Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FRk_Zx7gVlMcR-o4SH4ELTHPqm0.roa
File:                     FRk_Zx7gVlMcR-o4SH4ELTHPqm0.roa (raw, json)
Hash identifier:          jiVw0GvDtl30MFV35qjrY0WgcjY7hLdh79UPZziIktY=
Subject key identifier:   15:19:3F:67:1E:E0:56:53:1C:47:EA:38:48:7E:04:2D:31:CF:AA:6D
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181F6EC4E467611754F54BE6BE7C91DC709
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FRk_Zx7gVlMcR-o4SH4ELTHPqm0.roa
Signing time:             Wed 13 Jul 2022 09:38:10 +0000
ROA not before:           Wed 13 Jul 2022 09:38:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203915
IP address blocks:        2a06:a005:11f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f6:ec:4e:46:76:11:75:4f:54:be:6b:e7:c9:1d:c7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 13 09:38:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15193f671ee056531c47ea38487e042d31cfaa6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:d4:8f:27:f0:73:dc:35:78:9f:97:9e:03:
                    b2:56:6c:86:5e:ae:db:ff:2e:54:35:15:f1:bb:dc:
                    73:82:75:43:3c:e6:ff:db:86:42:49:fe:0d:09:98:
                    3b:52:2d:b4:f2:d7:30:53:6a:1f:57:48:70:b9:a8:
                    90:38:01:4e:fb:81:16:07:64:9f:09:15:a8:47:39:
                    62:df:03:ec:a3:38:df:47:29:b0:ef:de:59:05:20:
                    84:94:14:72:52:fd:fa:2d:42:a2:d2:22:01:32:3e:
                    ce:ae:e4:39:77:d3:55:eb:f9:cc:83:e2:78:72:f0:
                    c3:7f:14:d3:a9:6a:d0:16:19:43:6a:48:91:ca:7d:
                    e1:62:40:68:73:4d:52:76:0c:1f:39:00:7e:e0:34:
                    94:2a:09:92:da:15:77:a5:a1:3f:6b:1f:6c:4b:01:
                    0f:49:aa:90:cd:6f:91:a5:e2:75:a0:a7:96:12:fa:
                    35:5d:78:a8:8d:d8:3f:44:bd:95:81:e0:ac:3b:e4:
                    0f:02:be:c6:bd:ef:f3:0e:f4:5d:e1:57:bd:b2:d4:
                    e2:a3:58:e4:8c:2b:fb:92:2e:dc:41:79:3a:b5:72:
                    bc:6b:e0:2e:c0:87:1f:98:a9:7c:84:5d:75:6a:72:
                    b7:7e:4d:d2:8b:5d:62:ee:f8:91:40:d3:b8:43:c2:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:19:3F:67:1E:E0:56:53:1C:47:EA:38:48:7E:04:2D:31:CF:AA:6D
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FRk_Zx7gVlMcR-o4SH4ELTHPqm0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:11f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:3b:07:93:ae:93:8b:ef:c6:1f:4f:62:c0:71:d5:ce:63:4c:
         5a:9b:8d:1c:09:79:3f:83:cc:97:b0:b2:2b:bf:ba:c9:a9:5f:
         89:ab:a3:af:6d:84:ce:ce:24:fd:31:f3:60:ff:c9:5b:49:f6:
         c5:80:7c:d9:4b:6a:f0:bf:83:2a:50:bd:b0:b9:9c:34:3c:d3:
         0a:70:21:50:88:01:f4:44:48:c7:58:c2:03:66:be:9c:24:4c:
         1a:c1:ef:05:63:37:2f:e5:49:ec:f6:88:6a:61:29:1e:f0:27:
         90:84:3e:7b:9a:cc:f4:f7:e6:08:73:c7:fd:de:4c:e0:78:c4:
         24:cf:dd:f4:b0:83:dc:f1:ad:b4:d9:4e:5f:c4:fd:8c:45:64:
         11:67:ce:43:b4:72:fe:fc:f1:b2:75:88:e5:99:49:39:3e:7e:
         c1:fc:8c:81:da:ad:c0:c8:e9:24:08:70:8c:5a:d3:c1:d4:ae:
         0f:a9:13:1e:88:7a:24:8a:45:5c:52:93:ca:1f:b6:cd:02:bc:
         23:04:68:96:fa:a6:61:b6:92:04:f3:45:29:5f:7d:73:52:1b:
         01:68:36:ff:d8:43:61:49:11:61:01:b5:c3:1d:f4:e9:a6:41:
         ee:a3:e1:eb:45:12:9b:09:52:93:b4:16:95:02:32:61:6a:90:
         c6:f8:6d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----