Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GB27rBsWq41FPtEEsYi8iLUw8s8.roa
File:                     GB27rBsWq41FPtEEsYi8iLUw8s8.roa (raw, json)
Hash identifier:          3Gq1f9yX0zjUjPK0tRV5Va4VSDMe09ISYZIp03lx9gs=
Subject key identifier:   18:1D:BB:AC:1B:16:AB:8D:45:3E:D1:04:B1:88:BC:88:B5:30:F2:CF
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018201A424DE4FC01D7C9280948880627264
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GB27rBsWq41FPtEEsYi8iLUw8s8.roa
Signing time:             Fri 15 Jul 2022 11:35:10 +0000
ROA not before:           Fri 15 Jul 2022 11:35:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203868
IP address blocks:        2a06:a005:d2a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:01:a4:24:de:4f:c0:1d:7c:92:80:94:88:80:62:72:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 15 11:35:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=181dbbac1b16ab8d453ed104b188bc88b530f2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b6:b4:ce:ae:b5:c3:6a:a3:1e:6b:cd:d6:93:
                    44:3f:04:04:18:09:f6:dd:73:4f:9d:68:fd:fe:2e:
                    d1:6f:19:a3:b3:26:ee:0f:dd:6a:98:cf:31:0d:54:
                    1a:64:9a:43:1a:1f:55:68:3e:88:ce:5a:b3:74:b4:
                    93:ea:1d:11:93:36:2d:67:2f:a9:c1:25:45:3d:ad:
                    f8:4a:1f:06:84:33:37:58:fa:02:c7:f1:ae:3a:e0:
                    fd:f0:e4:18:37:dc:20:1c:2f:c4:93:c8:71:7f:83:
                    64:56:66:d6:13:df:bc:da:df:32:c2:38:e3:3e:2d:
                    f3:86:b2:02:c8:af:39:44:bd:3f:49:73:50:57:a4:
                    6f:8d:bb:cf:e2:3e:a1:86:89:3c:28:01:b4:b9:69:
                    fd:8f:0b:0d:fc:1c:d9:be:e5:63:89:05:9b:40:2c:
                    01:29:ec:58:de:b0:3f:0d:48:8f:39:74:1b:4c:36:
                    89:9b:18:25:93:96:ba:ec:59:ae:15:0b:19:d3:60:
                    41:10:41:f8:4c:f5:fb:1c:8e:ad:af:d1:ef:03:21:
                    65:9a:52:31:2b:8f:d9:8f:97:85:81:6d:fc:d8:78:
                    13:b9:c1:5a:49:36:0d:4b:d0:55:0f:17:81:e2:d0:
                    4f:01:91:d1:f0:a3:69:b6:8f:03:ee:55:cc:6e:c2:
                    80:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1D:BB:AC:1B:16:AB:8D:45:3E:D1:04:B1:88:BC:88:B5:30:F2:CF
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GB27rBsWq41FPtEEsYi8iLUw8s8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:b2:5e:e3:f9:74:7a:10:43:92:3d:5b:26:0f:41:d7:fd:88:
         57:18:ca:68:7f:79:dd:68:62:22:65:3c:9a:c1:e9:7b:d1:50:
         f2:5c:79:f6:b9:be:bc:32:02:23:d0:14:0c:bd:e7:0b:31:ae:
         ba:c0:40:83:5d:a4:22:59:b7:39:44:53:17:f1:c3:4b:7f:f3:
         1b:09:46:b4:58:f9:45:73:fc:3f:f5:cc:05:55:e3:b5:74:07:
         7b:1b:52:88:30:a7:f8:b3:06:6b:2a:82:03:88:c5:02:66:de:
         01:ec:ae:67:29:3b:10:2f:ba:4c:38:d3:bb:4c:96:85:20:a4:
         a1:b7:ab:d3:e9:00:5c:a3:a6:9c:5f:c6:73:34:62:fe:bd:dd:
         a8:7e:0b:25:21:19:98:13:a4:da:b0:de:9f:4b:bc:5c:2e:d3:
         2e:de:ca:3a:fd:ae:75:b5:44:e5:5f:bd:be:4f:b1:db:a5:c9:
         9d:82:6b:ce:d8:1f:30:18:e2:a6:6a:78:a2:df:6f:e0:9d:04:
         cb:0b:b7:0b:13:f0:71:10:0d:72:ff:44:e4:59:47:33:b0:2e:
         16:16:e2:50:cd:19:e7:96:82:d4:db:dd:4e:01:6d:f5:40:7a:
         c3:29:a3:d6:b9:bd:c1:b4:d4:a2:55:f4:12:51:52:00:a0:85:
         5f:17:09:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----