Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DL620T-E2WLvd01Mge2F-InwRRI.roa
File:                     DL620T-E2WLvd01Mge2F-InwRRI.roa (raw, json)
Hash identifier:          QQH9iXs8FOMqUiqq+AE4H/OW3Q+06aj+r/q8Ls7GhRY=
Subject key identifier:   0C:BE:B6:D1:3F:84:D9:62:EF:77:4D:4C:81:ED:85:F8:89:F0:45:12
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184BA3A9788735B459F7E165C39549E30FE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DL620T-E2WLvd01Mge2F-InwRRI.roa
Signing time:             Sun 27 Nov 2022 17:55:12 +0000
ROA not before:           Sun 27 Nov 2022 17:55:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202218
IP address blocks:        2a0a:6040:ff00::/40 maxlen: 48
                          2a06:a005:1c7b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ba:3a:97:88:73:5b:45:9f:7e:16:5c:39:54:9e:30:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 27 17:55:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0cbeb6d13f84d962ef774d4c81ed85f889f04512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fd:25:0e:62:f5:c3:e1:82:83:44:3c:90:0b:
                    e6:63:f8:0c:af:e2:dd:a5:8e:cc:2f:9d:61:42:e6:
                    c5:eb:45:f2:04:f6:15:d9:99:ed:22:80:f1:a1:54:
                    08:b3:f0:26:73:88:21:4e:d1:3b:ed:22:44:2c:de:
                    ef:a2:ad:80:54:9f:7a:fd:2a:cf:eb:3e:a1:15:70:
                    08:89:1d:d6:e3:6a:ff:14:1f:b1:5f:29:19:20:05:
                    b3:04:c0:da:5d:84:68:4d:44:e8:81:36:a1:2d:d6:
                    0d:ea:73:fc:4f:13:75:51:47:06:5f:46:22:d3:23:
                    2b:a3:d6:c8:77:15:36:4b:9a:5e:57:1e:36:a3:ad:
                    f3:d8:de:f8:fd:65:f0:06:34:3d:96:42:9c:57:18:
                    75:45:36:a3:7c:06:3e:3b:1b:14:c7:02:15:3c:33:
                    37:16:ea:71:4e:ad:5a:7a:b6:51:32:21:1a:a5:c3:
                    6c:c1:3d:21:97:80:49:4c:91:54:7a:c2:41:94:01:
                    ac:a3:ce:b5:6d:d5:2b:a6:2e:30:f3:68:60:de:6c:
                    3c:a5:43:43:80:4a:80:53:10:cc:f7:27:0a:bd:35:
                    48:d7:5c:2e:f3:6e:d7:19:b4:e5:cd:54:1c:31:4c:
                    9e:85:b9:3b:61:06:de:85:49:89:9c:15:95:e9:63:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BE:B6:D1:3F:84:D9:62:EF:77:4D:4C:81:ED:85:F8:89:F0:45:12
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DL620T-E2WLvd01Mge2F-InwRRI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1c7b::/48
                  2a0a:6040:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:32:b9:c3:cf:2c:8a:0a:22:29:03:65:e9:7f:fd:f1:f4:ad:
         04:fa:63:06:15:b3:08:4a:d6:bf:ee:69:f7:9e:54:e2:7c:e9:
         fc:d2:2a:56:31:94:4b:f8:ff:39:b8:95:28:6e:87:a2:c3:2e:
         ea:ae:5a:bb:46:34:bc:03:9b:a3:9b:9d:c5:53:85:36:bf:61:
         56:2d:d6:c0:90:50:30:cf:9f:bd:00:ed:81:d9:d4:fa:1d:c6:
         0d:8c:63:5f:74:91:70:48:c6:cd:c5:65:c8:01:5a:1f:5e:96:
         17:9d:96:da:2c:11:ba:f3:59:9a:77:9b:c5:5d:21:af:50:70:
         ac:94:fe:22:a8:c6:f5:9d:4a:02:80:97:d4:1f:63:31:56:59:
         c5:b1:b2:51:ad:bf:0e:72:d3:77:c6:45:59:6d:06:39:53:09:
         6c:7d:92:d7:68:79:6b:67:62:7f:2f:cc:c6:f4:5a:d3:2a:bd:
         c9:29:57:46:0f:ed:c3:8a:7e:9b:c5:ae:ae:29:06:81:bf:74:
         d1:3e:55:62:93:c9:71:6f:17:58:d4:35:bb:4d:6d:d6:70:b4:
         3f:53:b6:82:9a:47:f4:b2:c2:e3:11:6b:fd:92:61:dd:18:c9:
         ab:f4:88:50:6d:84:a6:f7:01:cb:ef:07:01:88:4b:ac:5e:23:
         cd:5f:fd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----