Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DpJSsOhUg6FMPzVGPLbCgDRuRaM.roa
File:                     DpJSsOhUg6FMPzVGPLbCgDRuRaM.roa (raw, json)
Hash identifier:          XKZHjQBamNmN7orHYlz0xykHn4jHV6XNLn5o4C36S6A=
Subject key identifier:   0E:92:52:B0:E8:54:83:A1:4C:3F:35:46:3C:B6:C2:80:34:6E:45:A3
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018229C35E18EFEA1E8B27C4A1D4AB1E1AF8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DpJSsOhUg6FMPzVGPLbCgDRuRaM.roa
Signing time:             Sat 23 Jul 2022 06:34:05 +0000
ROA not before:           Sat 23 Jul 2022 06:34:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208679
IP address blocks:        2a06:a005:8c0::/44 maxlen: 48
                          2a06:a005:9a0::/44 maxlen: 48
                          2a06:a005:8d0::/44 maxlen: 48
                          2a06:a005:990::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:29:c3:5e:18:ef:ea:1e:8b:27:c4:a1:d4:ab:1e:1a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 23 06:34:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e9252b0e85483a14c3f35463cb6c280346e45a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:10:b7:6c:41:36:e1:d9:2a:e6:d4:ab:fa:66:
                    19:93:4f:82:2e:9e:98:ba:6b:39:9a:94:13:c3:c9:
                    1e:b7:d9:6a:60:1a:d1:95:df:8a:4c:ab:33:0a:d2:
                    b0:69:b1:fd:9c:7c:d0:1e:43:4d:24:06:20:98:40:
                    f2:02:fc:2a:fd:26:00:7d:34:76:a9:17:a4:04:14:
                    01:f4:b9:32:e4:c4:e5:23:aa:b3:46:c4:44:b3:bb:
                    c8:5e:c4:56:c0:aa:e7:4e:8b:da:6f:88:cb:15:22:
                    67:70:0c:cc:b1:41:71:aa:46:2e:cf:f7:bb:26:cf:
                    f2:e1:a2:38:e5:bd:da:dd:8d:04:93:2c:7b:00:cc:
                    5b:9c:d5:ed:27:f5:56:73:7a:ee:f4:33:74:0b:73:
                    99:ad:e3:e6:cb:8b:eb:ce:d6:f4:84:69:aa:ec:c2:
                    74:64:1c:fb:ea:03:a0:70:cd:20:84:78:66:4b:9e:
                    9b:ba:d9:a4:c1:ed:ac:63:2e:67:48:75:e0:65:86:
                    c7:2f:fe:92:f4:20:12:2d:b2:30:01:52:f2:d8:46:
                    bf:4d:6f:29:95:66:f1:34:14:db:18:2c:66:38:27:
                    0d:6f:54:d5:4e:6e:37:31:52:1d:ff:6d:71:0c:33:
                    cb:d2:2b:1f:92:0c:ff:6b:bc:6a:8b:77:06:88:ab:
                    29:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:92:52:B0:E8:54:83:A1:4C:3F:35:46:3C:B6:C2:80:34:6E:45:A3
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DpJSsOhUg6FMPzVGPLbCgDRuRaM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:8c0::/43
                  2a06:a005:990::-2a06:a005:9af:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         55:e7:b9:3b:e5:d7:6b:3a:b5:df:6a:19:81:5a:1a:83:7a:c3:
         0a:2f:5e:4a:a6:8d:2a:ec:e0:db:97:76:2f:b5:60:05:25:1a:
         39:43:fd:54:a0:5a:5f:cf:41:9d:6a:fe:77:8d:c3:fa:01:7e:
         43:3c:1f:a0:1d:8b:74:96:dc:f8:d0:8e:cd:49:4b:0c:96:d4:
         b2:5f:6f:02:35:01:f8:43:8c:a9:b3:84:6a:75:c7:57:df:5f:
         55:33:7d:1d:19:d1:19:e4:c4:22:03:f1:33:4d:12:0c:17:48:
         8a:65:d5:c4:65:89:2f:ea:1d:d3:72:4d:46:76:b0:1c:05:ca:
         53:ea:f5:a6:37:76:8b:fb:fb:6d:47:6f:b0:44:b4:fc:ce:78:
         29:67:f3:b1:b2:ae:54:54:37:d6:e8:c6:cc:b7:6e:2e:29:58:
         ce:1f:4c:3d:a8:bb:9d:02:4a:a8:cf:36:b3:3d:30:c7:28:2f:
         93:5e:54:13:8e:03:c2:02:a7:c9:bb:73:67:47:85:8d:38:77:
         1f:b9:07:a2:0e:3e:b8:59:fd:d7:cd:24:65:2f:5a:8e:cc:ca:
         37:df:a4:1a:0e:72:d9:1d:22:a6:89:bd:1e:c4:f9:76:76:e4:
         76:f4:34:f8:37:95:cc:81:9f:ed:bb:02:7f:e2:2f:a3:45:30:
         6a:9b:a0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----