Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DhpdtPLAtP9H1FSc9LMl5WCmFx4.roa
File:                     DhpdtPLAtP9H1FSc9LMl5WCmFx4.roa (raw, json)
Hash identifier:          r8WtZvvIR3tAV3ww/5cvRse8RsJz/RHKmugB2+t+umM=
Subject key identifier:   0E:1A:5D:B4:F2:C0:B4:FF:47:D4:54:9C:F4:B3:25:E5:60:A6:17:1E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01836996BA6CB183EFFF943A976B67604D3B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DhpdtPLAtP9H1FSc9LMl5WCmFx4.roa
Signing time:             Fri 23 Sep 2022 09:03:49 +0000
ROA not before:           Fri 23 Sep 2022 09:03:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     150325
IP address blocks:        2a06:a005:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:69:96:ba:6c:b1:83:ef:ff:94:3a:97:6b:67:60:4d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 23 09:03:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e1a5db4f2c0b4ff47d4549cf4b325e560a6171e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:98:eb:10:75:b4:7c:e1:e0:24:91:4c:d7:e4:
                    74:50:dd:7a:91:55:f4:59:8a:dc:6f:25:3b:9a:ff:
                    d1:5d:48:aa:9f:68:f3:74:97:83:80:84:dd:18:ae:
                    91:ba:b5:d7:7d:d4:a3:41:ce:2b:d7:d8:66:26:84:
                    3c:46:8d:86:8f:87:a3:69:ae:42:2d:cc:6a:a8:f6:
                    58:61:06:00:85:83:de:c9:d7:1b:a4:10:e2:44:94:
                    e8:59:f6:34:46:14:94:aa:52:64:df:8a:df:be:98:
                    2b:27:f7:dd:0d:57:c1:2c:bc:88:78:9f:fa:8d:ef:
                    99:cb:bc:df:99:5c:04:33:7e:93:dc:fe:3c:fc:0a:
                    5d:12:54:55:8d:65:d6:60:a8:7a:02:ae:e6:0c:93:
                    da:6c:f0:c1:1d:77:a6:1b:42:f1:ed:b0:59:80:c4:
                    6e:3c:0f:cf:e2:76:6a:b4:35:68:43:ab:69:d9:6c:
                    16:9c:8d:81:42:cb:fc:8e:1d:19:63:f2:91:73:0e:
                    c5:a4:87:2f:e1:66:ae:6b:b3:06:43:03:99:65:c9:
                    86:86:c1:c1:2b:17:8e:74:25:00:c3:88:61:d4:bf:
                    84:a9:7d:38:01:51:0f:6f:49:f6:97:4c:b7:19:28:
                    ff:de:50:59:d2:c4:32:50:69:97:d4:4b:16:70:0b:
                    41:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1A:5D:B4:F2:C0:B4:FF:47:D4:54:9C:F4:B3:25:E5:60:A6:17:1E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DhpdtPLAtP9H1FSc9LMl5WCmFx4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:be:5e:27:32:97:90:f1:13:8d:6c:3c:8b:b3:7a:f6:66:07:
         e5:8d:e1:47:98:43:37:4c:61:86:d7:27:a6:b7:e2:b2:49:15:
         24:42:66:da:e8:ff:42:0b:c1:a7:e1:f2:47:05:a4:f5:28:ac:
         ad:38:a2:45:53:ab:0d:2c:25:c0:46:43:29:13:bd:90:4d:11:
         f4:b8:6a:2e:fc:a9:e5:af:60:a4:12:26:c1:96:b5:08:4f:f1:
         16:58:b8:e9:de:4a:71:89:ef:2b:24:69:e1:74:30:02:7f:b6:
         89:8f:a2:8c:f5:a6:e7:f3:b8:64:c5:38:5d:12:ae:ea:43:99:
         b0:df:71:1f:25:c1:28:a0:32:65:aa:a4:d7:8f:bf:9f:ff:a3:
         52:c2:d5:da:27:ab:9b:28:14:ae:de:88:e8:ed:ee:c4:10:51:
         64:6c:9c:02:fa:4b:6f:b0:f7:38:05:74:75:2a:ce:39:80:97:
         00:c0:d6:78:b7:55:76:2a:a2:aa:65:f7:71:57:9d:bb:47:62:
         41:0b:ab:1a:99:a1:ff:42:c6:d2:c0:fb:44:4a:bd:fd:68:54:
         9c:88:a6:8d:c0:8c:77:09:45:c7:db:7f:f9:ed:18:cd:fd:6b:
         06:ae:2e:aa:e6:2d:3f:f9:ea:68:44:a3:50:b9:ab:01:53:ee:
         7b:96:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----