:a7:58:ed:58:b2:d2:
                    f2:65:c3:f5:f1:8f:b8:1d:33:34:6b:2d:7b:1c:57:
                    72:5e:26:40:91:56:1a:b8:88:cc:4a:74:9c:60:cf:
                    16:1a:54:db:5c:3f:25:54:6c:1b:13:56:2d:4a:56:
                    48:75:08:29:89:dd:39:ba:40:33:e7:50:b8:f2:5c:
                    c0:55:e0:b4:18:8a:65:0f:f3:4a:10:bc:60:9f:cf:
                    a4:d1:01:c5:f9:c6:4b:e4:e8:c1:f9:72:88:8d:b7:
                    b0:3b:d6:26:ae:da:0a:65:37:b2:54:6f:0d:f5:d2:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:86:1C:20:47:4E:05:F0:19:6E:A5:0B:63:BE:01:CE:EF:A0:12:92
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CoYcIEdOBfAZbqULY74Bzu-gEpI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:350::/44

    Signature Algorithm: sha256WithRSAEncryption
         42:d6:c1:13:91:88:88:ff:ab:81:1f:75:17:21:f4:92:a5:95:
         ae:f3:82:f9:92:15:27:da:e6:d5:15:ed:5a:b0:97:ce:84:4d:
         00:47:6b:81:4e:0c:f3:24:1f:05:5a:a8:3d:d5:f8:49:53:8e:
         d5:b2:35:d9:16:05:ed:58:61:db:a0:a6:7d:22:81:b6:69:0e:
         a6:a6:c0:f0:c2:b6:c2:4c:ed:e6:de:80:ce:be:fb:10:f3:97:
         5e:61:6e:bf:82:a7:2c:df:0a:40:0b:04:81:74:52:26:bc:da:
         c7:98:6b:de:ee:a1:00:4d:c6:5a:71:b0:c2:67:1d:de:d5:d4:
         65:2b:2e:4b:64:4c:67:f7:c4:06:b3:56:47:1c:3c:e6:17:9f:
         6a:ed:29:89:20:31:2b:95:21:b8:f7:53:0a:aa:3d:35:99:63:
         11:f2:79:b0:f8:cd:40:55:fb:75:85:8e:25:fa:07:06:4a:fd:
         ff:29:88:21:d1:ba:46:d9:77:4b:47:ae:88:be:1b:6f:f5:0c:
         a1:f3:55:e9:26:4b:76:40:4d:c3:d9:65:cd:0c:08:b7:f2:67:
         fd:c5:ef:b9:c5:b8:ea:63:0b:e0:06:8d:6e:2c:a9:08:95:a0:
         35:20:9c:6a:e8:72:e9:ce:a6:e1:b7:e4:e5:24:b2:da:df:1d:
         ff:5f:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----