Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GPuvWKWnVDjlOhCtl9C_i8jS88g.roa
File:                     GPuvWKWnVDjlOhCtl9C_i8jS88g.roa (raw, json)
Hash identifier:          eeqF4KMAWKkWufM1WZKpydLKqi8/Nac9oCgr52KwPl4=
Subject key identifier:   18:FB:AF:58:A5:A7:54:38:E5:3A:10:AD:97:D0:BF:8B:C8:D2:F3:C8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1774F27B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GPuvWKWnVDjlOhCtl9C_i8jS88g.roa
Signing time:             Mon 28 Mar 2022 23:23:40 +0000
ROA not before:           Mon 28 Mar 2022 23:23:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211139
IP address blocks:        2a06:a005:2c0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393540219 (0x1774f27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Mar 28 23:23:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=18fbaf58a5a75438e53a10ad97d0bf8bc8d2f3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:c3:5d:44:c8:95:c7:77:90:32:30:90:8f:
                    5f:31:dd:2d:19:90:d0:b3:6d:ad:ab:e0:57:26:2b:
                    32:7c:ba:16:fa:63:b4:15:f3:64:51:7a:52:c9:d6:
                    1c:5d:65:d0:7f:37:9e:97:b5:e5:a9:6d:c7:a9:68:
                    86:2b:f1:20:13:14:1c:f1:ce:09:85:b2:19:25:71:
                    fa:09:34:6e:88:f5:b6:4e:89:8b:31:90:ae:fb:de:
                    48:66:41:93:87:95:65:9a:56:3f:06:6c:c0:48:3f:
                    63:fa:40:0f:64:20:78:cc:5c:03:9b:52:dc:2c:83:
                    6b:30:1f:82:62:b5:84:7d:15:40:b7:0c:50:6d:14:
                    5f:52:66:60:11:58:2a:c2:46:e7:ea:eb:e4:c4:c8:
                    93:b4:1a:7b:5d:5e:cc:17:58:48:6d:4b:fb:c7:d0:
                    d9:00:81:9a:1c:9f:90:8c:57:43:e5:75:18:05:19:
                    45:98:a8:19:9f:1d:7b:61:3a:f9:f4:fa:3b:d8:b7:
                    fa:29:b5:03:07:98:6c:82:85:60:09:97:34:72:93:
                    59:03:ac:8c:a0:0b:e9:1c:35:1d:c2:b2:03:4d:89:
                    46:ef:8b:cf:bf:ed:c0:f1:1a:02:91:de:be:eb:c8:
                    1f:34:b6:27:42:42:ab:ed:7c:67:ca:d0:f7:63:e8:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FB:AF:58:A5:A7:54:38:E5:3A:10:AD:97:D0:BF:8B:C8:D2:F3:C8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GPuvWKWnVDjlOhCtl9C_i8jS88g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2a:c7:80:87:39:2e:17:9f:03:17:08:0c:21:7a:d8:65:38:a3:
         b0:dc:f4:83:5a:a4:9f:17:9f:e9:f4:4b:12:a3:24:d1:37:53:
         e5:de:03:aa:29:64:ae:d9:d5:9d:2d:65:95:98:99:21:c4:2e:
         c7:99:68:2d:ea:d2:81:ed:13:c1:fb:6c:74:5b:89:bd:38:d8:
         e4:b5:f2:89:18:e8:8f:9d:5c:7d:2c:51:25:e9:9d:3d:24:91:
         46:aa:58:bb:34:56:46:e8:e5:04:ce:de:24:b0:a0:60:01:42:
         19:d3:d8:27:de:18:ce:f8:5a:35:fd:ba:78:97:85:e2:40:3b:
         0d:6b:2f:22:15:42:c2:63:7d:e0:54:3b:b1:07:a0:5b:76:7f:
         0c:06:64:c7:5c:72:93:5f:78:f1:25:90:75:1d:8c:0d:03:77:
         0e:ca:8f:b6:b1:fb:a2:02:a9:a0:bf:ac:fe:19:3c:87:06:eb:
         4f:d5:ec:54:b2:13:52:32:c1:64:83:6a:4f:bf:2b:8e:9d:12:
         3a:12:8f:c5:4a:f7:e9:7b:24:c8:82:14:52:5a:73:4c:a0:55:
         d6:2a:00:50:87:38:c4:8d:de:af:a8:b9:7a:5e:58:30:f6:b1:
         5f:0d:4b:92:22:f0:b7:6c:6c:8b:5f:2c:14:04:c5:9d:64:09:
         4c:fb:c5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----