Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GVhSewDMYyhdggbb1Uy293-wnzo.roa
File:                     GVhSewDMYyhdggbb1Uy293-wnzo.roa (raw, json)
Hash identifier:          hvp1yAUoa+iJf9+7RVJ1DqVabi+C87EhO4mngAWjkb8=
Subject key identifier:   19:58:52:7B:00:CC:63:28:5D:82:06:DB:D5:4C:B6:F7:7F:B0:9F:3A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01848F6AE4EF8A67093795340F931588A70D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GVhSewDMYyhdggbb1Uy293-wnzo.roa
Signing time:             Sat 19 Nov 2022 10:24:18 +0000
ROA not before:           Sat 19 Nov 2022 10:24:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206131
IP address blocks:        2a06:a005:1084::/48 maxlen: 48
                          2a06:a005:1082::/48 maxlen: 48
                          2a06:a005:1c78::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:8f:6a:e4:ef:8a:67:09:37:95:34:0f:93:15:88:a7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 19 10:24:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1958527b00cc63285d8206dbd54cb6f77fb09f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:94:c9:a9:e6:15:27:2c:bf:80:6c:97:ea:
                    e2:e6:de:a6:72:36:98:47:92:60:5e:3c:53:39:50:
                    3a:62:4a:1e:b9:bd:ee:13:16:34:69:c6:b1:55:25:
                    f8:60:43:77:9b:43:cc:95:de:f9:6d:26:1a:9c:4a:
                    89:9f:11:cf:74:60:30:ba:b1:5d:e0:a0:74:27:98:
                    f3:35:20:bf:c3:94:1e:cf:67:1c:c4:e2:b8:dd:79:
                    f1:f9:25:8c:1e:82:96:b5:0e:9d:42:cc:98:34:46:
                    08:77:0f:23:0a:bf:87:4a:11:8b:82:d7:21:fd:4d:
                    7c:18:ab:d9:fc:08:f6:61:73:6c:c4:7e:bd:98:86:
                    d7:3f:ba:a7:f6:81:86:9d:05:93:12:22:a5:eb:c5:
                    2e:ab:a6:2f:a5:68:7c:41:7a:13:16:00:1f:2d:d8:
                    ee:ef:f9:d2:87:42:ed:46:bd:c0:c8:3a:2c:32:b4:
                    b9:47:34:1f:98:6c:51:65:3b:fc:7e:26:03:b9:3b:
                    97:5c:90:df:27:af:a7:d2:9c:b4:db:14:19:78:79:
                    d6:16:c0:05:94:e9:db:cd:25:5a:de:25:cd:3c:c3:
                    f5:7e:71:5d:9b:de:33:65:b9:b4:5b:c1:38:29:6b:
                    04:21:a6:4d:99:9f:d3:d7:e2:0b:5d:37:a1:e4:85:
                    89:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:58:52:7B:00:CC:63:28:5D:82:06:DB:D5:4C:B6:F7:7F:B0:9F:3A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GVhSewDMYyhdggbb1Uy293-wnzo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1082::/48
                  2a06:a005:1084::/48
                  2a06:a005:1c78::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:51:c4:a8:2f:06:21:a7:48:57:9b:c4:32:93:16:73:a9:db:
         69:60:65:e3:54:2a:0e:f8:03:9d:32:c2:da:aa:cc:30:c8:01:
         6f:b6:6b:55:47:df:15:bf:a7:ee:56:ca:b0:65:b8:e1:f1:23:
         28:04:df:f0:46:4b:f5:e3:a5:25:15:52:e4:45:55:ac:39:5f:
         4f:0c:eb:b4:3a:0b:88:a8:57:6b:ef:0c:83:1c:8c:d1:42:c7:
         0d:cf:21:12:0a:9b:da:fd:70:ad:fa:a2:7b:f4:96:98:dd:98:
         3a:56:9b:0c:8c:39:6f:d1:f9:38:9b:67:ba:29:81:92:67:5d:
         fd:fe:3f:7f:9d:c3:87:e8:a4:5b:64:7e:9c:5a:0e:eb:d0:8f:
         a9:26:bb:9d:d8:af:0b:88:8d:96:e7:de:53:5b:a9:13:44:dc:
         1a:a4:c1:10:0f:7b:7d:c4:41:f2:46:8d:8f:86:d8:f3:7c:5b:
         46:df:2e:3f:07:1d:9a:30:1f:48:eb:25:ee:48:8e:a5:d8:73:
         05:e6:fb:21:2a:b3:f6:1b:76:8e:b9:04:b0:ff:10:04:a8:a5:
         1c:55:45:c8:93:25:8d:e6:81:98:00:91:c2:01:5b:a7:bb:72:
         a5:95:78:89:b3:1a:5b:d8:40:26:f3:74:25:d9:5e:75:51:e0:
         38:0b:7f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----