Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EVD-P1BkP46yQl-ENiM9weXfhtY.roa
File:                     EVD-P1BkP46yQl-ENiM9weXfhtY.roa (raw, json)
Hash identifier:          FM1xs9+GW4l1E2YUR2JBprbk3/eAdHDGSYQa+WmfMb4=
Subject key identifier:   11:50:FE:3F:50:64:3F:8E:B2:42:5F:84:36:23:3D:C1:E5:DF:86:D6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01823410BD46DFC3190717F54EE098B9415E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EVD-P1BkP46yQl-ENiM9weXfhtY.roa
Signing time:             Mon 25 Jul 2022 06:34:48 +0000
ROA not before:           Mon 25 Jul 2022 06:34:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     131745
IP address blocks:        2a06:a005:457::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:34:10:bd:46:df:c3:19:07:17:f5:4e:e0:98:b9:41:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 25 06:34:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1150fe3f50643f8eb2425f8436233dc1e5df86d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:1e:be:82:54:1d:45:53:5f:32:ca:c7:5a:
                    88:4c:ed:f2:9e:ab:0d:a6:27:e3:9e:c0:b9:b7:87:
                    45:8d:85:20:ff:25:14:f8:65:3f:b5:4e:4d:45:81:
                    36:c0:bc:62:23:21:dd:15:ee:dd:b4:be:bb:f5:48:
                    45:5f:91:a5:4c:51:36:e9:fb:04:49:8f:68:12:45:
                    f5:31:53:fa:6f:fb:4b:8e:df:e4:e6:8c:73:35:94:
                    a3:9a:40:15:d3:71:63:bc:c0:a7:6d:e5:6e:49:62:
                    9c:3d:0a:0b:f7:91:8d:05:3e:45:00:a5:17:87:8f:
                    bb:17:af:38:fc:55:4c:27:49:6a:c9:14:e6:98:4b:
                    a9:89:38:30:1c:21:51:36:5e:e8:7f:6d:ea:7a:54:
                    3c:b3:bf:f0:5e:ea:93:9c:60:15:25:b7:fc:54:75:
                    4b:9e:68:b6:52:28:9b:dc:33:fa:2a:b0:d7:31:34:
                    34:d0:65:1b:b5:bc:96:bc:09:e1:c3:ef:c4:7c:e3:
                    03:d2:ea:ef:97:50:9f:2f:91:d8:ed:d5:66:73:ec:
                    d3:e2:02:c5:b6:70:d5:a8:be:56:96:88:77:21:28:
                    56:9b:da:90:51:f1:41:bd:a1:75:0d:e6:33:a2:c2:
                    ff:d2:47:20:9a:9c:9a:7b:3f:2e:a8:28:84:0d:c9:
                    e3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:50:FE:3F:50:64:3F:8E:B2:42:5F:84:36:23:3D:C1:E5:DF:86:D6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EVD-P1BkP46yQl-ENiM9weXfhtY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:457::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:26:54:84:74:ce:96:69:29:9f:f8:37:7a:8e:1f:fb:24:9a:
         d2:9a:28:08:31:6e:20:7d:bf:fb:7f:06:8a:a4:7c:86:b9:cf:
         1a:b3:38:0a:d0:16:4f:a8:29:4e:b6:8d:e4:21:23:51:20:38:
         c9:0c:a5:98:8c:bc:44:3b:64:b8:9d:7a:c3:f7:ca:eb:6a:ea:
         7a:2b:4f:9f:d6:9e:e4:da:56:3a:e3:1e:42:06:f8:5a:70:1b:
         9e:e8:5a:30:3d:9f:0b:5f:28:25:98:e8:01:db:b7:f3:97:11:
         34:7e:50:ae:99:b2:7e:e4:1f:06:87:11:2a:c5:2b:0c:38:4e:
         e7:b6:45:b6:2c:54:5b:93:bd:9e:0b:cb:a2:89:b3:71:73:88:
         cb:50:57:4a:20:f6:9b:44:8b:78:9f:b0:b2:86:f3:fc:c5:4b:
         19:e1:10:32:4e:bf:16:3d:47:58:2d:6d:47:c9:87:b5:d7:43:
         8f:83:cd:a4:d5:c2:fc:d9:7e:3a:a5:f6:98:0b:74:3f:ba:33:
         94:0d:9e:9b:91:e8:e3:b2:ca:82:1d:0a:ea:88:37:84:50:42:
         03:c1:6a:99:e7:7a:43:e9:a2:e5:22:e1:07:a2:e2:90:d2:02:
         fb:5c:57:92:57:a7:31:52:67:ee:8b:ac:3a:a6:78:a3:20:e3:
         8c:30:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----