Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Dl15S8msLUZA9xcyWfuO3_C4UF4.roa
File:                     Dl15S8msLUZA9xcyWfuO3_C4UF4.roa (raw, json)
Hash identifier:          rO2J0vc8lgTLSdLoA3hngBy8TIMnG+CxLH2lt6GSAXA=
Subject key identifier:   0E:5D:79:4B:C9:AC:2D:46:40:F7:17:32:59:FB:8E:DF:F0:B8:50:5E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01833168BBAF1171027264D69575E81DE2C6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Dl15S8msLUZA9xcyWfuO3_C4UF4.roa
Signing time:             Mon 12 Sep 2022 11:14:50 +0000
ROA not before:           Mon 12 Sep 2022 11:14:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204406
IP address blocks:        2a06:a005:1660::/44 maxlen: 48
                          2a06:a005:1c90::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:31:68:bb:af:11:71:02:72:64:d6:95:75:e8:1d:e2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 12 11:14:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e5d794bc9ac2d4640f7173259fb8edff0b8505e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:6d:1e:a0:ce:8b:1a:c9:e9:a2:26:40:c0:
                    d5:14:d2:d8:3f:a8:c1:a2:e8:fc:c4:19:d0:21:d3:
                    76:91:8f:06:4c:11:29:e7:64:e2:ff:71:b2:09:65:
                    f8:3d:8f:7b:88:1b:a0:2e:49:b5:5a:e0:51:f5:8d:
                    a0:0b:5e:e1:13:cb:a8:44:62:40:24:c5:97:3b:63:
                    db:4e:af:64:c9:85:55:93:fb:36:4a:84:ef:b2:6f:
                    9d:2e:86:35:d0:2a:67:04:1d:5a:4d:fe:af:65:4a:
                    b5:9e:ab:b7:87:98:1a:f2:c3:98:77:56:57:d2:61:
                    3a:11:a2:88:95:01:08:c9:92:e2:e3:7a:70:cb:80:
                    9f:9c:90:af:67:5d:dc:07:5b:28:00:1f:99:c3:96:
                    f6:64:a9:fe:41:c4:d0:15:53:a1:0e:07:91:a7:68:
                    dd:4f:50:2e:4b:87:0c:7f:2c:1a:35:a0:6d:df:aa:
                    40:b7:ce:f0:31:4e:a3:39:4c:7a:e2:ed:81:2d:c7:
                    ea:ab:51:f3:6f:f8:24:9d:1e:a4:e7:e4:24:c4:d5:
                    b1:40:b1:a0:e5:43:b1:20:9f:23:65:8a:d0:88:de:
                    8c:c8:8a:49:46:58:f8:6e:a5:9f:fc:7f:31:20:07:
                    8d:79:24:aa:c9:37:af:85:a0:90:9c:df:d9:77:a0:
                    dc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5D:79:4B:C9:AC:2D:46:40:F7:17:32:59:FB:8E:DF:F0:B8:50:5E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Dl15S8msLUZA9xcyWfuO3_C4UF4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1660::/44
                  2a06:a005:1c90::/44

    Signature Algorithm: sha256WithRSAEncryption
         60:a1:6b:06:96:a1:c8:8a:f6:28:95:ca:3a:bf:f6:09:47:1d:
         1e:a9:0e:8c:e7:d2:55:3d:b6:33:d2:b0:6a:74:fb:1c:35:c3:
         a5:53:e4:2c:a6:64:c5:5a:78:72:23:48:8a:64:47:f1:6a:0f:
         fa:96:c5:1b:83:b2:2a:2f:96:dc:e3:bb:46:ab:f5:83:4b:33:
         1c:cd:43:72:cd:bb:ba:4a:eb:34:4e:97:39:d3:f4:76:68:4a:
         bf:bd:f4:40:da:92:07:82:36:5f:db:c5:b9:4e:e5:3e:12:7f:
         18:36:da:5d:61:2b:29:6e:31:5a:2a:b0:b7:cc:42:e4:cb:0c:
         c5:0f:95:65:e9:a8:3f:7a:20:f2:c6:9a:28:3b:ba:45:69:72:
         aa:55:cc:4d:81:a7:a7:fa:f2:c7:d6:9d:33:88:63:86:df:eb:
         51:f8:74:03:04:08:b3:ee:09:6e:56:16:4e:a2:66:61:cf:0f:
         20:9c:c6:7c:9c:07:bd:1e:7e:07:c6:01:41:b5:a3:01:8f:61:
         2f:a3:47:bc:d4:8d:12:42:bb:d5:a6:b0:42:e4:80:79:fd:d8:
         8d:23:4f:5a:44:13:dc:fc:4f:c1:b3:95:cc:e9:6d:93:ea:fd:
         b4:0c:7f:19:72:3e:38:ee:85:ac:72:2d:55:d2:0e:94:67:6b:
         c5:63:85:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----